Warning: Permanently added '[localhost]:61716' (ECDSA) to the list of known hosts. 2022/10/03 18:20:00 fuzzer started 2022/10/03 18:20:01 dialing manager at localhost:35095 syzkaller login: [ 41.905064] cgroup: Unknown subsys name 'net' [ 42.023875] cgroup: Unknown subsys name 'rlimit' 2022/10/03 18:20:16 syscalls: 2215 2022/10/03 18:20:16 code coverage: enabled 2022/10/03 18:20:16 comparison tracing: enabled 2022/10/03 18:20:16 extra coverage: enabled 2022/10/03 18:20:16 setuid sandbox: enabled 2022/10/03 18:20:16 namespace sandbox: enabled 2022/10/03 18:20:16 Android sandbox: enabled 2022/10/03 18:20:16 fault injection: enabled 2022/10/03 18:20:16 leak checking: enabled 2022/10/03 18:20:16 net packet injection: enabled 2022/10/03 18:20:16 net device setup: enabled 2022/10/03 18:20:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 18:20:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 18:20:16 USB emulation: enabled 2022/10/03 18:20:16 hci packet injection: enabled 2022/10/03 18:20:16 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 18:20:16 802.15.4 emulation: enabled 2022/10/03 18:20:16 fetching corpus: 50, signal 19093/20976 (executing program) 2022/10/03 18:20:16 fetching corpus: 100, signal 34206/37747 (executing program) 2022/10/03 18:20:16 fetching corpus: 150, signal 43560/48685 (executing program) 2022/10/03 18:20:17 fetching corpus: 200, signal 51254/57893 (executing program) 2022/10/03 18:20:17 fetching corpus: 250, signal 55492/63654 (executing program) 2022/10/03 18:20:17 fetching corpus: 300, signal 61257/70800 (executing program) 2022/10/03 18:20:17 fetching corpus: 350, signal 65824/76785 (executing program) 2022/10/03 18:20:17 fetching corpus: 400, signal 71320/83575 (executing program) 2022/10/03 18:20:17 fetching corpus: 450, signal 76673/90172 (executing program) 2022/10/03 18:20:17 fetching corpus: 500, signal 82886/97534 (executing program) 2022/10/03 18:20:17 fetching corpus: 550, signal 87306/103121 (executing program) 2022/10/03 18:20:18 fetching corpus: 600, signal 90914/107892 (executing program) 2022/10/03 18:20:18 fetching corpus: 650, signal 92858/111066 (executing program) 2022/10/03 18:20:18 fetching corpus: 700, signal 95237/114614 (executing program) 2022/10/03 18:20:18 fetching corpus: 750, signal 97326/117890 (executing program) 2022/10/03 18:20:18 fetching corpus: 800, signal 99871/121541 (executing program) 2022/10/03 18:20:18 fetching corpus: 850, signal 102252/125038 (executing program) 2022/10/03 18:20:18 fetching corpus: 900, signal 105526/129254 (executing program) 2022/10/03 18:20:18 fetching corpus: 950, signal 106686/131573 (executing program) 2022/10/03 18:20:18 fetching corpus: 1000, signal 108193/134153 (executing program) 2022/10/03 18:20:19 fetching corpus: 1050, signal 109686/136756 (executing program) 2022/10/03 18:20:19 fetching corpus: 1100, signal 111928/139938 (executing program) 2022/10/03 18:20:19 fetching corpus: 1150, signal 114542/143392 (executing program) 2022/10/03 18:20:19 fetching corpus: 1200, signal 116199/146084 (executing program) 2022/10/03 18:20:19 fetching corpus: 1250, signal 117214/148166 (executing program) 2022/10/03 18:20:19 fetching corpus: 1300, signal 119933/151694 (executing program) 2022/10/03 18:20:19 fetching corpus: 1350, signal 121304/154027 (executing program) 2022/10/03 18:20:19 fetching corpus: 1400, signal 122533/156222 (executing program) 2022/10/03 18:20:19 fetching corpus: 1450, signal 124189/158731 (executing program) 2022/10/03 18:20:20 fetching corpus: 1500, signal 125612/161062 (executing program) 2022/10/03 18:20:20 fetching corpus: 1550, signal 127068/163430 (executing program) 2022/10/03 18:20:20 fetching corpus: 1600, signal 128283/165568 (executing program) 2022/10/03 18:20:20 fetching corpus: 1650, signal 129121/167358 (executing program) 2022/10/03 18:20:20 fetching corpus: 1700, signal 131055/170039 (executing program) 2022/10/03 18:20:20 fetching corpus: 1750, signal 131784/171750 (executing program) 2022/10/03 18:20:20 fetching corpus: 1800, signal 132763/173658 (executing program) 2022/10/03 18:20:20 fetching corpus: 1850, signal 133821/175596 (executing program) 2022/10/03 18:20:20 fetching corpus: 1900, signal 135859/178269 (executing program) 2022/10/03 18:20:21 fetching corpus: 1950, signal 137990/180964 (executing program) 2022/10/03 18:20:21 fetching corpus: 2000, signal 140627/184063 (executing program) 2022/10/03 18:20:21 fetching corpus: 2050, signal 142914/186880 (executing program) 2022/10/03 18:20:21 fetching corpus: 2100, signal 143595/188460 (executing program) 2022/10/03 18:20:21 fetching corpus: 2150, signal 144359/190053 (executing program) 2022/10/03 18:20:21 fetching corpus: 2200, signal 145074/191620 (executing program) 2022/10/03 18:20:21 fetching corpus: 2250, signal 146338/193553 (executing program) 2022/10/03 18:20:21 fetching corpus: 2300, signal 147714/195617 (executing program) 2022/10/03 18:20:22 fetching corpus: 2350, signal 148622/197334 (executing program) 2022/10/03 18:20:22 fetching corpus: 2400, signal 149293/198848 (executing program) 2022/10/03 18:20:22 fetching corpus: 2450, signal 150602/200770 (executing program) 2022/10/03 18:20:22 fetching corpus: 2500, signal 151656/202582 (executing program) 2022/10/03 18:20:22 fetching corpus: 2550, signal 152266/204026 (executing program) 2022/10/03 18:20:22 fetching corpus: 2600, signal 153107/205573 (executing program) 2022/10/03 18:20:22 fetching corpus: 2650, signal 153950/207158 (executing program) 2022/10/03 18:20:22 fetching corpus: 2700, signal 155889/209402 (executing program) 2022/10/03 18:20:22 fetching corpus: 2750, signal 156731/210942 (executing program) 2022/10/03 18:20:23 fetching corpus: 2800, signal 158089/212788 (executing program) 2022/10/03 18:20:23 fetching corpus: 2850, signal 158919/214298 (executing program) 2022/10/03 18:20:23 fetching corpus: 2900, signal 159734/215809 (executing program) 2022/10/03 18:20:23 fetching corpus: 2950, signal 160467/217214 (executing program) 2022/10/03 18:20:23 fetching corpus: 3000, signal 160996/218491 (executing program) 2022/10/03 18:20:23 fetching corpus: 3050, signal 161704/219883 (executing program) 2022/10/03 18:20:23 fetching corpus: 3100, signal 162714/221448 (executing program) 2022/10/03 18:20:23 fetching corpus: 3150, signal 163745/222974 (executing program) 2022/10/03 18:20:24 fetching corpus: 3200, signal 166271/225380 (executing program) 2022/10/03 18:20:24 fetching corpus: 3250, signal 167218/226825 (executing program) 2022/10/03 18:20:24 fetching corpus: 3300, signal 167886/228090 (executing program) 2022/10/03 18:20:24 fetching corpus: 3350, signal 169096/229684 (executing program) 2022/10/03 18:20:24 fetching corpus: 3400, signal 169768/231004 (executing program) 2022/10/03 18:20:24 fetching corpus: 3450, signal 170669/232407 (executing program) 2022/10/03 18:20:24 fetching corpus: 3500, signal 171103/233587 (executing program) 2022/10/03 18:20:25 fetching corpus: 3550, signal 171596/234773 (executing program) 2022/10/03 18:20:25 fetching corpus: 3600, signal 172241/236058 (executing program) 2022/10/03 18:20:25 fetching corpus: 3650, signal 172847/237280 (executing program) 2022/10/03 18:20:25 fetching corpus: 3700, signal 173772/238617 (executing program) 2022/10/03 18:20:25 fetching corpus: 3750, signal 174228/239683 (executing program) 2022/10/03 18:20:25 fetching corpus: 3800, signal 175072/240963 (executing program) 2022/10/03 18:20:25 fetching corpus: 3850, signal 175927/242250 (executing program) 2022/10/03 18:20:25 fetching corpus: 3900, signal 176650/243465 (executing program) 2022/10/03 18:20:26 fetching corpus: 3950, signal 178076/245045 (executing program) 2022/10/03 18:20:26 fetching corpus: 4000, signal 178666/246134 (executing program) 2022/10/03 18:20:26 fetching corpus: 4050, signal 179711/247495 (executing program) 2022/10/03 18:20:26 fetching corpus: 4100, signal 180536/248725 (executing program) 2022/10/03 18:20:26 fetching corpus: 4150, signal 181425/249913 (executing program) 2022/10/03 18:20:26 fetching corpus: 4200, signal 182390/251146 (executing program) 2022/10/03 18:20:26 fetching corpus: 4250, signal 182881/252150 (executing program) 2022/10/03 18:20:26 fetching corpus: 4300, signal 183621/253316 (executing program) 2022/10/03 18:20:26 fetching corpus: 4350, signal 184911/254678 (executing program) 2022/10/03 18:20:27 fetching corpus: 4400, signal 185973/255939 (executing program) 2022/10/03 18:20:27 fetching corpus: 4450, signal 186652/257030 (executing program) 2022/10/03 18:20:27 fetching corpus: 4500, signal 187194/258041 (executing program) 2022/10/03 18:20:27 fetching corpus: 4550, signal 187937/259081 (executing program) 2022/10/03 18:20:27 fetching corpus: 4600, signal 188869/260225 (executing program) 2022/10/03 18:20:27 fetching corpus: 4650, signal 189918/261386 (executing program) 2022/10/03 18:20:27 fetching corpus: 4700, signal 190519/262383 (executing program) 2022/10/03 18:20:27 fetching corpus: 4750, signal 191159/263390 (executing program) 2022/10/03 18:20:28 fetching corpus: 4800, signal 191860/264448 (executing program) 2022/10/03 18:20:28 fetching corpus: 4850, signal 192800/265597 (executing program) 2022/10/03 18:20:28 fetching corpus: 4900, signal 193365/266545 (executing program) 2022/10/03 18:20:28 fetching corpus: 4950, signal 194227/267610 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/268551 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/269300 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/270003 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/270736 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/271457 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/272200 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/272928 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/273658 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/274408 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/275121 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/275867 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/276590 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/277326 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/278089 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/278823 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/279552 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/280269 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/280989 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/281754 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/282499 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/283234 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/283965 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/284717 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/285467 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/286198 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/286932 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/287669 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/288388 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/289147 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/289848 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/290588 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/291344 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/292119 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/292876 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/293636 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/294356 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/295092 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/295824 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/296537 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/297294 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/298020 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/298744 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/299525 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/300254 (executing program) 2022/10/03 18:20:28 fetching corpus: 5000, signal 194783/301007 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/301758 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/302498 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/303240 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/303959 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/304710 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/305474 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/306223 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/306950 (executing program) 2022/10/03 18:20:29 fetching corpus: 5000, signal 194783/306950 (executing program) 2022/10/03 18:20:31 starting 8 fuzzer processes 18:20:31 executing program 0: fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x3, 0x1, {0x8, @usage=0x9, 0x0, 0x8, 0x728, 0x8001, 0x9, 0xd2, 0x4, @struct={0x5}, 0x0, 0x9, [0x7, 0x7, 0x7fffffff, 0xcf, 0x80000001, 0xffff]}, {0x8, @struct={0x4, 0x8}, 0x0, 0x8, 0x8, 0xffffffffffffff7f, 0x7, 0x80000000, 0x8, @struct={0x3, 0x2}, 0x928, 0x1ff, [0x1000, 0x100, 0x1, 0x7ff, 0x6f, 0x3]}, {0x6, @struct={0x1, 0x8}, 0x0, 0x8, 0xa97, 0x8, 0x2, 0xfff, 0x20, @usage=0xb0d, 0x5, 0x100, [0x200, 0x2, 0xffff, 0x800, 0x7f, 0x7ff]}, {0x3, 0x4, 0x9}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000400)={0x1, 0x3, {0x2000000, @struct={0x3, 0x3f}, r0, 0x8001, 0x80000001, 0x7fffffff, 0x73, 0x20, 0x10, @usage=0x10000000, 0xb99, 0x1, [0x5, 0x6, 0xe52, 0x1, 0x7, 0x4]}, {0x100000000, @struct={0x1, 0x63c}, 0x0, 0x4, 0x8, 0xffffffffffffff4d, 0xfffffffffffffffd, 0xffffffff, 0x50, @struct={0x1000, 0x3}, 0x0, 0x8, [0x5, 0x80, 0x6, 0xfff, 0x100000001, 0x4]}, {0x2, @usage=0x3, 0x0, 0x41f0200, 0x80000001, 0x1900da62, 0x5, 0x9, 0x30, @struct={0x1, 0x2}, 0xa006, 0x7, [0x1, 0xa4b, 0x6, 0x5, 0x401, 0x1e5]}, {0x9, 0x8, 0x3}}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000800)={0x0, 0x0, @status={[0xaba, 0x401, 0x5, 0x3, 0x5, 0x5]}, [0x8, 0x0, 0x8, 0x6, 0x80000001, 0x5, 0x5, 0x1ff, 0x1, 0x5, 0x1dd77d45, 0xff, 0x7fffffff, 0x3, 0x5, 0x8, 0x1f, 0x5, 0x3, 0x5, 0x10001, 0x7ff, 0x20, 0xffffffff00000000, 0x7fffffff, 0x80000001, 0x7fffffff, 0x8, 0x9, 0x4, 0x80000001, 0x7, 0xffffffffffff0000, 0x3, 0x10001, 0x200, 0x0, 0x9, 0xd4c, 0x0, 0xff, 0x18000000000, 0x9000000000000000, 0x8000, 0x1, 0x1, 0xfb5, 0x100000000, 0x5, 0x44b8, 0x6, 0x6, 0x4, 0x2, 0x7fff, 0x9, 0x7, 0x80000000, 0x1, 0x5, 0x8, 0x6, 0x5, 0xe6a]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001240)={r1, "ddfa35784e4209c25940ee6a3de2e45c"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002240)={r3, 0x13, 0x80000000000000}) r4 = accept4$inet(r2, &(0x7f0000002640)={0x2, 0x0, @empty}, &(0x7f0000002680)=0x10, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f00000026c0)) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000002740)={0x5, 0x38, '\x00', 0x1, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002780)={0x0, 0x0}, &(0x7f00000027c0)=0xc) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000002800)={0x50, 0x7d, 0x1, {{0x0, 0x37, 0x5, 0x6, {0x8, 0x2, 0x1}, 0x20000000, 0x84a6, 0x4a, 0xfffffffffffffffe, 0x1, '\x00', 0x1, '\x00', 0x1, '\x00', 0x1, '\x00'}, 0x4, '@@{^', r5, 0xee01, 0xee01}}, 0x50) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000002880), 0x40400, 0x0) readahead(r6, 0xfffffffffffffffa, 0x0) r7 = dup3(r4, r2, 0x80000) sendfile(r4, r7, 0x0, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f00000028c0)={@desc={0x1, 0x0, @desc3}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002900), 0x8a00, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000002940)) 18:20:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x101080) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x3) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private1, @in=@local, 0x4e21, 0x9ce0, 0x4e22, 0x7, 0x2, 0x180, 0x0, 0x3c, 0x0, r1}, {0x81, 0x8, 0x7f, 0x3, 0x7f, 0x2, 0x2, 0x4}, {0x8, 0x9, 0x5, 0x20}, 0x7, 0x0, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x2, 0x3, 0x8, 0x7, 0x3f}}, 0xe8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000340)={0x200, 0x50, '\x00', 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setxattr$incfs_size(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) r4 = syz_mount_image$iso9660(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x80000000, 0x5, &(0x7f00000007c0)=[{&(0x7f00000004c0)="e92f515ea137e7d16f7a50c07506ccc3e33a80b087ed9e817db8eb70c87faaa4bc03fdd31f75702eb9961f7fff3ed51969ed630f4db4271857c09602e448eb210bf12459684be5c2fd2683ba6c0f107d29845a9e45a67fbb77586ed16e05fc3d019edfd14f95b2920cee1792f560a3e3e40bfec7ebbbe45d", 0x78}, {&(0x7f0000000540)="1497797bb72dcb821d1eea3dde7274122331236ce072c5688e036f25096d699125144b73984aaa3c094fdcf572c492ed1768ae55dcd664795b3217558de758c6dd2f91e47b5586039122f7e610a6", 0x4e, 0x8}, {&(0x7f00000005c0)="49ad10a3cfb12b104bdc1e9b0e775e24443bc92fb7accce1bf846aba0f3a77087d00bf530b83550b80", 0x29, 0x352}, {&(0x7f0000000600)="a0d5a2e464904f51bbd254641899cde7cab84b064b52366cbf3de80bef4971c16e1668d20ae418cd4fa7f85a8b24a318ef30ae4b095e85b9365de488d0080ca5d3147d8e6daafa71cef29f46a02ad3abfbe7adb27637596366a5a7d758e5b54eb9cdfda5b29c328dd7516b89fe31d02003d962e56f9304968e68a29c6af976a12776d5bfa7f15161c5f4b13c5f40a8d21cb1e3d9b91d621d3c176ab65d5333079ada1879980f34940c11ec4a754c5c46406beb0b01ccc55df39ca041f22e172e0e296b61685c0be45317ed02bf512dd4150adbd18fb1", 0xd6}, {&(0x7f0000000700)="ef52b818c78a7f6992eba03c065b0ebaa00713c6e8d0688d9a37d1a300b5fc5a5cdaea86a742f3ddbef8a81d8c096834c5fa6deaccc3030b8cbd62f00e7610c961b9c0b1f6a5c6dec7efa76bc050e67ca1b0587608f8e8c44805c509037183488f8cab70678e0dc5f17aba9f28a31e016ce5b2dfbb17abbdb172725bfe43fee8d711a51b76376d277d041c47a125585e468337cc72b86d6d3147d74ada4e3ea974a2fed999f9e2e5ae691eff7ccbb1ea1f208e", 0xb3, 0x6}], 0x1201004, &(0x7f00000008c0)={[{@nocompress}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_user={'obj_user', 0x3d, '\\\x9b'}}, {@dont_appraise}]}) setxattr$incfs_size(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980), &(0x7f00000009c0)=0x7fffffff, 0x8, 0x7755dd4b5be92235) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000a00)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)=""/29, 0x1d}, {&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f0000000bc0)=""/133, 0x85}, {&(0x7f0000000c80)=""/175, 0xaf}], 0x4, &(0x7f0000000d80)=""/186, 0xba}, 0x22) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000e80)={{0xa, 0x4e22, 0xfffffffd, @private0, 0x8}, {0xa, 0x4e20, 0x3f, @mcast2, 0x7}, 0x7, [0x3, 0x1f, 0xb5, 0x9, 0x1f, 0x0, 0x101, 0x20]}, 0x5c) openat(r4, &(0x7f0000000f00)='./file0\x00', 0x1, 0xa0) lsetxattr$security_ima(&(0x7f0000000f40)='./file1\x00', &(0x7f0000000f80), &(0x7f0000000fc0)=@md5={0x1, "8cbc7c97fb861a2be3c30134efef692c"}, 0x11, 0x2) 18:20:31 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x4, 0x3ff, 0x6, 0x2, 0x3, [{0xffffffff, 0x61545c00, 0x9, '\x00', 0x8}, {0x3e, 0x80, 0x6, '\x00', 0x600}, {0x400, 0x7, 0x5, '\x00', 0x2}]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x3c1600, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/169, 0xa9}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000540)=""/243, 0xf3}], 0x1, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/9, 0x9}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x3, 0x2, 0x0) dup2(r1, r6) write$rfkill(r2, &(0x7f0000000980)={0x0, 0x1, 0x1, 0x0, 0x1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) r11 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r9, r11, 0x0) clock_gettime(0x4, &(0x7f0000000a00)) clock_gettime(0x0, &(0x7f00000040c0)={0x0, 0x0}) recvmmsg$unix(r8, &(0x7f0000003fc0)=[{{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/245, 0xf5}, {&(0x7f0000001bc0)=""/197, 0xc5}, {0xfffffffffffffffe}, {&(0x7f0000001cc0)=""/172, 0xac}, {&(0x7f0000001d80)=""/23, 0x17}, {&(0x7f0000001dc0)=""/123, 0x7b}, {&(0x7f0000001e40)=""/114, 0x72}, {&(0x7f0000001ec0)=""/237, 0xed}], 0x9, &(0x7f0000002080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002180)=""/213, 0xd5}, {&(0x7f0000002280)=""/238, 0xee}, {&(0x7f0000002380)=""/59, 0x3b}, {&(0x7f00000023c0)=""/40, 0x28}], 0x4, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000002540)=""/23, 0x17}, {&(0x7f0000002580)=""/104, 0x68}, {&(0x7f0000002600)=""/123, 0x7b}, {&(0x7f0000002680)=""/233, 0xe9}, {&(0x7f0000002780)=""/135, 0x87}, {&(0x7f0000002840)=""/248, 0xf8}, {&(0x7f0000002940)=""/68, 0x44}, {&(0x7f00000029c0)=""/131, 0x83}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/83, 0x53}], 0xa, &(0x7f0000003bc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c80)=""/132, 0x84}, {&(0x7f0000003d40)=""/169, 0xa9}, {&(0x7f0000003e00)=""/11, 0xb}, {&(0x7f0000003e40)=""/3, 0x3}, {&(0x7f0000003e80)=""/127, 0x7f}, {&(0x7f0000003f00)=""/55, 0x37}], 0x6}}], 0x4, 0x2000, &(0x7f0000004100)={r12, r13+10000000}) read$rfkill(r14, &(0x7f0000004140), 0x8) mq_timedreceive(r4, &(0x7f0000004180)=""/245, 0xf5, 0x5, &(0x7f0000004280)={0x0, 0x3938700}) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r15 = openat$random(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) fcntl$addseals(r15, 0x409, 0x3) futex(&(0x7f0000004300)=0x2, 0x9, 0x1, &(0x7f0000004340)={0x0, 0x989680}, &(0x7f0000004380), 0x2) 18:20:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="104030e7f2e0"}]}, 0x2c}}, 0x20000084) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x810) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f6, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x51084) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x121001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0xd}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) r5 = dup2(r4, r2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r4) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xed}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004041}, 0x1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd4, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_SSID={0x24, 0x34, @random="5e90260d5939766710686a8289379010849d2dad4cec34d4784989f1fbdedb89"}, @NL80211_ATTR_PMKID={0x14, 0x55, "df433d01438db6e96dec76c19da91f5b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_PMKID={0x14, 0x55, "bb68bbaefa8c60c6258e9308d677ebc8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SSID={0x10, 0x34, @random="7023a8affe9c1aaa94cd81fc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "24cf4c9f0624c003abc214875d3b68d3"}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="e68569301ba1ba71baa74571724dafb0d9b776ce166d"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "0fb3243c0762ce8e238e548581"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "39df1a0623"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x230, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x38}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51a6}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1f}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) openat$vcs(0xffffffffffffff9c, &(0x7f0000000f00), 0x802, 0x0) 18:20:31 executing program 3: r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44004) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x3, 0x9, 0x2af, 0x14d, 0x5, 0xbb, 0x1ff}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x720) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x208080, 0x0) sendfile(r0, r1, &(0x7f0000000880)=0x80000001, 0x1) openat(r0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000a00)=0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a40), 0x221402, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000a80)) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000c40)={'#! ', './file0', [{0x20, '%]'}, {0x20, '*-\x00'}, {0x20, '\x00'}, {0x20, ')\a'}, {0x20, ')#'}], 0xa, "0eb90e0db47b81ca145d6de9c473fad0fff088ca788aad16a68c0b9d6dc63f10220350a06b4194cda1cd7c34bad6cf84c4eb8c17182bb62e2082d80bf791a540f4a5257f5505c1bf4d8a583997df8cf3d2841a01e79dd01875fc8eacd2ed92f478b65a0a459d45665d1434323c652366916f7e5c0bf45a43c4253256beea7523f31ae8269b974394bbd512e58cd1a14c704a7ea86cda530784dc0ae3c18e0530020296216f79389b7083e2f6f5e329ddb68dc263f3561c1445613b835106f4db8f29b778"}, 0xde) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000d80)) open_by_handle_at(r5, &(0x7f0000000dc0)=@reiserfs_6={0x18, 0x6, {0x7, 0x3, 0x81c0, 0x8000, 0x0, 0x518}}, 0x40000) [ 72.136554] audit: type=1400 audit(1664821231.532:6): avc: denied { execmem } for pid=284 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:20:31 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x79}}}}, [@NL80211_ATTR_IE={0xbe, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0x96}}, @prep={0x83, 0x25, @ext={{}, 0x80, 0x7, @broadcast, 0x200, @device_b, 0x8, 0x7ff, @broadcast, 0x2}}, @chsw_timing={0x68, 0x4, {0x0, 0x3}}, @peer_mgmt={0x75, 0x16, {0x0, 0x9a50, @void, @val=0x3b, @val="ceb5d5446dee141357c41108c302a548"}}, @perr={0x84, 0x62, {0x5, 0x6, [@not_ext={{}, @device_b, 0x7ff, "", 0x23}, @ext={{}, @device_a, 0xffffff4b, @broadcast, 0x34}, @not_ext={{}, @device_b, 0x7fffffff, "", 0x1}, @not_ext={{}, @device_a, 0xe3, "", 0x1c}, @ext={{}, @device_b, 0x4, @device_b, 0x11}, @ext={{}, @broadcast, 0x80000000, @device_b, 0x25}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8014}, 0x20000000) faccessat(r0, &(0x7f0000000200)='./file0\x00', 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x2000c3, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/31, 0x1f}], 0x2) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4e}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x400c0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4858}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20001, 0x0) write$binfmt_aout(r4, &(0x7f00000005c0)={{0x10b, 0x20, 0x1, 0xd4, 0x1b7, 0x5a, 0xb6, 0x80000001}, "1547f0e1774c4a85e6b50ea6881599f4cb8da0d87213096b605cf91f81c55789ef70ff579ea107315b8e502f8118998e3b55ef502e700ae54ee8ef56fcfece03292ccb713b5b3562e331929a3868c486efc59017f294ff13f69ba9c1b35340e72c7248df0d5bac76c5c755f3abe6", ['\x00', '\x00']}, 0x28e) r5 = syz_open_dev$vcsn(&(0x7f0000000880), 0x44c, 0x20000) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000008c0), 0x4) r6 = openat2(r3, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x191080, 0x80, 0x4}, 0x18) getsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000a00), 0x7, 0x40000) mknodat(r7, &(0x7f0000000a40)='./file0\x00', 0x8000, 0x10001) r8 = fsmount(r3, 0x1, 0x72) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40d4}, 0x4000001) 18:20:31 executing program 6: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x6, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c842) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, &(0x7f0000000180)=0x80) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000001c0)=0x80, 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x0, @nfc={0x27, 0x0, 0x1, 0x7}, @llc={0x1a, 0x201, 0x3, 0x6, 0x6, 0x1, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4eff, 0x0, 0x0, 0x0, 0x21, &(0x7f0000000280)='gretap0\x00', 0x0, 0x7, 0x7}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3fa9e10411"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4bf96df29d"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}}, 0x4000014) r2 = signalfd(r0, &(0x7f0000000480)={[0x7ff]}, 0x8) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x3f7, 0x0, 0x70bd2c, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000005c0)={0x7ff, 0x5, 0x0, 0xfffffff9, 0x2}, 0x14) r3 = memfd_create(&(0x7f0000000600)='\x00', 0x6) ioctl$int_in(r3, 0x5421, &(0x7f0000000640)=0x83) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) setxattr$security_ima(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)=@sha1={0x1, "b241e050873ec4d3431eecbfed47431dabc0d91c"}, 0x15, 0x2) r5 = accept4$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x0, @fixed}, &(0x7f00000007c0)=0xe, 0x80000) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000880)=@req={0x28, &(0x7f0000000840)={'veth0_macvtap\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f0000000800)={0xb704, 0x6fc, 0x2}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x780, 0x0, 0x8000, 0xfffffc70, {{0x26, 0x4, 0x0, 0x3f, 0x98, 0x66, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0xc, [{@rand_addr=0x64010100, 0x7}, {@broadcast, 0x8}, {@remote, 0x2f}, {@private=0xa010100}]}, @timestamp_addr={0x44, 0x2c, 0xa, 0x1, 0x0, [{@private=0xa010102}, {@multicast2, 0xe8}, {@empty, 0x9}, {@remote, 0x2c55}, {@multicast2, 0xd2d9}]}, @timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x6, [{@loopback, 0xc7a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc0}, {@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010101, 0x3ff}, {@private=0xa010101, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000d00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 18:20:31 executing program 7: prctl$PR_SET_SECUREBITS(0x1c, 0x34) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/202, 0xca}], 0x1}}, {{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000004c0)=""/141, 0x8d}], 0x5, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000780)=""/37, 0x25}], 0x2, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/255, 0xff}, {&(0x7f00000009c0)}], 0x2, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000b40)=""/76, 0x4c}, {&(0x7f0000000bc0)=""/80, 0x50}, {&(0x7f0000000c40)=""/9, 0x9}, {&(0x7f0000000c80)=""/94, 0x5e}, {&(0x7f0000000d00)=""/3, 0x3}, {&(0x7f0000000d40)=""/29, 0x1d}, {&(0x7f0000000d80)=""/246, 0xf6}, {&(0x7f0000000e80)=""/177, 0xb1}], 0x8}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001040)=""/160, 0xa0}, {&(0x7f0000001100)=""/122, 0x7a}, {&(0x7f0000001180)=""/183, 0xb7}, {&(0x7f0000001240)=""/170, 0xaa}], 0x4, &(0x7f0000001340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x90}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001480)=""/202, 0xca}, {&(0x7f0000001580)=""/12, 0xc}, {&(0x7f00000015c0)=""/140, 0x8c}, {&(0x7f0000001680)=""/74, 0x4a}, {&(0x7f0000001700)=""/137, 0x89}], 0x5}}], 0x7, 0x100, &(0x7f0000001a00)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setresuid(r11, r12, 0xee01) syz_mount_image$vfat(&(0x7f0000001a80), &(0x7f0000001ac0)='./file0\x00', 0x7ff, 0x8, &(0x7f0000002080)=[{&(0x7f0000001b00)="2ac8b3fa9db502cd1320342355c382dc26f583504cdcb08ee28f41c4534e097c33f364dce49b9b6b2443616525c11b0225aec93cff627c53ae089a3fbe80bb559a2527d55986b9", 0x47, 0x4}, {&(0x7f0000001b80)="cf147bbc20fd5f731d6692efe9c2b581185cb8c14061ccc0c90979fd2caa82480c0b43341d94d7c8ca88b519f80a7b40ba0a17fe3da35a9246350de79c669bb2a5978f0cdb531f72ad250139c0bc3aaeef5aade8bdb56ee6cbb87be49a4801858792d01a7293c6137154b03113d85a72a0aeabb0705811f78e5baa5c88f55f9c2aa69b003e5a952805a149e94442640b8646e8cabc7003cb6146ff3e9e89dfaecc6d957c759f174926680d75bc9d5b17d71ba3a61a3bdfec0d5a5dd552ca25ad0d58daf181a484da4b65340753b0765a97bf39c35e", 0xd5, 0x40}, {&(0x7f0000001c80)="29262aee84e776bdb1bc2f04184c72c317028fd1a9e606169a745b8db99a527b4e3329f98e837d3fddb4865956a03cecbe8edce7edcf9e3204d2194e4a5d2de2d569d3c2d17ef30021e32a39d4c9f749c0d1fb9049833b4e67479c9043c7ee5926173094c593b7c92157b554abb3fd93bb97b229621b97e4a65fa4d8d6c7980119b8dac775cc21b764fb968bd99ae9f280d4e54ac072", 0x96, 0xe8e}, {&(0x7f0000001d40)="42e1d2daf938ef6f4a60a593da41d48b07789c17615007d2ea3475f7d39ae2114ca94ce591b1cd1245205c543d74c64f4c101c13c2d88db34026eea0e9212d470e067e8acc4fd67c5a1c66a40699a6f49563785d9ae689cf31bb3b96079191fffa4947d3950cdd4bcbc2220d03737065ec1bb592ca91906805f972f9f526a8e949a41d69761cce510ec0d593d69b0d7823e47b54c1417e1bf5e0819a7a8bc491af416a03dd7120ea0eb460fcde8b228130dfe506b5355bd89bbd4f4e7c362e1c0bdbd3203e13c03ab0e39a4a99de07add9e16dcbbaec68104fda", 0xda, 0x380000000000}, {&(0x7f0000001e40)="2ee68218f657c4c537c7bf8a4e8332149388b62dee782e04108806456c3a8ddf297fdd07e815841250eaebd8a31bfcecead937db4a019096b37b76a76f3ead0f2c243da42645975a763193561dbf3b03f9cd4f663bf811d9d839d7bdc8d5d4a2ec2e356c54c6b17b9ed2fdfa87b9aeb4293a3ca8e774e87711008e8f0690c009145ed9401ef7365c84804bd4f60a818f309d517de0172c09224ba1fd4f14b9884b0f3f30a7b12c617f6fb2", 0xab, 0x100}, {&(0x7f0000001f00)="ae3e1b1b326929663226303d554643e602f64145b6a2cd3b3bec4600a4c63bfc0e192c2914e694224ba85bcd69ed2bf30c95cbc1679aeef9451f9bad7d0744295aaf0c7054e5eb5a55e003dbfb4f372c46c5d634b20b5f", 0x57, 0x7fffffff}, {&(0x7f0000001f80)="1dc871131094f4a160b756f4e6117bb64fd2a267d8d9804f053e351d29adbb2b6e2fb2155617d844febb4c90b17d9000fda1b7e54166780a6307f0d77148bb214b86ea6f303ec99470d59a0278c6ef06cb368f9cb37223ca3d9cbb1f635f3e8226de60826d6cfad73c698b89ae612aabf247197c5252d519977e2dd86b6466ac2a536d2e2f1e635c209f566621e16a64c2017481469612f1496030cd4b239cf271ce9fcd4aa19cf9d20a7fac8c11e60db2cba5c021", 0xb5, 0x80}, {&(0x7f0000002040)="cf1217be31d84d4833cc3584341a95b1a487c8d03c3a2d8856fa0e675eed97fb7e94f90507c4b68e43d743ea3d042499d696381a849f47eff2647d", 0x3b, 0x7fffffff}], 0x2, &(0x7f0000002140)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@uni_xlateno}], [{@obj_type={'obj_type', 0x3d, ')\xa9'}}]}) clock_gettime(0x3, &(0x7f00000021c0)) prctl$PR_SET_SECUREBITS(0x1c, 0x31) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r9, &(0x7f0000002200)={0x2, 0x95, 0x30}, &(0x7f0000002240)='./file0\x00', 0x18, 0x0, 0x12345}, 0xfff) openat(r4, &(0x7f00000022c0)='./file0\x00', 0x30000, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)) getpeername(r7, &(0x7f0000002340)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f00000023c0)=0x80) accept$packet(r10, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002440)=0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002540)={{0x1, r14, r0, r1, r2, 0x85, 0x7}, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4a7}) setresuid(r14, 0xffffffffffffffff, r5) openat(r8, &(0x7f00000025c0)='./file0\x00', 0x240c00, 0x104) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000002600)='cp862', &(0x7f0000002640)='./file0\x00', r8) r15 = syz_genetlink_get_family_id$fou(&(0x7f00000026c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r8, 0x89fb, &(0x7f0000002780)={'syztnl1\x00', &(0x7f0000002700)={'syztnl2\x00', r13, 0x29, 0x7f, 0x3, 0x5, 0x17, @mcast2, @local, 0x700, 0x40, 0x9, 0x7fffffff}}) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000002840)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x34, r15, 0x302, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r16}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) [ 73.407103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.408836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.411831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.413473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.414871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.417547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.420745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.431492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.432893] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.463644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.470582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.474680] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.476395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.477896] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.479795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.481516] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.482941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.484254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.485638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.486862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.488095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.491473] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.492692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.493928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.495163] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.496310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.497576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.498858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.509118] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.519311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.520576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.523486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.525725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.526559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.527555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.527799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.530215] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.530519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.531745] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.532679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.533580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.534700] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.536790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.539351] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.540933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.541988] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.543036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.544264] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.547555] Bluetooth: hci3: HCI_REQ-0x0c1a [ 73.551553] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.565411] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.578724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.584608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.586385] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.587701] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.592294] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.545234] Bluetooth: hci1: command 0x0409 tx timeout [ 75.609436] Bluetooth: hci7: command 0x0409 tx timeout [ 75.609997] Bluetooth: hci4: command 0x0409 tx timeout [ 75.610516] Bluetooth: hci2: command 0x0409 tx timeout [ 75.611006] Bluetooth: hci3: command 0x0409 tx timeout [ 75.611476] Bluetooth: hci6: command 0x0409 tx timeout [ 75.611944] Bluetooth: hci0: command 0x0409 tx timeout [ 75.612439] Bluetooth: hci5: command 0x0409 tx timeout [ 77.593082] Bluetooth: hci1: command 0x041b tx timeout [ 77.657102] Bluetooth: hci5: command 0x041b tx timeout [ 77.657564] Bluetooth: hci0: command 0x041b tx timeout [ 77.657998] Bluetooth: hci6: command 0x041b tx timeout [ 77.658428] Bluetooth: hci3: command 0x041b tx timeout [ 77.658825] Bluetooth: hci2: command 0x041b tx timeout [ 77.659346] Bluetooth: hci4: command 0x041b tx timeout [ 77.659743] Bluetooth: hci7: command 0x041b tx timeout [ 79.641073] Bluetooth: hci1: command 0x040f tx timeout [ 79.705368] Bluetooth: hci7: command 0x040f tx timeout [ 79.705820] Bluetooth: hci4: command 0x040f tx timeout [ 79.706462] Bluetooth: hci2: command 0x040f tx timeout [ 79.706866] Bluetooth: hci3: command 0x040f tx timeout [ 79.707290] Bluetooth: hci6: command 0x040f tx timeout [ 79.707685] Bluetooth: hci0: command 0x040f tx timeout [ 79.708099] Bluetooth: hci5: command 0x040f tx timeout [ 81.689044] Bluetooth: hci1: command 0x0419 tx timeout [ 81.753052] Bluetooth: hci5: command 0x0419 tx timeout [ 81.753472] Bluetooth: hci0: command 0x0419 tx timeout [ 81.753883] Bluetooth: hci6: command 0x0419 tx timeout [ 81.754344] Bluetooth: hci3: command 0x0419 tx timeout [ 81.754746] Bluetooth: hci2: command 0x0419 tx timeout [ 81.755172] Bluetooth: hci4: command 0x0419 tx timeout [ 81.755577] Bluetooth: hci7: command 0x0419 tx timeout 18:21:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r2) sendmsg$nl_xfrm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="681100001c00018201b87f5001533eff132c0029bd7000fcdbdf2533"], 0x1168}}, 0x0) syz_io_uring_setup(0x1853, &(0x7f0000000100)={0x0, 0x734e, 0x8, 0x1, 0x3d7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) dup3(r4, r4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:21:24 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup(r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = dup(r7) sendmsg$nl_xfrm(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="681100001c00018201b87f5001533eff132c0029bd7000fcdbdf2533"], 0x1168}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES64=r5, @ANYRES64=r8, @ANYRES64=r6, @ANYBLOB="833b177fbffa43dbfe420ac062126aa370a19a"], 0x1168}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)=0x4) r9 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000100)=0x3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xffffffffffffff27, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/107, 0x6b}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x40012100) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x8000000) [ 124.689694] audit: type=1400 audit(1664821284.085:7): avc: denied { open } for pid=3879 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.691449] audit: type=1400 audit(1664821284.085:8): avc: denied { kernel } for pid=3879 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.714749] ------------[ cut here ]------------ [ 124.714770] [ 124.714773] ====================================================== [ 124.714776] WARNING: possible circular locking dependency detected [ 124.714780] 6.0.0-rc7-next-20220930 #1 Not tainted [ 124.714787] ------------------------------------------------------ [ 124.714798] syz-executor.5/3881 is trying to acquire lock: [ 124.714804] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 124.714845] [ 124.714845] but task is already holding lock: [ 124.714848] ffff88800d484820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.714875] [ 124.714875] which lock already depends on the new lock. [ 124.714875] [ 124.714878] [ 124.714878] the existing dependency chain (in reverse order) is: [ 124.714882] [ 124.714882] -> #3 (&ctx->lock){....}-{2:2}: [ 124.714895] _raw_spin_lock+0x2a/0x40 [ 124.714907] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.714918] __schedule+0xedd/0x2470 [ 124.714932] schedule+0xda/0x1b0 [ 124.714945] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.714960] syscall_exit_to_user_mode+0x19/0x40 [ 124.714973] do_syscall_64+0x48/0x90 [ 124.714991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.715003] [ 124.715003] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.715017] _raw_spin_lock_nested+0x30/0x40 [ 124.715027] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.715041] task_fork_fair+0x63/0x4d0 [ 124.715058] sched_cgroup_fork+0x3d0/0x540 [ 124.715072] copy_process+0x4183/0x6e20 [ 124.715083] kernel_clone+0xe7/0x890 [ 124.715092] user_mode_thread+0xad/0xf0 [ 124.715103] rest_init+0x24/0x250 [ 124.715114] arch_call_rest_init+0xf/0x14 [ 124.715132] start_kernel+0x4c6/0x4eb [ 124.715147] secondary_startup_64_no_verify+0xe0/0xeb [ 124.715161] [ 124.715161] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.715175] _raw_spin_lock_irqsave+0x39/0x60 [ 124.715186] try_to_wake_up+0xab/0x1930 [ 124.715199] up+0x75/0xb0 [ 124.715212] __up_console_sem+0x6e/0x80 [ 124.715229] console_unlock+0x46a/0x590 [ 124.715244] vprintk_emit+0x1bd/0x560 [ 124.715260] vprintk+0x84/0xa0 [ 124.715276] _printk+0xba/0xf1 [ 124.715288] kauditd_hold_skb.cold+0x3f/0x4e [ 124.715305] kauditd_send_queue+0x233/0x290 [ 124.715320] kauditd_thread+0x5f9/0x9c0 [ 124.715333] kthread+0x2ed/0x3a0 [ 124.715348] ret_from_fork+0x22/0x30 [ 124.715360] [ 124.715360] -> #0 ((console_sem).lock){....}-{2:2}: [ 124.715373] __lock_acquire+0x2a02/0x5e70 [ 124.715390] lock_acquire+0x1a2/0x530 [ 124.715406] _raw_spin_lock_irqsave+0x39/0x60 [ 124.715416] down_trylock+0xe/0x70 [ 124.715431] __down_trylock_console_sem+0x3b/0xd0 [ 124.715447] vprintk_emit+0x16b/0x560 [ 124.715463] vprintk+0x84/0xa0 [ 124.715478] _printk+0xba/0xf1 [ 124.715488] report_bug.cold+0x72/0xab [ 124.715504] handle_bug+0x3c/0x70 [ 124.715520] exc_invalid_op+0x14/0x50 [ 124.715537] asm_exc_invalid_op+0x16/0x20 [ 124.715549] group_sched_out.part.0+0x2c7/0x460 [ 124.715567] ctx_sched_out+0x8f1/0xc10 [ 124.715583] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.715594] __schedule+0xedd/0x2470 [ 124.715607] schedule+0xda/0x1b0 [ 124.715620] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.715631] syscall_exit_to_user_mode+0x19/0x40 [ 124.715644] do_syscall_64+0x48/0x90 [ 124.715660] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.715672] [ 124.715672] other info that might help us debug this: [ 124.715672] [ 124.715675] Chain exists of: [ 124.715675] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.715675] [ 124.715690] Possible unsafe locking scenario: [ 124.715690] [ 124.715692] CPU0 CPU1 [ 124.715694] ---- ---- [ 124.715697] lock(&ctx->lock); [ 124.715702] lock(&rq->__lock); [ 124.715709] lock(&ctx->lock); [ 124.715715] lock((console_sem).lock); [ 124.715720] [ 124.715720] *** DEADLOCK *** [ 124.715720] [ 124.715722] 2 locks held by syz-executor.5/3881: [ 124.715729] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.715758] #1: ffff88800d484820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.715784] [ 124.715784] stack backtrace: [ 124.715787] CPU: 0 PID: 3881 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 124.715799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.715807] Call Trace: [ 124.715810] [ 124.715815] dump_stack_lvl+0x8b/0xb3 [ 124.715833] check_noncircular+0x263/0x2e0 [ 124.715849] ? format_decode+0x26c/0xb50 [ 124.715866] ? print_circular_bug+0x450/0x450 [ 124.715885] ? simple_strtoul+0x30/0x30 [ 124.715903] ? format_decode+0x26c/0xb50 [ 124.715920] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.715938] __lock_acquire+0x2a02/0x5e70 [ 124.715959] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.715981] lock_acquire+0x1a2/0x530 [ 124.715998] ? down_trylock+0xe/0x70 [ 124.716014] ? lock_release+0x750/0x750 [ 124.716035] ? vprintk+0x84/0xa0 [ 124.716052] _raw_spin_lock_irqsave+0x39/0x60 [ 124.716063] ? down_trylock+0xe/0x70 [ 124.716079] down_trylock+0xe/0x70 [ 124.716095] ? vprintk+0x84/0xa0 [ 124.716111] __down_trylock_console_sem+0x3b/0xd0 [ 124.716128] vprintk_emit+0x16b/0x560 [ 124.716147] vprintk+0x84/0xa0 [ 124.716164] _printk+0xba/0xf1 [ 124.716175] ? record_print_text.cold+0x16/0x16 [ 124.716191] ? report_bug.cold+0x66/0xab [ 124.716209] ? group_sched_out.part.0+0x2c7/0x460 [ 124.716227] report_bug.cold+0x72/0xab [ 124.716245] handle_bug+0x3c/0x70 [ 124.716263] exc_invalid_op+0x14/0x50 [ 124.716281] asm_exc_invalid_op+0x16/0x20 [ 124.716293] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.716313] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.716325] RSP: 0018:ffff88803fb9fc48 EFLAGS: 00010006 [ 124.716334] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.716341] RDX: ffff88800ff91ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 124.716349] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 124.716356] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d484800 [ 124.716363] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 124.716374] ? group_sched_out.part.0+0x2c7/0x460 [ 124.716394] ? group_sched_out.part.0+0x2c7/0x460 [ 124.716414] ctx_sched_out+0x8f1/0xc10 [ 124.716433] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.716447] ? lock_is_held_type+0xd7/0x130 [ 124.716461] ? __perf_cgroup_move+0x160/0x160 [ 124.716471] ? set_next_entity+0x304/0x550 [ 124.716489] ? update_curr+0x267/0x740 [ 124.716507] ? lock_is_held_type+0xd7/0x130 [ 124.716521] __schedule+0xedd/0x2470 [ 124.716538] ? io_schedule_timeout+0x150/0x150 [ 124.716554] ? __x64_sys_futex_time32+0x480/0x480 [ 124.716569] schedule+0xda/0x1b0 [ 124.716584] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.716596] syscall_exit_to_user_mode+0x19/0x40 [ 124.716609] do_syscall_64+0x48/0x90 [ 124.716627] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.716640] RIP: 0033:0x7fcaf96c6b19 [ 124.716648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.716659] RSP: 002b:00007fcaf6c3c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.716669] RAX: 0000000000000001 RBX: 00007fcaf97d9f68 RCX: 00007fcaf96c6b19 [ 124.716676] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcaf97d9f6c [ 124.716684] RBP: 00007fcaf97d9f60 R08: 000000000000000e R09: 0000000000000000 [ 124.716691] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcaf97d9f6c [ 124.716698] R13: 00007ffc586ab44f R14: 00007fcaf6c3c300 R15: 0000000000022000 [ 124.716710] [ 124.772713] WARNING: CPU: 0 PID: 3881 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 124.773398] Modules linked in: [ 124.773643] CPU: 0 PID: 3881 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 124.774237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.775078] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.775480] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.776802] RSP: 0018:ffff88803fb9fc48 EFLAGS: 00010006 [ 124.777191] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.777717] RDX: ffff88800ff91ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 124.778233] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 124.778758] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d484800 [ 124.779286] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 124.779809] FS: 00007fcaf6c3c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 124.780405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.780830] CR2: 00007f9c4b418b70 CR3: 000000001a98e000 CR4: 0000000000350ef0 [ 124.781352] Call Trace: [ 124.781547] [ 124.781723] ctx_sched_out+0x8f1/0xc10 [ 124.782027] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.782417] ? lock_is_held_type+0xd7/0x130 [ 124.782739] ? __perf_cgroup_move+0x160/0x160 [ 124.783082] ? set_next_entity+0x304/0x550 [ 124.783407] ? update_curr+0x267/0x740 [ 124.783703] ? lock_is_held_type+0xd7/0x130 [ 124.784022] __schedule+0xedd/0x2470 [ 124.784313] ? io_schedule_timeout+0x150/0x150 [ 124.784660] ? __x64_sys_futex_time32+0x480/0x480 [ 124.785027] schedule+0xda/0x1b0 [ 124.785294] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.785658] syscall_exit_to_user_mode+0x19/0x40 [ 124.786014] do_syscall_64+0x48/0x90 [ 124.786305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.786692] RIP: 0033:0x7fcaf96c6b19 [ 124.786983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.788308] RSP: 002b:00007fcaf6c3c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.788868] RAX: 0000000000000001 RBX: 00007fcaf97d9f68 RCX: 00007fcaf96c6b19 [ 124.789389] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcaf97d9f6c [ 124.789909] RBP: 00007fcaf97d9f60 R08: 000000000000000e R09: 0000000000000000 [ 124.790427] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcaf97d9f6c [ 124.790963] R13: 00007ffc586ab44f R14: 00007fcaf6c3c300 R15: 0000000000022000 [ 124.791478] [ 124.791653] irq event stamp: 800 [ 124.791902] hardirqs last enabled at (799): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 124.792582] hardirqs last disabled at (800): [] __schedule+0x1225/0x2470 [ 124.793186] softirqs last enabled at (334): [] __irq_exit_rcu+0x11b/0x180 [ 124.793804] softirqs last disabled at (299): [] __irq_exit_rcu+0x11b/0x180 [ 124.794430] ---[ end trace 0000000000000000 ]--- [ 124.807357] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:24 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x1006, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x0) 18:21:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000480)="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"/271, 0x10f, 0x400004}], 0x2c00088, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x216}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}]}) [ 124.875142] loop3: detected capacity change from 0 to 16384 18:21:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x101}, 0x12354, 0x0, 0x0, 0x0, 0x1, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x42180, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x8, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) openat(r3, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xb9) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r5, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x1, 0x5, 0x20, 0x0, 0x1, 0x62000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x100000000, 0x401}, 0x800, 0xffffffffffff20aa, 0x9, 0x8, 0x6, 0x9, 0x8, 0x0, 0x6, 0x0, 0x232}, 0x0, 0xf, 0xffffffffffffffff, 0x2) signalfd4(r6, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000001000000180000000600ce2abe7dff9f57274b43f1353697b34407715cdeb34fc91d21b36b05ab8e6849a60addf84907fea1d83f32ea8c047c2c9fcf81c09ab68e7ca44455c5a39613d2f427d25cd959487cd7dfcb465ea1cdf12da351f482ba4d373a590a168a483df324dfcbd87f059fd023fe84b20e4fbfedb5a8fac5f42be332abe17c09562ec2956f74f4434131b4a6c07e3b1d629a89eea1554c9b375e9a2c11af9824f75d8d023a024b68bee4a8c73318c168fe2427b4eff26aab7cb35e5ce0fef0ad17", @ANYRES32=r4, @ANYBLOB="0100ee2da800000200800000204f609bfdbe3200ce616e465bf5fe2e4d1c9b784ed820ff6c0890473af99532c98700bd5d1e9dd59e36608c96c8c54b19e20c5c017711db7b266ae21e98c5ea2d93709b3307711bc889fce3cd5c5df6f15584649fe48373f760a671f188fe8b2b9da2150379f855225be565a6b304114d702bc9e44f6b23c9eea3490b9288fd653472b553fa8654a9d402509b0e4d97d31ff6c123c11661bf066239386d2dd1300690eabad94a2634023faaba06d5e576f1eac7bc20ca9b33e035e2d6b23c1049aec7ab7ebd162b15b96158082f71ac136df954bb42e61bd7192b449adebc6b589695d060a6dd570d4e316f7011a95067884210f2cbdd68cf95cd16154278d1a6311c9c6448ed0a3c61576800ad314a594cb8db6be936ae3b776158e0a7c6247a201827cfaeb66307baa97f221e45fe2d3867cdf29d6836f79c8df0ac1dbf0e782c0c8c1132da94b90c5dd0a8a66ea8d5594047007f0e6e4a9e1912b85994b20fd5913b289a7f5157829aa49d82fc4599e0c2cd070a9a0dc75300ff734b4bbbf8afd791d6b480cb2732b11831acf16a6ebf5644e73a529ce7c920dd59d650cc40c96089bf363a55f34b47a2540821b3b310d0c261c7fb4f79d5882a92ae6fd6f74c"]) [ 124.877907] EXT4-fs: Invalid want_extra_isize 5 [ 124.884868] loop3: detected capacity change from 0 to 16384 [ 124.885518] EXT4-fs: Invalid want_extra_isize 5 [ 124.920598] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.5'. 18:21:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000200007f9b29e800000000e9b66d0c163b4de64a782271eb"], 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x40025cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0)) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000180)) syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 18:21:24 executing program 1: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) sendmmsg(r3, &(0x7f000000af40)=[{{0x0, 0x30, &(0x7f0000000840)=[{&(0x7f0000000240)="38f6b9f19a4500ddbc526b05a4278c6c8bc7687bbe8f06da1b1a587a19ff5b50cc34687ba30c1257698fe61dd3c499c62457082941b00b9279576faef03ccbf4e06156d15bbe0b3d3790e66ef3e16fbb0e12a2", 0x1}], 0x1000000000000159}}], 0x1, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 124.989688] audit: type=1400 audit(1664821284.384:9): avc: denied { write } for pid=3905 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:21:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r2) sendmsg$nl_xfrm(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="681100001c00018201b87f5001533eff132c0029bd7000fcdbdf2533"], 0x1168}}, 0x0) syz_io_uring_setup(0x1853, &(0x7f0000000100)={0x0, 0x734e, 0x8, 0x1, 0x3d7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) dup3(r4, r4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 125.044437] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 125.045165] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 125.045669] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 125.046170] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 125.046728] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 125.049001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.049405] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.050027] Buffer I/O error on dev sr0, logical block 0, async page read [ 125.055332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.055735] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.056486] Buffer I/O error on dev sr0, logical block 1, async page read [ 125.057238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.057643] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.058270] Buffer I/O error on dev sr0, logical block 2, async page read [ 125.059191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.059597] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.060206] Buffer I/O error on dev sr0, logical block 3, async page read [ 125.066146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.066551] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.067319] Buffer I/O error on dev sr0, logical block 4, async page read [ 125.068168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.068569] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.069389] Buffer I/O error on dev sr0, logical block 5, async page read [ 125.070134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.070535] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.071167] Buffer I/O error on dev sr0, logical block 6, async page read [ 125.071908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 125.072351] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.072945] Buffer I/O error on dev sr0, logical block 7, async page read [ 125.085881] netlink: 4436 bytes leftover after parsing attributes in process `syz-executor.5'. [ 125.579796] loop2: detected capacity change from 0 to 264192 [ 125.627990] loop2: detected capacity change from 0 to 264192 [ 126.000428] loop7: detected capacity change from 0 to 264192 [ 126.002162] FAT-fs (loop7): Unrecognized mount option "obj_type=)©" or missing value [ 126.104029] loop7: detected capacity change from 0 to 264192 [ 126.105723] FAT-fs (loop7): Unrecognized mount option "obj_type=)©" or missing value VM DIAGNOSIS: 18:21:24 Registers: info registers vcpu 0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803fb9f690 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000a R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcaf6c3c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9c4b418b70 CR3=000000001a98e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fcaf97ad7c0 00007fcaf97ad7c8 YMM02=0000000000000000 0000000000000000 00007fcaf97ad7e0 00007fcaf97ad7c0 YMM03=0000000000000000 0000000000000000 00007fcaf97ad7c8 00007fcaf97ad7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffea0000722d88 RBX=0000000000000009 RCX=ffffffff815eff8c RDX=ffff7fffffffffff RSI=0000000000000008 RDI=ffffea0000722d80 RBP=ffffea0000722d80 RSP=ffff88803e6d7a98 R8 =0000000000000000 R9 =ffffea0000722d87 R10=0000000000000000 R11=0000000000000001 R12=dffffc0000000000 R13=000000000000003b R14=ffff8880094ec1e8 R15=ffffea0000722d80 RIP=ffffffff8178766d RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff812ba46f4 CR3=0000000005226000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff812bb3470 00007ff812bb2f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000