Warning: Permanently added '[localhost]:65237' (ECDSA) to the list of known hosts. 2022/10/06 23:51:17 fuzzer started 2022/10/06 23:51:17 dialing manager at localhost:37161 syzkaller login: [ 37.516479] cgroup: Unknown subsys name 'net' [ 37.598284] cgroup: Unknown subsys name 'rlimit' 2022/10/06 23:51:31 syscalls: 2215 2022/10/06 23:51:31 code coverage: enabled 2022/10/06 23:51:31 comparison tracing: enabled 2022/10/06 23:51:31 extra coverage: enabled 2022/10/06 23:51:31 setuid sandbox: enabled 2022/10/06 23:51:31 namespace sandbox: enabled 2022/10/06 23:51:31 Android sandbox: enabled 2022/10/06 23:51:31 fault injection: enabled 2022/10/06 23:51:31 leak checking: enabled 2022/10/06 23:51:31 net packet injection: enabled 2022/10/06 23:51:31 net device setup: enabled 2022/10/06 23:51:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/06 23:51:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/06 23:51:31 USB emulation: enabled 2022/10/06 23:51:31 hci packet injection: enabled 2022/10/06 23:51:31 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006) 2022/10/06 23:51:31 802.15.4 emulation: enabled 2022/10/06 23:51:31 fetching corpus: 50, signal 19890/21719 (executing program) 2022/10/06 23:51:31 fetching corpus: 100, signal 33571/36932 (executing program) 2022/10/06 23:51:31 fetching corpus: 150, signal 41944/46696 (executing program) 2022/10/06 23:51:31 fetching corpus: 200, signal 47639/53754 (executing program) 2022/10/06 23:51:31 fetching corpus: 250, signal 53569/60957 (executing program) 2022/10/06 23:51:32 fetching corpus: 300, signal 56902/65541 (executing program) 2022/10/06 23:51:32 fetching corpus: 350, signal 59951/69782 (executing program) 2022/10/06 23:51:32 fetching corpus: 400, signal 63227/74199 (executing program) 2022/10/06 23:51:32 fetching corpus: 450, signal 66129/78225 (executing program) 2022/10/06 23:51:32 fetching corpus: 500, signal 73277/85965 (executing program) 2022/10/06 23:51:32 fetching corpus: 550, signal 74983/88718 (executing program) 2022/10/06 23:51:32 fetching corpus: 600, signal 78864/93401 (executing program) 2022/10/06 23:51:32 fetching corpus: 650, signal 80201/95797 (executing program) 2022/10/06 23:51:32 fetching corpus: 700, signal 82740/99184 (executing program) 2022/10/06 23:51:32 fetching corpus: 750, signal 85958/103123 (executing program) 2022/10/06 23:51:32 fetching corpus: 800, signal 87796/105812 (executing program) 2022/10/06 23:51:33 fetching corpus: 850, signal 90669/109295 (executing program) 2022/10/06 23:51:33 fetching corpus: 900, signal 91789/111311 (executing program) 2022/10/06 23:51:33 fetching corpus: 950, signal 94494/114560 (executing program) 2022/10/06 23:51:33 fetching corpus: 1000, signal 95886/116724 (executing program) 2022/10/06 23:51:33 fetching corpus: 1050, signal 97013/118644 (executing program) 2022/10/06 23:51:33 fetching corpus: 1100, signal 99229/121422 (executing program) 2022/10/06 23:51:33 fetching corpus: 1150, signal 100654/123448 (executing program) 2022/10/06 23:51:33 fetching corpus: 1200, signal 102583/125914 (executing program) 2022/10/06 23:51:33 fetching corpus: 1250, signal 103715/127697 (executing program) 2022/10/06 23:51:34 fetching corpus: 1300, signal 104717/129364 (executing program) 2022/10/06 23:51:34 fetching corpus: 1350, signal 106638/131743 (executing program) 2022/10/06 23:51:34 fetching corpus: 1400, signal 108690/134155 (executing program) 2022/10/06 23:51:34 fetching corpus: 1450, signal 111782/137287 (executing program) 2022/10/06 23:51:34 fetching corpus: 1500, signal 113527/139461 (executing program) 2022/10/06 23:51:34 fetching corpus: 1550, signal 114873/141246 (executing program) 2022/10/06 23:51:34 fetching corpus: 1600, signal 116358/143112 (executing program) 2022/10/06 23:51:34 fetching corpus: 1650, signal 117796/144890 (executing program) 2022/10/06 23:51:34 fetching corpus: 1700, signal 118802/146377 (executing program) 2022/10/06 23:51:34 fetching corpus: 1750, signal 119972/147934 (executing program) 2022/10/06 23:51:35 fetching corpus: 1800, signal 121846/149952 (executing program) 2022/10/06 23:51:35 fetching corpus: 1850, signal 122627/151249 (executing program) 2022/10/06 23:51:35 fetching corpus: 1900, signal 124011/152902 (executing program) 2022/10/06 23:51:35 fetching corpus: 1950, signal 125327/154500 (executing program) 2022/10/06 23:51:35 fetching corpus: 2000, signal 125943/155614 (executing program) 2022/10/06 23:51:35 fetching corpus: 2050, signal 126516/156722 (executing program) 2022/10/06 23:51:35 fetching corpus: 2100, signal 127768/158143 (executing program) 2022/10/06 23:51:35 fetching corpus: 2150, signal 130189/160203 (executing program) 2022/10/06 23:51:35 fetching corpus: 2200, signal 130998/161318 (executing program) 2022/10/06 23:51:35 fetching corpus: 2250, signal 131387/162249 (executing program) 2022/10/06 23:51:36 fetching corpus: 2300, signal 131872/163192 (executing program) 2022/10/06 23:51:36 fetching corpus: 2350, signal 133607/164773 (executing program) 2022/10/06 23:51:36 fetching corpus: 2400, signal 134523/165901 (executing program) 2022/10/06 23:51:36 fetching corpus: 2450, signal 136153/167355 (executing program) 2022/10/06 23:51:36 fetching corpus: 2500, signal 137842/168918 (executing program) 2022/10/06 23:51:36 fetching corpus: 2550, signal 138285/169772 (executing program) 2022/10/06 23:51:36 fetching corpus: 2600, signal 138787/170695 (executing program) 2022/10/06 23:51:36 fetching corpus: 2650, signal 139674/171753 (executing program) 2022/10/06 23:51:36 fetching corpus: 2700, signal 140088/172505 (executing program) 2022/10/06 23:51:36 fetching corpus: 2750, signal 142101/174020 (executing program) 2022/10/06 23:51:37 fetching corpus: 2800, signal 143107/175024 (executing program) 2022/10/06 23:51:37 fetching corpus: 2850, signal 144435/176218 (executing program) 2022/10/06 23:51:37 fetching corpus: 2900, signal 145543/177249 (executing program) 2022/10/06 23:51:37 fetching corpus: 2950, signal 146405/178127 (executing program) 2022/10/06 23:51:37 fetching corpus: 3000, signal 147064/178921 (executing program) 2022/10/06 23:51:37 fetching corpus: 3050, signal 148084/179807 (executing program) 2022/10/06 23:51:37 fetching corpus: 3100, signal 149030/180687 (executing program) 2022/10/06 23:51:37 fetching corpus: 3150, signal 150014/181559 (executing program) 2022/10/06 23:51:37 fetching corpus: 3200, signal 151051/182464 (executing program) 2022/10/06 23:51:38 fetching corpus: 3250, signal 152613/183491 (executing program) 2022/10/06 23:51:38 fetching corpus: 3300, signal 153115/184080 (executing program) 2022/10/06 23:51:38 fetching corpus: 3350, signal 154132/184894 (executing program) 2022/10/06 23:51:38 fetching corpus: 3400, signal 154839/185600 (executing program) 2022/10/06 23:51:38 fetching corpus: 3450, signal 155367/186193 (executing program) 2022/10/06 23:51:38 fetching corpus: 3500, signal 156320/186920 (executing program) 2022/10/06 23:51:38 fetching corpus: 3550, signal 157285/187638 (executing program) 2022/10/06 23:51:38 fetching corpus: 3600, signal 157869/188261 (executing program) 2022/10/06 23:51:38 fetching corpus: 3650, signal 158355/188790 (executing program) 2022/10/06 23:51:39 fetching corpus: 3700, signal 159789/189562 (executing program) 2022/10/06 23:51:39 fetching corpus: 3750, signal 160279/190066 (executing program) 2022/10/06 23:51:39 fetching corpus: 3800, signal 160987/190623 (executing program) 2022/10/06 23:51:39 fetching corpus: 3850, signal 161696/191169 (executing program) 2022/10/06 23:51:39 fetching corpus: 3900, signal 162489/191673 (executing program) 2022/10/06 23:51:39 fetching corpus: 3950, signal 162854/192134 (executing program) 2022/10/06 23:51:39 fetching corpus: 4000, signal 163442/192639 (executing program) 2022/10/06 23:51:39 fetching corpus: 4050, signal 163777/193079 (executing program) 2022/10/06 23:51:39 fetching corpus: 4100, signal 164561/193580 (executing program) 2022/10/06 23:51:39 fetching corpus: 4150, signal 165040/194034 (executing program) 2022/10/06 23:51:40 fetching corpus: 4200, signal 166320/194585 (executing program) 2022/10/06 23:51:40 fetching corpus: 4250, signal 167155/195027 (executing program) 2022/10/06 23:51:40 fetching corpus: 4300, signal 167751/195425 (executing program) 2022/10/06 23:51:40 fetching corpus: 4350, signal 168672/195867 (executing program) 2022/10/06 23:51:40 fetching corpus: 4400, signal 169165/196223 (executing program) 2022/10/06 23:51:40 fetching corpus: 4450, signal 170219/196638 (executing program) 2022/10/06 23:51:40 fetching corpus: 4500, signal 170845/196946 (executing program) 2022/10/06 23:51:40 fetching corpus: 4550, signal 171584/197305 (executing program) 2022/10/06 23:51:41 fetching corpus: 4600, signal 172143/197713 (executing program) 2022/10/06 23:51:41 fetching corpus: 4650, signal 172480/198022 (executing program) 2022/10/06 23:51:41 fetching corpus: 4700, signal 172868/198318 (executing program) 2022/10/06 23:51:41 fetching corpus: 4750, signal 173543/198620 (executing program) 2022/10/06 23:51:41 fetching corpus: 4800, signal 174447/198991 (executing program) 2022/10/06 23:51:41 fetching corpus: 4850, signal 175499/199283 (executing program) 2022/10/06 23:51:41 fetching corpus: 4900, signal 175974/199549 (executing program) 2022/10/06 23:51:41 fetching corpus: 4950, signal 176522/199788 (executing program) 2022/10/06 23:51:41 fetching corpus: 5000, signal 176914/199831 (executing program) 2022/10/06 23:51:41 fetching corpus: 5050, signal 177729/199831 (executing program) 2022/10/06 23:51:42 fetching corpus: 5100, signal 178342/199877 (executing program) 2022/10/06 23:51:42 fetching corpus: 5150, signal 178665/199880 (executing program) 2022/10/06 23:51:42 fetching corpus: 5200, signal 178989/199885 (executing program) 2022/10/06 23:51:42 fetching corpus: 5250, signal 179634/199885 (executing program) 2022/10/06 23:51:42 fetching corpus: 5300, signal 180334/199893 (executing program) 2022/10/06 23:51:42 fetching corpus: 5350, signal 180919/199900 (executing program) 2022/10/06 23:51:42 fetching corpus: 5400, signal 181192/199900 (executing program) 2022/10/06 23:51:42 fetching corpus: 5450, signal 181755/199901 (executing program) 2022/10/06 23:51:42 fetching corpus: 5500, signal 182679/199902 (executing program) 2022/10/06 23:51:42 fetching corpus: 5502, signal 182683/199902 (executing program) 2022/10/06 23:51:42 fetching corpus: 5502, signal 182683/199902 (executing program) 2022/10/06 23:51:45 starting 8 fuzzer processes 23:51:45 executing program 0: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/91, 0x5b}], 0x3, &(0x7f0000000200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x88}}], 0x1, 0x100, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000300)={0x0, 0x4, 0xcadd410c7c8b4562, [0x101, 0x1000, 0xfffffffffffffff9, 0x924, 0xff], [0xffffffff, 0x2, 0x47, 0x10000, 0x8d, 0x8, 0x6, 0x8ba7, 0x7fc0, 0x6, 0x1, 0x8, 0x8000, 0x5, 0x2, 0x79cd8fd7, 0x8fd, 0x54, 0x7, 0x2, 0x2, 0x2, 0x0, 0x3700000000000000, 0xfffffffffffffffa, 0x6627, 0x46e0, 0x1, 0x800, 0x9, 0x2, 0xff, 0x80000000, 0x9, 0x27, 0x80000000, 0x9, 0x8, 0x70000000, 0x100000000, 0x3ff, 0x100000001, 0x40, 0x3f, 0x81, 0x93, 0x4, 0x3, 0x7, 0x8, 0x5, 0xa6e, 0x1000, 0x1f, 0x6, 0x7, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x8, 0x89c1, 0x10000, 0xfffffffffffffffd, 0xb9f1, 0x1, 0xfffffffffffffffc, 0x0, 0x5, 0x4, 0x6, 0x1000, 0x7, 0x15, 0x3, 0x82bf, 0x401, 0x200, 0x8, 0x10000, 0x2, 0x4, 0xe141, 0xfffffffffffff772, 0x2, 0x1000, 0x8, 0x4, 0x3, 0xc1, 0x80000000, 0x5, 0x3, 0x9, 0x4, 0x3, 0x4, 0x200, 0x3, 0xfffffffffffff5db, 0xe25, 0x1, 0x101, 0x1, 0x603e, 0x40, 0x1, 0x7, 0x959f, 0x1, 0x1f, 0x4a0a, 0xbf, 0xffff, 0x3, 0x6, 0x8]}) r7 = openat(r2, &(0x7f0000000740)='./file0\x00', 0x2001, 0x172) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x1}, [{0x2, 0x2, r5}, {0x2, 0x3, r8}, {0x2, 0x3, r5}], {}, [{0x8, 0x5, r9}, {0x8, 0x1, r4}], {0x10, 0x1}, {0x20, 0x1}}, 0x4c, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000a00)={0x0, r10, 0x9, 0x2, 0x7, 0x3}) openat(0xffffffffffffffff, &(0x7f0000000a40)='./file1\x00', 0x10002, 0x180) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/devices/tracepoint', 0x0, 0x10) recvmsg$unix(r11, &(0x7f0000000cc0)={&(0x7f0000000ac0), 0x6e, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x100) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) utimensat(r12, &(0x7f0000000d00)='./file1\x00', &(0x7f0000000d80)={{r15, r16/1000+60000}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000dc0)='./file1\x00', 0x240102, 0x79) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000e00)={'macsec0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e40)={'syztnl2\x00', r17, 0x7, 0x8, 0x401, 0x6, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x66, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x4a, 0x3, 0x5, [{@remote, 0x1}]}]}}}}}) openat(r12, &(0x7f0000000ec0)='./file2\x00', 0x0, 0x24) getresuid(&(0x7f0000000f40), &(0x7f0000000f80)=0x0, &(0x7f0000000fc0)) lchown(&(0x7f0000000f00)='./file0\x00', r18, r6) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000010c0), &(0x7f0000001100)=0x40) 23:51:45 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = signalfd(r0, &(0x7f0000000040)={[0x1000]}, 0x8) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000080)=""/30, 0x1e) socketpair(0x6, 0x80000, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = signalfd4(r2, &(0x7f0000000100)={[0x8]}, 0x8, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000140)=""/87, &(0x7f00000001c0)=0x57) recvfrom(r2, &(0x7f0000000200)=""/235, 0xeb, 0x2, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4, 0x4}}, 0x80) clock_gettime(0x0, &(0x7f0000006040)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000005f00)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/225, 0xe1}], 0x1, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/246, 0xf6}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f0000001940)=""/173, 0xad}, {&(0x7f0000001a00)=""/182, 0xb6}, {&(0x7f0000001ac0)=""/110, 0x6e}, {&(0x7f0000001b40)=""/152, 0x98}, {&(0x7f0000001c00)=""/60, 0x3c}, {&(0x7f0000001c40)=""/247, 0xf7}], 0xa, &(0x7f0000001e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f0000002000)=""/54, 0x36}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/163, 0xa3}, {&(0x7f0000003100)=""/214, 0xd6}, {&(0x7f0000003200)=""/229, 0xe5}, {&(0x7f0000003300)=""/205, 0xcd}, {&(0x7f0000003400)=""/98, 0x62}], 0x7}}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/197, 0xc5}, {&(0x7f0000005700)=""/4, 0x4}, {&(0x7f0000005740)=""/221, 0xdd}, {&(0x7f0000005840)=""/244, 0xf4}], 0x7, &(0x7f00000059c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000005a80), 0x6e, &(0x7f0000005e80)=[{&(0x7f0000005b00)=""/138, 0x8a}, {&(0x7f0000005bc0)=""/229, 0xe5}, {&(0x7f0000005cc0)=""/124, 0x7c}, {&(0x7f0000005d40)=""/243, 0xf3}, {&(0x7f0000005e40)=""/23, 0x17}], 0x5}}], 0x5, 0x10020, &(0x7f0000006080)={r5, r6+60000000}) r14 = openat$full(0xffffffffffffff9c, &(0x7f00000060c0), 0x123e00, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r14, &(0x7f0000006200)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006140)={0x5c, 0x0, 0x8, 0x70bd29, 0x20, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg(r7, &(0x7f0000007840)={&(0x7f0000006240)=@generic={0xf, "013d5faea38ddde66bce2eedfd7db68ef8ae21219fd39fa07c4dc5175cc8a73aa51eff61b10819657553fc73183991645d75b46d7df192e5fcc1ca48c3cf0963d8389e77d0eff0cea31b329069ac0728c2b5130fef79ad8437a137f723f91ec92a83289dceac7219a56f7273e0c23d15675c45a86718c6479dcd06ae60a6"}, 0x80, &(0x7f0000007680)=[{&(0x7f00000062c0)="9b9c093cbb607fb55a83efabd2573c48e1686331f3d353b680a5345c3d81567be1b8263d5ae37e22c1d9bf72952ba7efda9aebe0b575f041c7a836a0780ca425483062331825453b2b124cf8e4a9593bf0c0326228a9c8a3269ebc58fb94b7f17c0f968580e286df615a78be74790252d6ac64bffc526a9d72b35ae9ef03ff482931fca2603548a68e967b", 0x8b}, {&(0x7f0000006380)="3e3961fc978bc15292f81619ca8181e46414fa187e58a7", 0x17}, {&(0x7f00000063c0)="5998fb75c86d5cf189cf130ab2221f8f60cc0f6f2e4f08dcacaa4ec3810786b6bb90f38bd2f3", 0x26}, {&(0x7f0000006400)="6e492560a16d23cf34f9b5de22d09ba7cfbdcb93e6b1b8ae827e53ef2c2e55511d45edc3dfe954763a10a007e75b0eab4d35150f040414dd1a754caf75799115de41ef7110dc8c694eba36c2681d5811e8e80ebc3ec9fa9febddd1ed285e25b6ac59c81d0d10ceea8f263f2dcb76dc663be5c58fc269dff336540b8a02383e335799b9ab79b83846309a9939f7dcfb1fda571183780cf0483b6dee6451a00d7cbdcb2ab402281984b85bb961015ddf36e64bd140e6edcb6408a766c77ef73dbffd477036507382", 0xc7}, {&(0x7f0000006500)="9447b4950763f25656a82bf5a88ed3f70f2c7330d84860c17e749d85f88bee024fca02bc9d4992d336cf3d6a25147327fe640e614ac03d7ab54b465d27f7b6", 0x3f}, {&(0x7f0000006540)="0f52923d544b2f912fd05b204deb88ae8c43f23a7a6e5d48e0acc815772ab8f90e2b90075937ab6216db5c6db0cb75fd7d9cc98c9cdf1b12d1ce4dd8ad23d824e714f06104cf0f938c426df51555e2f9787b2d478a966c455e75c01d980aa7fb7051fcf3621f736d8d8084afadcc3ba689101e437e022d635dc8183f99c86917d18dd3da3c94551a2a2f12bb", 0x8c}, {&(0x7f0000006600)="f07640be63830b4be4d62e8d967c98aa70bbcd82c6a3fa250d3225e9f3442bf1e409f0377922c601473127b5739aa820726ba4406d21305f957c8b9e95ad5e243ea0ef86c795557e0070cf1b464a2cf2a4e465ade8dfe64261fa7ce65204ad76c8cc549249ad51cf893adadd", 0x6c}, {&(0x7f0000006680)="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", 0x1000}], 0x8, &(0x7f0000007700)=[{0x10, 0x10b}, {0x100, 0xc, 0x3, "570627ea782a9c91bb7b51d23c42132e768373e62eb3cfe0fbd95abf5195c02e209bc16ac254bc7efe0344342d2171e245b2bcc42b8fd172cbf33996753b8c3ae70036de9248688affc26a1d7baa660bf55d6cee57072453099b11a5eb754222eb58e9900684c2c8251fd7d60810d05ebabcfcfcae893badc6717a2d7ada5bc36e7be0ec329560530e0ef8ad4bcacc2fd383468fbe64681ebdcf1a0563f2b0b840b73f60d23802d85c7e576cea5e6fbeaa4046dcd3b45a14886904bd137b62c9af1f5a8c8ef9c8ddfa1e8effaa0213a1b031ed3090aa9bb5e42995155006a4269f744509ae52f8722cad"}], 0x110}, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r11, 0xc018937a, &(0x7f0000007880)={{0x1, 0x1, 0x18, r13, {0x3}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r15, 0x84009422, &(0x7f00000078c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000007d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000007e00)={&(0x7f0000007cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000007dc0)={&(0x7f0000007d40)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, '/m/+M'}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044104}, 0x4000840) syz_genetlink_get_family_id$nl80211(&(0x7f0000007e40), r10) syz_genetlink_get_family_id$nl80211(&(0x7f0000007e80), r8) 23:51:45 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x13, 0x100) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) r2 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x5, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000, 0x8000}, {&(0x7f00000010c0)="189916dba924bf5c4069a108d54e9106f7b7c4ccd0fd980712cf9691faa3d1a0c74a707d433cb4aa7ac772a3cd0672be5376d6489d1716c31ec1d934c5b2f164154b511223183e6260298531058fc87c34348fffde0ba05f52b0c218c781d6805eb3477d0091987559a789a4eecf536bef33579b356859c3479ba20c896ad7366cf30c4812e4de4e4b46bddd5dc8af212b5ed982", 0x94, 0x2}, {&(0x7f0000001180), 0x0, 0x9}, {&(0x7f00000011c0)="35776e3691bafd7f55631893817777e3b78b38e05445a34a5ab266d4c6ea90610d7abde7e50768d322ffca2f3c842289e50d32508089e139f0390d95d90201627629e9946b6ff10dce635e013f8fd0663c47e1e157b9a22d50b4841138bb823a4f8e31a34745710f2dcd79138083a89d8b9425fed7c0e4f2db", 0x79, 0x5}, {&(0x7f0000001240)="179c439a73277e83da859932accd2298458a0638f366bde0c22e44e08fe74141717ebb268da8a519ed8d6338862acd2a80e040cef4184d275f7940e0b29ff341ead3c826822d5fd541daa9fc3e5df9c06c8b2d47d206827d383d484c1c7a9e12c8397f0ea38a92092229e0a7525319c3162ae19a178dbb19433510a85e4faf2140b886d8e3b02665d0214b0946650a5149ec468a0fdef997f4ee", 0x9a, 0x9}], 0x8000, &(0x7f0000001380)={[{}, {','}, {'/dev/hidraw#\x00'}, {'^}#{\x9c}%'}, {'\x96\'}/'}], [{@obj_user={'obj_user', 0x3d, '\xb3\xc8%-:&/$'}}, {@fsmagic={'fsmagic', 0x3d, 0x1ff}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/hidraw#\x00'}}]}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000001400)={0x0, 0xfffffffffffffffc, 0x5dd6}) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000001440)="9ed4e98eb0bedcf5c42eadb89b5a9d13ab141ecdfbbef76168dacd9fc4e4052904ff2b3581ee2f35c8d1e7a957b70dbbd1612e95fdf5673b7d7b9c06a8693eafc8e2f24ccef5200544bb0b6ff1745b665096d1c14b6b3de8dbd10b689e6ad53a421ffc78b7404b49c5d92592843e201fc326383660e87e98a32289a41952cf4a7edeff6986833be3beb94d5cc844") r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001500), 0x80, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x80000, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000001800)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f00000015c0)={0x1f4, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}]}]}, @NFQA_EXP={0x5c, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x58, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @NFQA_CT={0x48, 0xb, 0x0, 0x1, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0xe8, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffffe}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x8, 0x7]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x37, 0xfff, 0x400, 0x6, 0x6]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_LABELS_MASK={0x8, 0x17, [0x5]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x94, 0x4, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf47c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7e07b574}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x94}, 0x1, 0x0, 0x0, 0x8011}, 0x4004015) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000019c0), 0x604100, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000001a00)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001a80)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000001b40)={{r4}, r7, 0x0, @inherit={0x60, &(0x7f0000001ac0)={0x0, 0x3, 0xfffffffeffffffff, 0x4, {0x20, 0x100000001, 0x1ff, 0x4, 0x5}, [0x3, 0x7f, 0x3ff]}}, @name="09a4b1fd55e5656ccc66206bd65070b1a6c5d812bbd071b0afcc521835436cb59605e817c2ccc483fbfe4cf1859709db9b34c9bce1350baf0ef4af8ba1a93287f1082256645615b8840a738ef9181521e34adf9535be17ae5c03d62d077a48d0b1f2747bb1f97829c7b25a6e7ed32ebc606ca80aba89b06a12fe2800e0777f56218c4d8a5218780be923e513f1d0182902e30ee10df3b7727781b53d9bd8dcfa3a3b69d86b39fb7b66f9fa2f4cf76f83f3a764aabe6758adddd87d723dce37641ebb201df907c8e712f2d4e0a17aa863c493fbbd332b6ad642ff68fb65fe8f7201efad22a3d6cb83013f64202e4afef10c30578793dd7ae680e749d28197e32d3665875ff5b814e840e06bf86722239dae7e7f048bc9c2a70ffe4f47577a8516912a638b8ac39576efea167779ff3a39c47c348ea326a5ab99e66bc88590c0ee4a0f7e7b6637d9dd5e8c6038341d6d90e4575166f9a88e9a586d7b3d20ad2d8a14741ff145613d09cd88c9881c45fbe05da98e5135f11571998f0103d509f6918bb2428209943ecb1633442d98323b7595be2a03bf8c3eb6cd38393432ff23f87c692731c55771505ff943b5b9af1e505ede107e0aad49d104e55c88b5a7b3f56ad64ee8bb33134b352616842888e586c933086ade8dd569fe12a459752448a0f506566dd90cde12346fcb9e0dd82d7afba84cb31d844159698003e34abd692b83926cdfea55208a315a4c87e1b75a55570baa1a748e0b40ebeb89d1378d54a3c480a0732f943d0d13fcefd75c3762a378ba5f2ed02531404fd17212ffcce0bfe511da3f6e282b9ff3abaa6a6264b1f109f2cd6743cc1aa8278623a031ef8177349554a74b5f145b0179d9518e905ed350ed87dac2b711ecd51fa0fecb88fa91e545c1511ef975116fe681869bdfe491c6546e24b715434dc0c5bfe5d7cbba2d7eb7148f5ad544c2c041c7334d482007425cff5df0dc06cd5336264a2f0180d043d35ac27782d711835f54da5be464146112e109726b9e25495d26f6fca8de071316bd5a825698bf8de426952a8e4d4a8304e76360917e5593e9ac6676ead267b66481b7ec1800a85263af4fdab9415dd3e73c2b474203fd62aecc8a56181b79117729a3223d761e33bfcb2a4bdff01937bf3ed49f996a800c7bf754d6ecaa649325dd02049ba93280b3f2a15dfebdecf03c996e1ce90eac873d7d2c024692e7579151c32058b55a88937f8bc3548d30f6b499e0700d06245a51c131cb13a7effeb478119e582d00d7ec9619fe06c1be0e1ad46578c3a50ef8daae07175bcd2fa144cfd55b91f3a2d920fef402445c9f84d01d0e38e86f9d303b7fe8e07ad3357c614d44be2ee5d3551dbf438f2ae2dd7ad2248fb38df371a184622ae35176efc6a395eb9db137b4598d8bbf29371d74c53e1a7de7c00d66f8c61858954d86cab4ab36acbad2e1de4fd79e6516953b3145c7e38b6536e9058eafeb65f78eaeac3322d0f75e5b8e38247833f5123c9fe5ac19e10731f8a77430d719414e937fe61f8e2c18e07dab9fefd719042d0366a60ddfd9fa8746f412b283963c5ec62a417f5d1c83c43c734007d3c55fe35c9be9f302acc6512c98a0461164b61818f851b09627c874ae1a192049291d692eb720aa5de24937cf987cd249fe96e6dec6a7d0e95a438da46298baa345116bc84dd6216fac13a1753a1b29fcc12fe384bc9035d977696d4d4471160a8d0d793e4d2323033c10fcd01abbf2f61c8acb8abcc7223b244289289e6257230bfe09c8e33c4434c74d00e1fef7791873628be4659c2bdacd74522b83cda8bffa66a0b555c927b3082689c09f34157521ce6796657e049f895b0e3c486d64e28946495ba210bf152b4263fd81d8964b6f2f9ef143b2fc6a73645ec9b73459566d43d09cde03eb07f18da95fd33f899c3e90efff6a1d0b8e97c61387ee477662d370f6a023fe28bc8964c6c73ad6eed45d1b78fed6ac611ca5ce04c74acb60113caf9508312f11ef6ac762df2e2795189eff0913934a468860e7e4e0021830c4ea5b94a4cbb6e36957772c9c51e9d638cf4757fdb0a4687332cc6b57d0c3aea887848370b4b244cfbae87673719ec2d73b5921202e4bd79c15db6829d1f2a7880f1a908d49cae2f7a19d062e37963c062a2259d6f78581140923def483d718780c75a7e784ea6d49e8055dc2c9b40927a7dae073ebd12a74f8c7546f93f552d4b8b1f84973df50292f3de901ade9f1c70d6d98bf4a68b35400c9f39bb1da66210b9967bb6508f016e85b256b30affb72ae0290576793ae21b4ab5f8a3e2216280254262a30b0e4ef1afcfcfc8c7cf662c7caffa54c5720f9b4e8bf54ff5f4f22ca705717e483c54324d6c6ab3c7aa37a538a4314ef51bd3d074b440e7e1efeae1dcb0370baa02a1f82e72dd9f3b59cc6014922bee54b14ffec1bb3a0dc58bd9b98b2a3f3e7a4a6153a84f804f816d4135e9f9c7cc165496c982e96918d91e7ecf5a487d941d9a9bae54caa01a5a33ba61ff6f9573419b33d3a2e4169c7f23a821896eba6ad18f42d27ab991910add4daa7f0f96378b9c3e4b25552a134dfbf973421192e970ed46785f4986f2b86eb6e5f843bb411961b756cb8658764050dfdc516367bfb8f9d7ba101aaf2932af3d983977ecc5891e2bd8b3b86a939d86ef5d84fb8e6208e47b7473e6cffbf539838f669eb8ba8354f6e4a2839456af15f80a81126a1b50b6c4c3b17e5412c95aabe5168619bcae0ee39a882a07ee095d110bd23272218da58afcbb1aa174d08ba3c3f0ccb6e8ec52fc1e6966f1c2169176f37f8e945bc0e079e64b2e3ee77cb2d1ab710b17a9f49c14ce33e4b43cf582810c3f4a8ceabd354b433fa0ec5b822aa86ebffb81b24876109a2ca2cac19d5682602b39ac40d17830bb467ca92539d2a09c96f949c4b168c27fa930269dcbe565c5f2b60ae16bc887dcd29c9c43ff6b7faf05641477a6faae942ed1e6961d30efb89ef11857ff48dbc1273e69d1ea10c371f1eec2d017da3a79f80f62ec9aba3004f2a7e02b7c5dbcbc3e9fd505e43ff16cfb9c3a4b74b03407e9cad00f4122851e9efb25e6bf95e7fab332ae62e5cb86cee41d0710a69606d152fb2961c92b7b658b924c6a3baf7d694ceedd02ddb0780134e7b8eb5c6fb0d5b2b3ce83a6430bc916536fb1e72b44abee393fc9918cbdf3a369e369cdd07bb862407e34dc6edf78a0e2896fd658de523aaea87be72d37b9b0608981f69105cff78088de3b6d1c752ee6f72bb4ea7e4f1d0a32061b69c696f24727f0f221770276807a7eb1039c2bc6d637c40f12bc6abf397fa80b1d2b5fcfba722135f2920ac64ba575627e2ad9f782f8320232a9035eceec40d9d792ef18246459e3331c8eb53dcae8f582324ce0ac49a46f5aaca53389a06db9e864af0498ef7bb7aaa8d21158a322f1dda3438e8e85bb38cb28834170bd986df8087d525a4c4f5876ecb3711bb8eec3b597e8324bccc00a8e5026ebf2146c1106c3a4dd6857d58867883111b7727a99cd1dfcfcb349b1dfc7e434bc72afb3cd29c27267cf1df306ee1ff73f728fdedf99874f060d85442092943d26b653379f8853f60ecaaf276eb9f3567c428cb1d8f83909fc32921727719dc0daa9056959ef310d31d5dfd37eb108d7a60ecc4897925d46259692f8d16c07b220a567f72182bf0d36ee703c6013e0e04f6366753a8c195a9a4c953f567135d1bbb29727900adceac5793530a822dcc5a6299089a75c37be18b46545d223ee52fb6e62f4bba62ec9462a610b0d21da55d55a276c432fae57551f7a4b444f878b7eadaca28e718cb8b7a3062ca5e75f57553806dac95da0a76e6aa23b88244803e1eaeda2ff873789c7052bd49a34f848364edebf26410bb65ccd83d4233513b6c0f6bd66aa8b3a1999370ece6203cfddff9c71f0e64238516d9db5cd88fed8c339ede5759a66686b5c1d1e2bda2763f72850281c630afddf884b34dac6ec13304559555a7240f96df1a52dee76d8574084993cabac65b847609187b70ec35cf700d5d86dc5559600b0090060d95d2469f2aeda3455f10b6fffb04e46853e762b9ef7ef4d926245d9bb23de8bd06c412d523480d294bc7ffbd1bca4ea2b1661f9cfe82fbbe36df33a0540b56777492654d375dd240847c1f59f7dfe701db99c898f550222796e7f6e11d740a03dd65a5dc724230f20b94b743bafd5186f4eeabe264178d0a26c3cc8cbd2c4957e94a2fd41acc3e33521c4283610a98b3f46da2bd1d6ac98978af0104f4c393b8edc17351f7419bf445ddeb8a81ee237899a87114ead24dff8febf9abba9dd0e4475b259eee2cca92b224e9ab728dd18ba3a4e4fe93cbc491326bfcb37e010bd425f1d34f7c7c3ef27804de6213b66fdb65b0d03c3245cf9d56ed810167e949ea51eba9c6980a4a7f75ca4ac0e354d20f36d8a5b2055d679cca9f70a2a9ee7bcf07894e26e1bb9c835db7c421c5d3af60d6e3d2bc657adeab1d5c9a1d1a19023ab23fe07f88c30c75e40b418d0a84986d38f0b570a4b6cfeb6c754f8d41faa5e840ea9ebfcf5ca4cbe92c909baa706a72173a806005e4bb309fda400fd60e07d3b4c0490e7b6cb103cea2a557d312896b95cf7ae5ba4a18f8963fb0a42971bb6bd099cbf85f932ffb835d2553fb9977d8b065785d2bc26a830c106865bae3b881ee8e1ec494587ee2da9962e055de555328c799434cc95cc2062bc05afd30d775da282749ec7fbd28a2eed1c98bbb443f26605ee2bb52e7e7a5199e71d2ff9d90186390c903525433c1dc035bdcc4c1d9d7de1e47a5ef64f0e5fc7f0b92c6127485764a2ab58724974ba797f555f69be9903b8da4bb3762c093f496df73a3ba1de64aeb1c4f3034a407a2d2a435968aee7081afeedd0fa062ce4416421d10912e3f7f90df5e47fb2ffc22744b922563f8cfa2a38d3ec336caef47c842d8932d71362910a4a9130e06f79f975cda25b0b939d35d4791772be8e20242f9622a8afefdfb1db1438d8b9d74b599a884107396049931c14882bbc6e27a3e42c7059d553d5641ea9f5bb47617c45323620b6aad70997082dc2263a4a6a626200c9e353f9e589cb4108bfdafdf48ae226496e4cbe37de544b4b60836d8a3f2c68d1f73310099b1562357462cc491a41f5ff67836388a777a9c5151e31fba87bef8ada80834fc7c0d746f821615cfa7f2996451b6196a74def679195603475a16f761cbc0db648b0920fa29dac57256aa95e37f20ceb6861e611fcd8b9188a33a8e7f80dbda194848f8278e152c1804f996f020c806e431963dc5e3c6ce6dc41d3a0df46a821ec98548da479382b3688d1588f4045408e6751e87bf2b6292bcb275dd5f63f81a53e60a9dec0ff3248f4c7efb97c2efb36cc1671278f712c442daa229f9b480a258001ded4da4f27315e9b33177b48fbdb747cf5b8b545058d429316ade1e6db9a8ecef8d2531464bfefa339609cb0f183e57ff288393ee8fedd8941f02b465af7545d8e3b28b93fdf7ee5f04f7249679f7dd188eda533c2df65e03187766c5574f0bd21b342b7c829adc9d4e00d0d0ce40c9d7d0328942d629a52270d92cde41b4615db4a2bb45d411e6d13ca0f1203a46465c08e1cff463e429aa327397845e808a70b6538e6795e380fe4f5957baf961ee385c187412ab2497c0a965a63e510fe71d615d2f6e"}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000002b40)={'veth0_vlan\x00', {0x2, 0x0, @dev}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000002b80)={0x0, 0x4}) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20044080) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000002d00)) [ 65.346705] audit: type=1400 audit(1665100305.770:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:51:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101, 0xc4) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x400080, 0x144) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) lseek(r4, 0xd, 0xbd49f30d03e6c3a7) write$binfmt_aout(r0, &(0x7f0000000180)={{0x10b, 0xa7, 0x7f, 0x6f, 0x101, 0x718, 0x294, 0x800}, "cdb1bc5232c95935132b330e86698b0b30695abb2ffdf685a270fe4af31b27ddfafa8c2035924dcb1e03dedd8054f1e9e28bd1e52a6ae11ce50a60b5b00c7bc17ea9ced97036fcbbe9015508802763cc56217788ece33ad39f9ab3a0a2be870b79d8c99e2134e29d3d7d4e4879d6d40a481b1a807074ca0147e35a740fb6d2872751f352326f4c8d808603770b3105493ed59ee3aa5b07ce70ad8245ba931c7b921e5e5f47336d0798e36c156efd7a6407a7b645d9af", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6d6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) io_setup(0x80000000, &(0x7f00000008c0)=0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/custom1\x00', 0x802, 0x0) r8 = fsopen(&(0x7f0000000b40)='nfs\x00', 0x0) r9 = eventfd2(0x50fe, 0x1) r10 = openat$incfs(r3, &(0x7f0000000e40)='.pending_reads\x00', 0x110100, 0x5) io_submit(r6, 0x6, &(0x7f0000000f40)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xda, r7, &(0x7f0000000940)="34f9f32098b111a8942677ce6976e74d4dc2bf4d4d742714eb22c58d9b1e1047579bed85f40ec7d5326b15c2e5b0d5934d152c23e4de98b127da3d84ac6383f1c960532dd0cd05ebf91b6150e4ef911c89b75146c3171ef1cf316e0be39d9178dba3829b4314d55a9c108d0a06a259edd3149ebdd8f2deddc905fa03f4e37fffbcfb5cc08be28f1c243e505d1e99fef85060f2b512a4edfad165da72fdf0b483c1965a549083e810423bb44192cd9371e2b255a3f5298e6efe54fb1495376a65b9f4f5e922ad7227b7d8a85cbb20802da1264e73d2de45a80ba07ef2dc169b7f7816fe5b8c39f7", 0xe7, 0x80000000, 0x0, 0x3, r0}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000a80)="4bf406c8234c37a8c26c15fcab34903dbe6ea437b8da0dee3fa15177c8ff195dde3bea3ee850162f16667e1cca553b7a154044fc29ad63e3f939fa8085ed5b1559ecd8b8b448", 0x46, 0x40, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x7, 0x5, r8, &(0x7f0000000b80)="2a74bb75813c432d88b23ea19a7424617d77c97d22e3cb3df2cd013659bc11884cdbe8aef252271fa53d0de9e30e0bce9bbc885eb8eb644176a334769fc30aaea5faf51f104c825642438bc7eec6339b6e6f34fadfc0496c62241c646ae5ac9c81630eaea90345da535b533b6849e2779494f663fed0026f987819ef63ae5a7d586daf71905a8c5106b5183a1d77e4c99ad409579509ed0e96bad97fa9bdebabd82fec3dde89e8aad9cff061bec2a92067b71d", 0xb3, 0x1, 0x0, 0x0, r9}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x5, 0x1, r4, &(0x7f0000000c80)="b886962adf2e364a1f4cdf4a2fc97c7b40ff21645d726f2319cfffbdd9476457ae2c5a02268160dd0086f54aa3bb91442dd2830744a6a30ed2087f08fe0fefa421a57e0e51c7279d47e6c7182ba6c8bcc39010ff12841ad6eedd1100b21bbc455a14abef2405c059b4ef202848a3f2457f020194fa2f3d5d2dc839318c23f2f5903915d9f04a345f9f1e273f6915d5f161fea73a04e2c9528f635d77affef9af58f3ba251c0b9fd1c80c0a169dd99a5097dfce5f2f4b5e24da9b6ac1df3553816d946479478e0f502ecbda4713d09416d3faad2479aad421ed3bdeda6d3e077dfecb208e78a89ee45802cfdeba07c8", 0xef, 0x8000, 0x0, 0x4, r3}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000dc0)="61a4181ed087c2e74cf8a80e0567ba284f389374d8ee40e4253a37ee87a853d8dabee520ba5a5e8574515ffca869fde11b4f6dcbc3dfd11f9d68e6962c88b55776e570697b5fbbac66bb0059d19bba4310eabd0ec3ac51ff53d6733f6994728c6c276409eae5fe1aa24a9d03197382c32f", 0x71, 0x9, 0x0, 0x2, r10}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000ec0)="42b700c69e64f27935da675cab227f3e1919d4017fcce53c6ad0b3736e63a1054d013ab90792970293b280284b6979592ac5", 0x32, 0x100000000, 0x0, 0x2, r5}]) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) fallocate(r3, 0x20, 0x3, 0x8261) ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f0000000f80)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000001040)={{r7}, r11, 0x0, @inherit={0x58, &(0x7f0000000fc0)={0x1, 0x2, 0x5, 0x7, {0x1, 0x0, 0x4, 0x6, 0x3cf4}, [0x5, 0x7]}}, @subvolid=0x89}) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000002080)=r12, 0x1) 23:51:45 executing program 4: getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @loopback, 0x3}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4008004) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x284, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "b54aab139e1f550205795cb97bfc638bf0096c892dec05d9b984bd584a164e"}}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x284}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56ea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x880}, 0x40088c5) r2 = socket$inet(0x2, 0x6, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000600)={'bond0\x00', {0x2, 0x0, @initdev}}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80010, r2, 0x29c7e000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000640)={0x0, 'bond0\x00', {0x3}, 0x1ff}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000680)={{0xfffffff8, 0x4}, 0x100, './file0\x00'}) clone3(&(0x7f0000000a80)={0x200000, &(0x7f00000007c0)=0xffffffffffffffff, &(0x7f0000000800)=0x0, &(0x7f0000000840), {0x10}, &(0x7f0000000880)=""/230, 0xe6, &(0x7f0000000980)=""/174, &(0x7f0000000a40)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000b00)=r4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3}, './file0/../file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000b80)={0x2001}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000bc0)={0x10000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000c40)={@private2, 0x0}, &(0x7f0000000c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x2, 0x8, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5ba698a6c222b3d1, 0x7800, 0x0, 0xffffffe0}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000e00)={'ip6_vti0\x00', &(0x7f0000000d80)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x2, 0x0, 0x2, @rand_addr=' \x01\x00', @private0, 0x10, 0x7800, 0x8, 0x6b}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000001380)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x218, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 23:51:45 executing program 5: socketpair(0xb, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x7a6e, &(0x7f0000000040)={0x0, 0x5ad, 0x20, 0x3, 0x2a1}, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000c84000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3ccbf17e09ec1ff9, {0x1}}, 0xffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x180, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x14, 0x3, "b344ab08fd4cc6dc10a4b5905e86194a"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20048001}, 0xc8a0) r5 = syz_io_uring_setup(0x3553, &(0x7f0000000400)={0x0, 0x8142, 0x4, 0x1, 0x392, 0x0, r2}, &(0x7f0000549000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) syz_io_uring_setup(0x4648, &(0x7f0000000500)={0x0, 0x517, 0x8, 0x2, 0x2ef, 0x0, r5}, &(0x7f0000dd2000/0x4000)=nil, &(0x7f0000aab000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3b71, 0x0, 0x0, 0x0, 0x0, 0xbc9fa2ae84ba13cd, {0x1}}, 0x1f) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x2a0, r8, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fffe0}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x892}]}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7c, 0x3, "516bb638f92e05a9af41b50f94083268ec38eb7c06f2869aba7bd804c8c84a5168bfa3971a3fd34f77d1cd2f6bade071b8282092f4bdae45baeaa5f0061a03ab5a1c5e6a097fc93149a0ef2892845f583162299c9c159d7dd33d241756f8fb07a3e6435e1832926ad3768adfdfaf585f8f9463653bc0d485"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "eb3df05733c1bce819096529f1dab83dc13624ae999102045681227799ac47cb"}}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "bbaf432d1bbf27f44873663689dfc616cb05eadf31350f31222c5b2218cd4463a96713f5a5fb42a5c5d64a677a8d77e416cb44701518efd13b7994567db374b93d7871178b7cc2ab2325501b0738ac4e7b3377cceff8b791d3188a1e729c169afc3b788214dd4746be2df53ea66cf97ddac7f9a7b5191cd85a1242f8bee40c8d3ada0a6a34c28b66df655254453e4ff11a392e16b784da501ac52add4a349a7a2a96edeac7f313ae6f0fa3d6a5f14c52fd24d1679cc36692"}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r9, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2681}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4560}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd61}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x85}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd1}, 0x8004) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r1) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000001180)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000000d40)={0x3fc, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x65a2, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xa29c}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private1, 0xd51d}}}}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xa0e6, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1b}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffc9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x5}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfa86, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0x4}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xe60f, @local, 0x8001}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}}}}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x56}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000b3f000/0x3000)=nil, 0x3000, 0x3000001, 0x10, r10, 0x0) syz_io_uring_submit(r12, r6, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x4, 0xf4b9, 0x0, 0x7, 0x2, 0x1}, 0x1) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x18, 0x3f9, 0x800, 0x70bd29, 0x25dfdbff, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x5014}, 0x4000) 23:51:45 executing program 6: r0 = syz_io_uring_complete(0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x1349, &(0x7f0000000000)={0x0, 0x8f3e, 0x1, 0x3, 0x115, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) r3 = fcntl$dupfd(r1, 0x0, r0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r3, &(0x7f00000001c0)=[{{0x77359400}, 0x0, 0x31b, 0x2b}, {{0x77359400}, 0x0, 0x3, 0x4}, {{r4, r5/1000+60000}, 0x11, 0x7, 0x1f}, {{0x77359400}, 0x17, 0x5, 0x58}, {{0x0, 0xea60}, 0x0, 0x21, 0x101}, {{0x77359400}, 0x14, 0x1, 0x2}, {{0x0, 0xea60}, 0x17, 0x0, 0x5}], 0xa8) r6 = socket$inet_icmp(0x2, 0x2, 0x1) fadvise64(r6, 0x2, 0x8001, 0x3) fsetxattr(r1, &(0x7f0000000280)=@random={'system.', '&.,*\x00'}, &(0x7f00000002c0)='team0\x00', 0x6, 0x3) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r10 = fcntl$dupfd(r8, 0x406, r9) flistxattr(r1, &(0x7f0000000480)=""/249, 0xf9) signalfd4(r10, &(0x7f0000000580)={[0x100]}, 0x8, 0x81000) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(0xffffffffffffffff, r11, &(0x7f00000005c0)=0x24, 0x81) 23:51:45 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000040)) r2 = msgget$private(0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x2e, @rand_addr=0x64010102, 0x4e24, 0x0, 'wlc\x00', 0x11, 0x585, 0x1b}, {@multicast2, 0x4e20, 0x10000, 0x0, 0x80000000, 0xef7}}, 0x44) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x2, 0x4dc, [0x0, 0x20000140, 0x20000170, 0x200001a0], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x80, 0x8864, 'veth0_vlan\x00', 'dummy0\x00', 'veth1_macvtap\x00', 'bridge0\x00', @random="889d2b887981", [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0x176, 0x1ee, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0_macvtap\x00', 'rose0\x00', 0x31, 0x2, 0x81, 0x9, 0x7, 0xfffffff9, {0x6}, {0x6}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x7, 0x97, {0x4}}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1ff, 'syz1\x00', {0x7}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x7, 0x7, 0x3ff, 0x0, 0x0, "bd77b3407b695b9805e110f31036b151f5777a2ec5d1cdda775a777aee9c5c5c89e2e163ade8aa40426eb0d9d1104a80d3e5ccebe60f120efbe6ec756fe378b8"}}}}, {0x9, 0x40, 0x2, 'vxcan1\x00', 'geneve0\x00', 'syz_tun\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0x0, 0x0, 0xb47fbc339027bc17, 0xff], @multicast, [0x0, 0xff], 0xce, 0xfe, 0x22e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7f}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x7, 0x8847, 0x4, 0x3}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7e}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:audisp_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x554) r3 = accept(r1, &(0x7f00000006c0)=@can, &(0x7f0000000740)=0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000780)={'TPROXY\x00'}, &(0x7f00000007c0)=0x1e) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000800)) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) r5 = msgget$private(0x0, 0x4a8) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000000980)=""/136) msgctl$IPC_RMID(r2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000a40)) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x100, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d7d8667af6fb24fcdad174562da97e9e538c168d0656420"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f10ebac6d05f1e492bb86d3e3e052b1a3aea560f26604d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9403e5d4a11eb7d8ac48e1abc6c55ecde76a5f69af34fce4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c918a4f83abf5c002fb8cff7c54b4ee465057a1c8de0492e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x100}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xb8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b3d3907700e3019f1789360718"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b1c346537a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6810cca3e87395a6c1da210fc7"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) sendmsg$nl_netfilter(r6, &(0x7f00000011c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000e40)={0x314, 0x6, 0x6, 0x801, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x5}, [@typed={0x8, 0x4e, 0x0, 0x0, @u32=0x6cac}, @generic="78e3c75b9bb6b511cc80b1fd2c14691c64fef9c8d9b6e7c897aa89a3e6feadcf45df8988881c14d8f32e67b8e339f5161745334cee864256a512104a4f541454039aed09b8d343e4f7a780c99fe9898ae189769bb5534e8cf7b1aaf9129cf9abb6f08e236ad0429ca22d7341a10e83e994e68061c03b6cef450e158175a0b1a6cf22debc7a7764e6e8ca7dfcd45edff0b34c79aa86287d7820195f55996a3c15907b3da3c7da92513afd689e28d2dad720", @nested={0x23d, 0x13, 0x0, 0x1, [@generic="8364ae7a0dd8063ce770272c4bf886a97264860c93446550289fc448f7fdcd79b9cd376e8c491afa726af04e5ddbdc2a663a82ea802aeff61adaabca9f89432cf0ad8aaa5c0f31dd45c2150178519e45ec6e3e92cecc4880091024eb4095ad73f079492f807e28bd2327d9d69b45af9e7f162e066d3c5cac8cd8", @generic="cf6c70fd2f4e", @typed={0x4, 0x49}, @generic="76f5871f55bea10bf36d22a8ad", @generic="a25ec0629d3f0624687c6274c1aaf73336742a0f38d4341bc21d4b4e520e204c4cee7046c98d0a77807893269a9dacd44435220fa2430538436c74bdc4ff38c686900e453a97f869707e0eecdb39c505b8b6fb65aeb70cc3a8b78d5b9d7308f142d422c517137d04d0aa4162f170227bf9a3b87f07f60f0e5b59acbd42876a8f969a2ffc4ee111ba221d073f9642b88e4852ca176120870b43baea20381316a12716e772", @generic="c91f38c3975d1ae9fb5ef683229a606b343dce9c173af49dbd0f231d08f07f9a3d5bad58df869d1356", @generic="a3e9f69a96ccb100b92e7c9071f79df40f9dceeb8bc3a6d9288e41138386d9e4675a81aac60fb418847d42a182c387c208d053eab6750fd221a2762bb48c6bf66aec412504d237c242fe4a3213480f675977f0b76e11d93590819ffca78fa293825614dd5e8cd47b2d13a4567f17292dc9906ce2efc1ce4dfe3360b58b151388bfef33aa94631b35ff7afea39547555829d8ef591a46914b74dbfe33435e321930da99881db5777a6340adeb9ae0df8c82fd04cb6dee4b0cf836ec0d920d0fba495ba47a7bf637ad827d3a0a9221998cc77f004959e61bdb4c112d"]}, @typed={0x4, 0x96}]}, 0x314}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) sendmsg$nl_netfilter(r3, &(0x7f0000003b80)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b40)={&(0x7f00000038c0)={0x260, 0x7, 0x8, 0x201, 0x70bd28, 0x25dfdbfb, {0x3, 0x0, 0xa}, [@typed={0x8, 0x92, 0x0, 0x0, @uid}, @nested={0x101, 0x7d, 0x0, 0x1, [@typed={0x28, 0x3e, 0x0, 0x0, @binary="de0e088362e96e7d7492aafcdbbad8e0fe2c8a6333dfb1cc759f4883883278d65ce476fb"}, @generic="7625fef5581210c690f7a97232da09726591fd0d0b1c3792e09e82fc4b8031ce78e3bee5110896489d1401ec8230cf02ef2ec6033d0ed96308d1f86fb394231b54f5e0530eebfa052488bc433fc3481cff3a7f8bc3f110737779c0191f48b7d06d8eb171d0476e85058de234e5ec93efc56ea15ef3b54a896c74aa8d5dd09e3e3411c262a29f85be5511d305a12f801b8cf1ec79521631aa532496ba50cd964f84f7b1030577667c4bb07ebbe5af3be5ee355ad3061016a8135c4ab4091f0d20d588668e4d444583450fb96479f77a4d537cc5db1e"]}, @typed={0x8, 0x61, 0x0, 0x0, @uid}, @generic="de98d73241d24bdd98c2c90ce30cf135d339310df664529b9efe750ded78c328c74a1a02ee5c1a71ab1cf5a18f3d1ab4c5e4bf48cb362a84b81857cf02", @generic="f6045abf149323a092cb6c0a1846c39752de857326af2c12594490a454bec163a2c1371e1c098116bacdc0f25262d750ce8de3b76cc753b5be6541ec1f9b29bf0a1353704b563b67d1584256af82eaedfa9c7b98c351fac96c454fd2ae555942da5a2bfef0844aabfb186dccc22d8ad07c42ca6775aa916a24e13aa27f54b1137f4fe35322b26e3605e49e1dd1da39819ef9389827ae11b83be2f97d3243e535f4de9c63fa6950c3748e4cf3b4bf2d384225ce5cfdea32bdfd9ec7bb4f37c7b07aa54509297a13154b4386334e68e4c428d89dfbbafd158ba1e0dfc8476298b526e3ac", @typed={0x5, 0x81, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x50, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r0}]}, 0x260}, 0x1, 0x0, 0x0, 0x80}, 0x48800) [ 66.632104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.634030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.635443] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.637384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.638960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.640087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.641631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.642999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.644113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.670916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.674011] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.682911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.684206] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.685834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.687949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.689180] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.690460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.691638] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.693158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.693259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.699636] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.704692] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.705439] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.753477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.754840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.756884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.759748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.763141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.764258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.766421] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.767823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.769082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.770354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.775102] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.777467] Bluetooth: hci3: HCI_REQ-0x0c1a [ 68.764976] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 68.764999] Bluetooth: hci0: command 0x0409 tx timeout [ 68.766248] Bluetooth: hci1: command 0x0409 tx timeout [ 68.766743] Bluetooth: hci2: command 0x0409 tx timeout [ 68.767852] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 68.768859] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 68.829254] Bluetooth: hci3: command 0x0409 tx timeout [ 68.829902] Bluetooth: hci4: command 0x0409 tx timeout [ 70.812586] Bluetooth: hci2: command 0x041b tx timeout [ 70.813027] Bluetooth: hci1: command 0x041b tx timeout [ 70.813392] Bluetooth: hci0: command 0x041b tx timeout [ 70.877574] Bluetooth: hci4: command 0x041b tx timeout [ 70.877992] Bluetooth: hci3: command 0x041b tx timeout [ 71.854358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.870839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.872833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.878059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.887479] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.895128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.919377] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.921865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.922493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.923987] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.924853] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.926235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.928265] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.942311] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.861588] Bluetooth: hci0: command 0x040f tx timeout [ 72.862010] Bluetooth: hci1: command 0x040f tx timeout [ 72.862370] Bluetooth: hci2: command 0x040f tx timeout [ 72.924607] Bluetooth: hci3: command 0x040f tx timeout [ 72.925020] Bluetooth: hci4: command 0x040f tx timeout [ 73.821568] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 73.949613] Bluetooth: hci6: command 0x0409 tx timeout [ 74.013636] Bluetooth: hci7: command 0x0409 tx timeout [ 74.909592] Bluetooth: hci2: command 0x0419 tx timeout [ 74.910033] Bluetooth: hci1: command 0x0419 tx timeout [ 74.910408] Bluetooth: hci0: command 0x0419 tx timeout [ 74.973582] Bluetooth: hci4: command 0x0419 tx timeout [ 74.974027] Bluetooth: hci3: command 0x0419 tx timeout [ 75.996700] Bluetooth: hci6: command 0x041b tx timeout [ 76.060647] Bluetooth: hci7: command 0x041b tx timeout [ 78.045598] Bluetooth: hci6: command 0x040f tx timeout [ 78.108688] Bluetooth: hci7: command 0x040f tx timeout [ 78.364655] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 80.093247] Bluetooth: hci6: command 0x0419 tx timeout [ 80.156568] Bluetooth: hci7: command 0x0419 tx timeout [ 83.037639] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 87.836664] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 92.572569] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 97.180747] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 101.852628] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 104.605040] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.607206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.609120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.615268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.619747] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 104.623147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.655590] Bluetooth: hci5: HCI_REQ-0x0c1a [ 106.717612] Bluetooth: hci5: command 0x0409 tx timeout [ 108.765569] Bluetooth: hci5: command 0x041b tx timeout [ 110.812644] Bluetooth: hci5: command 0x040f tx timeout [ 112.861607] Bluetooth: hci5: command 0x0419 tx timeout 23:52:33 executing program 1: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000080)="ecbbc46565", 0x5}, {&(0x7f0000000180)="ca", 0x1}], 0x0, 0x0) 23:52:33 executing program 1: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000080)="ecbbc46565", 0x5}, {&(0x7f0000000180)="ca", 0x1}], 0x0, 0x0) 23:52:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000005c0)={0x0, 0xd1f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 113.309059] loop1: detected capacity change from 0 to 40 [ 113.360442] audit: type=1400 audit(1665100353.784:7): avc: denied { open } for pid=3230 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.389146] audit: type=1400 audit(1665100353.812:8): avc: denied { kernel } for pid=3230 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.401407] ------------[ cut here ]------------ [ 113.401429] [ 113.401432] ====================================================== [ 113.401436] WARNING: possible circular locking dependency detected [ 113.401440] 6.0.0-next-20221006 #1 Not tainted [ 113.401446] ------------------------------------------------------ [ 113.401450] syz-executor.1/3233 is trying to acquire lock: [ 113.401456] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 113.401498] [ 113.401498] but task is already holding lock: [ 113.401501] ffff88800e0bfc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.401531] [ 113.401531] which lock already depends on the new lock. [ 113.401531] [ 113.401534] [ 113.401534] the existing dependency chain (in reverse order) is: [ 113.401537] [ 113.401537] -> #3 (&ctx->lock){....}-{2:2}: [ 113.401551] _raw_spin_lock+0x2a/0x40 [ 113.401563] __perf_event_task_sched_out+0x53b/0x18d0 [ 113.401575] __schedule+0xedd/0x2470 [ 113.401590] schedule+0xda/0x1b0 [ 113.401605] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.401618] syscall_exit_to_user_mode+0x19/0x40 [ 113.401632] do_syscall_64+0x48/0x90 [ 113.401642] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.401656] [ 113.401656] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 113.401670] _raw_spin_lock_nested+0x30/0x40 [ 113.401682] raw_spin_rq_lock_nested+0x1e/0x30 [ 113.401695] task_fork_fair+0x63/0x4d0 [ 113.401712] sched_cgroup_fork+0x3d0/0x540 [ 113.401726] copy_process+0x4183/0x6e20 [ 113.401737] kernel_clone+0xe7/0x890 [ 113.401747] user_mode_thread+0xad/0xf0 [ 113.401757] rest_init+0x24/0x250 [ 113.401770] arch_call_rest_init+0xf/0x14 [ 113.401782] start_kernel+0x4c6/0x4eb [ 113.401792] secondary_startup_64_no_verify+0xe0/0xeb [ 113.401806] [ 113.401806] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 113.401820] _raw_spin_lock_irqsave+0x39/0x60 [ 113.401832] try_to_wake_up+0xab/0x1930 [ 113.401848] up+0x75/0xb0 [ 113.401867] __up_console_sem+0x6e/0x80 [ 113.401887] console_unlock+0x46a/0x590 [ 113.401903] vt_ioctl+0x2822/0x2ca0 [ 113.401916] tty_ioctl+0x785/0x16b0 [ 113.401928] __x64_sys_ioctl+0x19a/0x210 [ 113.401942] do_syscall_64+0x3b/0x90 [ 113.401952] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.401966] [ 113.401966] -> #0 ((console_sem).lock){....}-{2:2}: [ 113.401979] __lock_acquire+0x2a02/0x5e70 [ 113.401997] lock_acquire+0x1a2/0x530 [ 113.402012] _raw_spin_lock_irqsave+0x39/0x60 [ 113.402024] down_trylock+0xe/0x70 [ 113.402040] __down_trylock_console_sem+0x3b/0xd0 [ 113.402056] vprintk_emit+0x16b/0x560 [ 113.402072] vprintk+0x84/0xa0 [ 113.402088] _printk+0xba/0xf1 [ 113.402101] report_bug.cold+0x72/0xab [ 113.402110] handle_bug+0x3c/0x70 [ 113.402119] exc_invalid_op+0x14/0x50 [ 113.402130] asm_exc_invalid_op+0x16/0x20 [ 113.402143] group_sched_out.part.0+0x2c7/0x460 [ 113.402161] ctx_sched_out+0x8f1/0xc10 [ 113.402177] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.402188] __schedule+0xedd/0x2470 [ 113.402203] schedule+0xda/0x1b0 [ 113.402217] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.402228] syscall_exit_to_user_mode+0x19/0x40 [ 113.402242] do_syscall_64+0x48/0x90 [ 113.402251] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.402265] [ 113.402265] other info that might help us debug this: [ 113.402265] [ 113.402268] Chain exists of: [ 113.402268] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 113.402268] [ 113.402283] Possible unsafe locking scenario: [ 113.402283] [ 113.402285] CPU0 CPU1 [ 113.402287] ---- ---- [ 113.402290] lock(&ctx->lock); [ 113.402296] lock(&rq->__lock); [ 113.402302] lock(&ctx->lock); [ 113.402309] lock((console_sem).lock); [ 113.402314] [ 113.402314] *** DEADLOCK *** [ 113.402314] [ 113.402316] 2 locks held by syz-executor.1/3233: [ 113.402323] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 113.402354] #1: ffff88800e0bfc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.402380] [ 113.402380] stack backtrace: [ 113.402383] CPU: 1 PID: 3233 Comm: syz-executor.1 Not tainted 6.0.0-next-20221006 #1 [ 113.402396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.402402] Call Trace: [ 113.402406] [ 113.402410] dump_stack_lvl+0x8b/0xb3 [ 113.402422] check_noncircular+0x263/0x2e0 [ 113.402438] ? format_decode+0x26c/0xb50 [ 113.402456] ? print_circular_bug+0x450/0x450 [ 113.402473] ? simple_strtoul+0x30/0x30 [ 113.402489] ? format_decode+0x26c/0xb50 [ 113.402508] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 113.402526] __lock_acquire+0x2a02/0x5e70 [ 113.402547] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 113.402569] lock_acquire+0x1a2/0x530 [ 113.402586] ? down_trylock+0xe/0x70 [ 113.402604] ? lock_release+0x750/0x750 [ 113.402624] ? vprintk+0x84/0xa0 [ 113.402642] _raw_spin_lock_irqsave+0x39/0x60 [ 113.402654] ? down_trylock+0xe/0x70 [ 113.402672] down_trylock+0xe/0x70 [ 113.402689] ? vprintk+0x84/0xa0 [ 113.402705] __down_trylock_console_sem+0x3b/0xd0 [ 113.402722] vprintk_emit+0x16b/0x560 [ 113.402741] vprintk+0x84/0xa0 [ 113.402758] _printk+0xba/0xf1 [ 113.402771] ? record_print_text.cold+0x16/0x16 [ 113.402788] ? report_bug.cold+0x66/0xab [ 113.402799] ? group_sched_out.part.0+0x2c7/0x460 [ 113.402817] report_bug.cold+0x72/0xab [ 113.402829] handle_bug+0x3c/0x70 [ 113.402840] exc_invalid_op+0x14/0x50 [ 113.402851] asm_exc_invalid_op+0x16/0x20 [ 113.402865] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 113.402885] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 113.402897] RSP: 0018:ffff88803f357c48 EFLAGS: 00010006 [ 113.402906] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.402914] RDX: ffff88803f063580 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 113.402921] RBP: ffff88803f450000 R08: 0000000000000005 R09: 0000000000000001 [ 113.402929] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800e0bfc00 [ 113.402936] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 113.402947] ? group_sched_out.part.0+0x2c7/0x460 [ 113.402967] ? group_sched_out.part.0+0x2c7/0x460 [ 113.402987] ctx_sched_out+0x8f1/0xc10 [ 113.403006] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.403020] ? lock_is_held_type+0xd7/0x130 [ 113.403036] ? __perf_cgroup_move+0x160/0x160 [ 113.403046] ? set_next_entity+0x304/0x550 [ 113.403064] ? update_curr+0x267/0x740 [ 113.403082] ? lock_is_held_type+0xd7/0x130 [ 113.403097] __schedule+0xedd/0x2470 [ 113.403115] ? io_schedule_timeout+0x150/0x150 [ 113.403133] ? rcu_read_lock_sched_held+0x3e/0x80 [ 113.403154] schedule+0xda/0x1b0 [ 113.403170] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.403182] syscall_exit_to_user_mode+0x19/0x40 [ 113.403197] do_syscall_64+0x48/0x90 [ 113.403208] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.403222] RIP: 0033:0x7f52d3fb4b19 [ 113.403230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.403241] RSP: 002b:00007f52d152a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.403252] RAX: 0000000000000001 RBX: 00007f52d40c7f68 RCX: 00007f52d3fb4b19 [ 113.403259] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f52d40c7f6c [ 113.403267] RBP: 00007f52d40c7f60 R08: 000000000000000e R09: 0000000000000000 [ 113.403274] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f52d40c7f6c [ 113.403281] R13: 00007ffe15bd0a3f R14: 00007f52d152a300 R15: 0000000000022000 [ 113.403294] [ 113.465543] WARNING: CPU: 1 PID: 3233 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 113.466106] Modules linked in: [ 113.466305] CPU: 1 PID: 3233 Comm: syz-executor.1 Not tainted 6.0.0-next-20221006 #1 [ 113.466766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 113.467252] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 113.467588] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 113.468651] RSP: 0018:ffff88803f357c48 EFLAGS: 00010006 [ 113.468988] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.469414] RDX: ffff88803f063580 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 113.469837] RBP: ffff88803f450000 R08: 0000000000000005 R09: 0000000000000001 [ 113.470254] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800e0bfc00 [ 113.470672] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002 [ 113.471092] FS: 00007f52d152a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 113.471567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.471911] CR2: 00007fece043b6f4 CR3: 000000001e1ca000 CR4: 0000000000350ee0 [ 113.472330] Call Trace: [ 113.472489] [ 113.472633] ctx_sched_out+0x8f1/0xc10 [ 113.472886] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.473200] ? lock_is_held_type+0xd7/0x130 [ 113.473465] ? __perf_cgroup_move+0x160/0x160 [ 113.473737] ? set_next_entity+0x304/0x550 [ 113.474001] ? update_curr+0x267/0x740 [ 113.474246] ? lock_is_held_type+0xd7/0x130 [ 113.474510] __schedule+0xedd/0x2470 [ 113.474746] ? io_schedule_timeout+0x150/0x150 [ 113.475030] ? rcu_read_lock_sched_held+0x3e/0x80 [ 113.475331] schedule+0xda/0x1b0 [ 113.475548] exit_to_user_mode_prepare+0x114/0x1a0 [ 113.475845] syscall_exit_to_user_mode+0x19/0x40 [ 113.476137] do_syscall_64+0x48/0x90 [ 113.476366] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.476680] RIP: 0033:0x7f52d3fb4b19 [ 113.476911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.478085] RSP: 002b:00007f52d152a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.478563] RAX: 0000000000000001 RBX: 00007f52d40c7f68 RCX: 00007f52d3fb4b19 [ 113.478983] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f52d40c7f6c [ 113.479400] RBP: 00007f52d40c7f60 R08: 000000000000000e R09: 0000000000000000 [ 113.479817] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f52d40c7f6c [ 113.480235] R13: 00007ffe15bd0a3f R14: 00007f52d152a300 R15: 0000000000022000 [ 113.480658] [ 113.480803] irq event stamp: 3776 [ 113.481022] hardirqs last enabled at (3775): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 113.481577] hardirqs last disabled at (3776): [] __schedule+0x1225/0x2470 [ 113.482083] softirqs last enabled at (3438): [] __irq_exit_rcu+0x11b/0x180 [ 113.482596] softirqs last disabled at (3295): [] __irq_exit_rcu+0x11b/0x180 [ 113.483105] ---[ end trace 0000000000000000 ]--- [ 113.787160] syz-executor.1: attempt to access beyond end of device [ 113.787160] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 113.788340] Buffer I/O error on dev loop1, logical block 10, lost async page write 23:52:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000005c0)={0x0, 0xd1f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 113.918101] loop1: detected capacity change from 0 to 40 [ 114.013919] syz-executor.1: attempt to access beyond end of device [ 114.013919] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 114.014827] Buffer I/O error on dev loop1, logical block 10, lost async page write 23:52:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000005c0)={0x0, 0xd1f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 114.140114] loop1: detected capacity change from 0 to 40 [ 114.245388] syz-executor.1: attempt to access beyond end of device [ 114.245388] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 114.246588] Buffer I/O error on dev loop1, logical block 10, lost async page write 23:52:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000005c0)={0x0, 0xd1f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d9", 0xa}, {&(0x7f0000000100)="9f", 0x1}], 0x2, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 114.342579] loop1: detected capacity change from 0 to 40 [ 114.420449] syz-executor.1: attempt to access beyond end of device [ 114.420449] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 114.421352] Buffer I/O error on dev loop1, logical block 10, lost async page write 23:52:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000005c0)={0x0, 0xd1f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 114.523070] loop1: detected capacity change from 0 to 40 [ 114.614235] syz-executor.1: attempt to access beyond end of device [ 114.614235] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 114.615139] Buffer I/O error on dev loop1, logical block 10, lost async page write 23:52:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000005c0)={0x0, 0xd1f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 114.707863] loop1: detected capacity change from 0 to 40 [ 114.746672] syz-executor.1: attempt to access beyond end of device [ 114.746672] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 114.747473] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 114.787904] loop2: detected capacity change from 0 to 128 [ 114.791951] nfs4: Unknown parameter '/dev/hidraw#' [ 114.811953] loop2: detected capacity change from 0 to 128 [ 114.812468] nfs4: Unknown parameter '/dev/hidraw#' [ 118.519149] audit: type=1400 audit(1665100358.943:9): avc: denied { create } for pid=3676 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 VM DIAGNOSIS: 23:52:34 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888037ec6d00 RCX=ffffffff81691425 RDX=ffff88801d589ac0 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88803f447b48 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=dffffc0000000000 R13=0000560b02a0f000 R14=0000560b02a0f000 R15=ffffffffffffffff RIP=ffffffff81461cf0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0a5e6a96f4 CR3=000000003dbac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0a5e6b847000007f0a5e6b7f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c0801 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff88803f357690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000072 R11=0000000000000001 R12=0000000000000072 R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c07f0 RIP=ffffffff823c0859 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f52d152a700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fece043b6f4 CR3=000000001e1ca000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000