Warning: Permanently added '[localhost]:65418' (ECDSA) to the list of known hosts. 2022/09/24 00:00:38 fuzzer started 2022/09/24 00:00:38 dialing manager at localhost:38881 syzkaller login: [ 46.122442] cgroup: Unknown subsys name 'net' [ 46.213078] cgroup: Unknown subsys name 'rlimit' 2022/09/24 00:00:52 syscalls: 2215 2022/09/24 00:00:52 code coverage: enabled 2022/09/24 00:00:52 comparison tracing: enabled 2022/09/24 00:00:52 extra coverage: enabled 2022/09/24 00:00:52 setuid sandbox: enabled 2022/09/24 00:00:52 namespace sandbox: enabled 2022/09/24 00:00:52 Android sandbox: enabled 2022/09/24 00:00:52 fault injection: enabled 2022/09/24 00:00:52 leak checking: enabled 2022/09/24 00:00:52 net packet injection: enabled 2022/09/24 00:00:52 net device setup: enabled 2022/09/24 00:00:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/24 00:00:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/24 00:00:52 USB emulation: enabled 2022/09/24 00:00:52 hci packet injection: enabled 2022/09/24 00:00:52 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/24 00:00:52 802.15.4 emulation: enabled 2022/09/24 00:00:53 fetching corpus: 50, signal 30902/32629 (executing program) 2022/09/24 00:00:53 fetching corpus: 100, signal 40425/43709 (executing program) 2022/09/24 00:00:53 fetching corpus: 150, signal 49215/53925 (executing program) 2022/09/24 00:00:53 fetching corpus: 200, signal 56513/62524 (executing program) 2022/09/24 00:00:53 fetching corpus: 250, signal 61995/69292 (executing program) 2022/09/24 00:00:53 fetching corpus: 300, signal 67942/76375 (executing program) 2022/09/24 00:00:53 fetching corpus: 350, signal 72457/82008 (executing program) 2022/09/24 00:00:54 fetching corpus: 400, signal 77021/87638 (executing program) 2022/09/24 00:00:54 fetching corpus: 450, signal 80134/91803 (executing program) 2022/09/24 00:00:54 fetching corpus: 500, signal 81861/94671 (executing program) 2022/09/24 00:00:54 fetching corpus: 550, signal 84215/98123 (executing program) 2022/09/24 00:00:54 fetching corpus: 600, signal 87735/102564 (executing program) 2022/09/24 00:00:54 fetching corpus: 650, signal 90031/105849 (executing program) 2022/09/24 00:00:54 fetching corpus: 700, signal 91556/108399 (executing program) 2022/09/24 00:00:54 fetching corpus: 750, signal 94180/111903 (executing program) 2022/09/24 00:00:54 fetching corpus: 800, signal 97041/115551 (executing program) 2022/09/24 00:00:54 fetching corpus: 850, signal 99534/118902 (executing program) 2022/09/24 00:00:55 fetching corpus: 900, signal 101877/122051 (executing program) 2022/09/24 00:00:55 fetching corpus: 950, signal 104797/125606 (executing program) 2022/09/24 00:00:55 fetching corpus: 1000, signal 106960/128488 (executing program) 2022/09/24 00:00:55 fetching corpus: 1050, signal 108812/131083 (executing program) 2022/09/24 00:00:55 fetching corpus: 1100, signal 110503/133488 (executing program) 2022/09/24 00:00:55 fetching corpus: 1150, signal 111646/135451 (executing program) 2022/09/24 00:00:55 fetching corpus: 1200, signal 113205/137690 (executing program) 2022/09/24 00:00:56 fetching corpus: 1250, signal 115103/140238 (executing program) 2022/09/24 00:00:56 fetching corpus: 1300, signal 116492/142288 (executing program) 2022/09/24 00:00:56 fetching corpus: 1350, signal 117808/144318 (executing program) 2022/09/24 00:00:56 fetching corpus: 1400, signal 120924/147703 (executing program) 2022/09/24 00:00:56 fetching corpus: 1450, signal 123020/150225 (executing program) 2022/09/24 00:00:56 fetching corpus: 1500, signal 124703/152419 (executing program) 2022/09/24 00:00:56 fetching corpus: 1550, signal 126135/154354 (executing program) 2022/09/24 00:00:56 fetching corpus: 1600, signal 127088/155974 (executing program) 2022/09/24 00:00:56 fetching corpus: 1650, signal 128528/157907 (executing program) 2022/09/24 00:00:57 fetching corpus: 1700, signal 130552/160196 (executing program) 2022/09/24 00:00:57 fetching corpus: 1750, signal 134434/163840 (executing program) 2022/09/24 00:00:57 fetching corpus: 1800, signal 136083/165796 (executing program) 2022/09/24 00:00:57 fetching corpus: 1850, signal 137697/167781 (executing program) 2022/09/24 00:00:57 fetching corpus: 1900, signal 139151/169562 (executing program) 2022/09/24 00:00:57 fetching corpus: 1950, signal 140839/171538 (executing program) 2022/09/24 00:00:57 fetching corpus: 2000, signal 142191/173218 (executing program) 2022/09/24 00:00:57 fetching corpus: 2050, signal 143344/174742 (executing program) 2022/09/24 00:00:58 fetching corpus: 2100, signal 144344/176136 (executing program) 2022/09/24 00:00:58 fetching corpus: 2150, signal 145749/177758 (executing program) 2022/09/24 00:00:58 fetching corpus: 2200, signal 147577/179631 (executing program) 2022/09/24 00:00:58 fetching corpus: 2250, signal 148971/181205 (executing program) 2022/09/24 00:00:58 fetching corpus: 2300, signal 150501/182846 (executing program) 2022/09/24 00:00:58 fetching corpus: 2350, signal 151381/184046 (executing program) 2022/09/24 00:00:58 fetching corpus: 2400, signal 152176/185215 (executing program) 2022/09/24 00:00:58 fetching corpus: 2450, signal 153523/186723 (executing program) 2022/09/24 00:00:59 fetching corpus: 2500, signal 154718/188109 (executing program) 2022/09/24 00:00:59 fetching corpus: 2550, signal 156808/189959 (executing program) 2022/09/24 00:00:59 fetching corpus: 2600, signal 158013/191295 (executing program) 2022/09/24 00:00:59 fetching corpus: 2650, signal 159398/192725 (executing program) 2022/09/24 00:00:59 fetching corpus: 2700, signal 161613/194526 (executing program) 2022/09/24 00:00:59 fetching corpus: 2750, signal 162569/195659 (executing program) 2022/09/24 00:00:59 fetching corpus: 2800, signal 164472/197240 (executing program) 2022/09/24 00:00:59 fetching corpus: 2850, signal 165072/198159 (executing program) 2022/09/24 00:01:00 fetching corpus: 2900, signal 166100/199299 (executing program) 2022/09/24 00:01:00 fetching corpus: 2950, signal 166843/200264 (executing program) 2022/09/24 00:01:00 fetching corpus: 3000, signal 167423/201158 (executing program) 2022/09/24 00:01:00 fetching corpus: 3050, signal 168623/202291 (executing program) 2022/09/24 00:01:00 fetching corpus: 3100, signal 169298/203188 (executing program) 2022/09/24 00:01:00 fetching corpus: 3150, signal 170425/204270 (executing program) 2022/09/24 00:01:00 fetching corpus: 3200, signal 171730/205400 (executing program) 2022/09/24 00:01:01 fetching corpus: 3250, signal 172563/206298 (executing program) 2022/09/24 00:01:01 fetching corpus: 3300, signal 173897/207388 (executing program) 2022/09/24 00:01:01 fetching corpus: 3350, signal 174589/208196 (executing program) 2022/09/24 00:01:01 fetching corpus: 3400, signal 175052/208903 (executing program) 2022/09/24 00:01:01 fetching corpus: 3450, signal 175950/209789 (executing program) 2022/09/24 00:01:01 fetching corpus: 3500, signal 176422/210475 (executing program) 2022/09/24 00:01:01 fetching corpus: 3550, signal 177674/211437 (executing program) 2022/09/24 00:01:01 fetching corpus: 3600, signal 178234/212153 (executing program) 2022/09/24 00:01:01 fetching corpus: 3650, signal 179570/213158 (executing program) 2022/09/24 00:01:02 fetching corpus: 3700, signal 180404/213931 (executing program) 2022/09/24 00:01:02 fetching corpus: 3750, signal 181369/214726 (executing program) 2022/09/24 00:01:02 fetching corpus: 3800, signal 182090/215441 (executing program) 2022/09/24 00:01:02 fetching corpus: 3850, signal 182848/216146 (executing program) 2022/09/24 00:01:02 fetching corpus: 3900, signal 183350/216714 (executing program) 2022/09/24 00:01:02 fetching corpus: 3950, signal 183735/217268 (executing program) 2022/09/24 00:01:02 fetching corpus: 4000, signal 184222/217868 (executing program) 2022/09/24 00:01:02 fetching corpus: 4050, signal 185152/218595 (executing program) 2022/09/24 00:01:03 fetching corpus: 4100, signal 186486/219432 (executing program) 2022/09/24 00:01:03 fetching corpus: 4150, signal 187428/220090 (executing program) 2022/09/24 00:01:03 fetching corpus: 4200, signal 187920/220596 (executing program) 2022/09/24 00:01:03 fetching corpus: 4250, signal 188771/221287 (executing program) 2022/09/24 00:01:03 fetching corpus: 4300, signal 189390/221842 (executing program) 2022/09/24 00:01:03 fetching corpus: 4350, signal 190051/222390 (executing program) 2022/09/24 00:01:03 fetching corpus: 4400, signal 190850/223108 (executing program) 2022/09/24 00:01:03 fetching corpus: 4450, signal 191365/223616 (executing program) 2022/09/24 00:01:03 fetching corpus: 4500, signal 191881/224088 (executing program) 2022/09/24 00:01:03 fetching corpus: 4550, signal 192528/224618 (executing program) 2022/09/24 00:01:04 fetching corpus: 4600, signal 194056/225291 (executing program) 2022/09/24 00:01:04 fetching corpus: 4650, signal 195041/225854 (executing program) 2022/09/24 00:01:04 fetching corpus: 4700, signal 195440/226257 (executing program) 2022/09/24 00:01:04 fetching corpus: 4750, signal 195949/226694 (executing program) 2022/09/24 00:01:04 fetching corpus: 4800, signal 196735/227163 (executing program) 2022/09/24 00:01:04 fetching corpus: 4850, signal 197283/227568 (executing program) 2022/09/24 00:01:04 fetching corpus: 4900, signal 198123/228021 (executing program) 2022/09/24 00:01:04 fetching corpus: 4950, signal 198876/228409 (executing program) 2022/09/24 00:01:05 fetching corpus: 5000, signal 199455/228801 (executing program) 2022/09/24 00:01:05 fetching corpus: 5050, signal 200191/229191 (executing program) 2022/09/24 00:01:05 fetching corpus: 5100, signal 201508/229644 (executing program) 2022/09/24 00:01:05 fetching corpus: 5150, signal 201964/229981 (executing program) 2022/09/24 00:01:05 fetching corpus: 5200, signal 202416/230287 (executing program) 2022/09/24 00:01:05 fetching corpus: 5250, signal 203276/230642 (executing program) 2022/09/24 00:01:05 fetching corpus: 5300, signal 204215/230967 (executing program) 2022/09/24 00:01:05 fetching corpus: 5350, signal 204749/231258 (executing program) 2022/09/24 00:01:05 fetching corpus: 5400, signal 205170/231549 (executing program) 2022/09/24 00:01:05 fetching corpus: 5450, signal 206215/231873 (executing program) 2022/09/24 00:01:06 fetching corpus: 5500, signal 206841/232178 (executing program) 2022/09/24 00:01:06 fetching corpus: 5550, signal 207442/232436 (executing program) 2022/09/24 00:01:06 fetching corpus: 5600, signal 207885/232669 (executing program) 2022/09/24 00:01:06 fetching corpus: 5650, signal 208500/232918 (executing program) 2022/09/24 00:01:06 fetching corpus: 5700, signal 209247/233148 (executing program) 2022/09/24 00:01:06 fetching corpus: 5750, signal 209870/233278 (executing program) 2022/09/24 00:01:06 fetching corpus: 5800, signal 210266/233282 (executing program) 2022/09/24 00:01:06 fetching corpus: 5850, signal 210613/233293 (executing program) 2022/09/24 00:01:07 fetching corpus: 5900, signal 212450/233337 (executing program) 2022/09/24 00:01:07 fetching corpus: 5950, signal 213236/233340 (executing program) 2022/09/24 00:01:07 fetching corpus: 5968, signal 213520/233416 (executing program) 2022/09/24 00:01:07 fetching corpus: 5968, signal 213520/233416 (executing program) 2022/09/24 00:01:09 starting 8 fuzzer processes 00:01:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='{%]^(,\x00', 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2100c2, 0x141, 0x5}, 0x18) move_mount(r4, &(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0xf) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) pwritev2(r5, &(0x7f0000000340)=[{&(0x7f0000000300)="c641faef7de01f5f9d9e33bb2ecc7ed6dbb91497584f4b83ca70b2684ffbef2f3ec8276d831e025b85075c36c02c9bc4a37dfadf034d5b67ede7dc40700a8f39", 0x40}], 0x1, 0x2, 0x1, 0x0) mount$9p_unix(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x8}}, {@loose}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '[!\x03&#'}}, {@permit_directio}]}}) r6 = pidfd_getfd(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$inet_buf(r6, 0x0, 0x601cc987238d5b97, &(0x7f0000000500)="208ec3928835d852b229b9e0aae39e9bb77e7f5b6d1fd619c47e92563951c494a9ce3ca3f781ef9cee81e47719b7b2918840b9f10c892df59c9ec96365caa5227f81b964c99cb4b3105cb484059122e8220695361fb13919664827c2d1a144a3c7fd3787db47e1bca0865ecfc437e349832a8f1f29e2c4bc5f74b9ec7694f81cd1638fa168aa729dcbf18b95fff014d60f6afba56d883fbd42bbb90f0779426b74c27d216c2ace8a8b2942a622533b5b187d21ab9ad687b31584691a226394a2fc5b8f9aaf5ffc59775bcfe9241bdc1d3062", 0xd2) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000600)={0x28, {{0x2, 0x4e22, @loopback}}}, 0x88) statx(r5, &(0x7f0000000700)='./file1\x00', 0x100, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f00000006c0)='./file1\x00', r8, 0xffffffffffffffff, 0x100) setxattr$security_capability(&(0x7f0000000840)='./file1\x00', &(0x7f0000000880), &(0x7f00000008c0)=@v1={0x1000000, [{0x2, 0x1}]}, 0xc, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000900)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x1) 00:01:09 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3f, 0x7ff, 0x100}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x50000, 0x140) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000000c0)={0x800, 0x4, 0x4}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x1) openat(r1, &(0x7f0000000140)='./file0\x00', 0x80, 0x84) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/199) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x80, @local, 0x7f}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000300)={0x65ed, 0x1f, 0x9, 0x7, 0x15, "272c631d6ea942ee44ed6471cbde1bdc17e835"}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000340)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FICLONE(r2, 0x40049409, r3) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.pending_reads\x00', 0x166000, 0x104) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000003c0)={{0x4, 0xbf}, 0x0, 0x4, 0xffffffe0, {0x1, 0xf4}, 0xff, 0x8}) ioctl$KDMKTONE(r1, 0x4b30, 0x40) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000540)={0x1, 0x1, 0x1000, 0x3d, &(0x7f0000000440)="b544e570a288d52ef11947020d1604ea1d19e57f7853ec54adc74dfb882ed8ada46c386c5015f62edc4e0f90d9ef2f3f104b88cf199632cf8c02e03a20", 0x9c, 0x0, &(0x7f0000000480)="1ef9baad71dcfe6157afba637c23d88c33ff18596cadad562c62fe5933dbb1d0adc5d68e380d31bd6c338674faf4cd729faf1d327b4a859bff99c6e28d804f4a579a4818d49d954c4ac22d55f9706f6a2a7800cf4ff4a253fbc3f75dd711189532ceca84f90bed68f0eeba83a546710ddceb84437b991973b6cf90ac2b8f5b95d2c831aab024bacb435dd7e9404ab1bb2a6508a603fc71d128607d32"}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000600)={&(0x7f00000005c0)=""/47, 0x2f, 0x6, 0x8}) 00:01:09 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x8844) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044804) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20004881) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x1040) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0b1426e88494"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x750c2e61}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x64}}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r2) r3 = open(&(0x7f0000000780)='./file0\x00', 0x284041, 0x20) io_setup(0x3, &(0x7f00000007c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r6 = creat(&(0x7f0000000ac0)='./file0\x00', 0x4) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x18000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {0xff, 0xe7}}, './file0\x00'}) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d40), 0x12000, 0x0) io_submit(r4, 0x7, &(0x7f0000000dc0)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000800)="610bce150673415c2b497dd57390d376e2e9056a5d1315638b1c3691a0df5682073e0925b37a", 0x26, 0x2, 0x0, 0x1, r1}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x5, r5, &(0x7f00000008c0)="9fc8da78bb173727f216a71b97317a880596", 0x12, 0x7, 0x0, 0x3, r1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0x9, r3, &(0x7f0000000940)="9d3cc56a35", 0x5, 0x4, 0x0, 0x0, r1}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x6, 0xd6, r1, &(0x7f00000009c0)="7e8e2aad1d4296d1c2a754743065ee5614ad9a37f432d90df0c29692af91ae910dc2c9df510662a9a7e022274ab813a17f6a025f55c2d4405456f8bede094d72e269b0fb0a0c6002edb135682a8dcbebb5ce9b850e02222a0a029109459fb918f9da63ddc4ca1d8d22178c9018bec283153b6d3b60286f1de87fa55fef2c2e34225edf362af0fb8d7a2ee8391556a480f59169c3a791c9cf67aa95ec20cb0dd50fa7fc0d56734a8087df1f59b8fdd078acc474ea2d3992df81e80690ef80ab226de678241c1ee3dbf16bf6ee0785ea4d109750f5f1075056853b951147", 0xdd, 0x0, 0x0, 0x2, r6}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0x4, r7, &(0x7f0000000b80)="37fbfe793c9a2dcfc3ccddebc277aa804276a4b13bb42e0b9698b1fbbe256aa9b997c37ae9d5772dc315e79500fed16c4381c209626df3c225e434bab79120d88b9df084", 0x44, 0x200, 0x0, 0x1, r3}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000c40)="aaeb53a57f2733ad0061088aeb6f270a16fac321a6f80e20412a433d1711befce6bb03a714ff5cbf44a0765a89f3129cb1171866519903392376df392e76fa6d", 0x40, 0xe24d, 0x0, 0x1, r8}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x9c3f98d524279363, 0x1, r1, &(0x7f0000000d00)="1e3c3e3aaff890d8ffdd36712eff98e88e8f6d13ed03d75051336d00924720a2", 0x20, 0x3a4, 0x0, 0x0, r9}]) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffb}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000814}, 0x1) io_submit(r4, 0x3, &(0x7f0000001140)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000f00)="073d6e79a7c445d649b62146be0ff74f91419491b4515e184e841a7b636c1b4e1f464d21cb905a76f998bbb4b1776c686dc8caac3386fac3795dba5b0dfb62", 0x3f, 0xb7, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0xdc0, r8, &(0x7f0000000fc0)="b6b34db641e9465783e907abe1e70347079d6b2984f61f253f3b318cd7f1852b18fee6c12105445355c77fb2fcb19277a68cfccc73ea1f2f", 0x38, 0x9, 0x0, 0x3, r5}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0x58, 0xffffffffffffffff, &(0x7f0000001080)="0b5e530d7a69536e92690b6ac73959b3aa3afb1984f70dcd1dedcd42e4e479a8b8459522023b02d1970a67a5cc87858695f5475d9aee1e90e7e118e2e87b0df4a2111ac846c4c467b6119a7552f44d82d31a45e521a3d2ae759913607ce80cd777c411d5385aa11611a277f14569fba074cf4baea831850f9a20b20fa84d", 0x7e, 0x100000001, 0x0, 0x0, r6}]) 00:01:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x797faa50f47ca318) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5020010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000055) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20041045) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xfe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xa6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004804}, 0x8000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x442}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x7f438710db92f2e}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x80) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r8, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4000004) 00:01:09 executing program 3: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000080)={{r1}, "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"}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000001080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40) r4 = openat(r3, &(0x7f0000001600)='./file0\x00', 0x10000, 0x8) write$9p(r4, &(0x7f0000001640)="aca0078191f88f8561ee41de68964165eae247f1eefba668fea975e7f4b723b78609f6b530c62e3abecd0ea72de2bb26d44970dad79e175b5847b9f8e1751a9ddd3e5ed163b17ff3b34541a15f978bc9752238db135c0cad583a8314d884e310057baae444e08152ab829a289c3950631afd5c3dc8f81a6c119710d38c54b165d9a2b528c521fd9d6c57fda6859523", 0x8f) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x40, 0x30}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24040004}, 0x4048850) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r4) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x60, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x48042) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x7c, 0x0, 0x928, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x81, 0x38}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2e80}, @NL80211_ATTR_SSID={0x23, 0x34, @random="a21f3e3af32121663c7bdf4169b1c07e53278f0e5ba900cd24fc722369554b"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000001b00)=0x1, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000001b40)={0x169, 0x2, 0x0, 0x1, 0x8000, 0x7}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000001b80)={'bond_slave_1\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000001ec0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c40)={0x22c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4a, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7dd8bfbabb52"}, @NL80211_ATTR_IE={0x1da, 0x2a, [@measure_req={0x26, 0xe1, {0x0, 0x0, 0x0, "83f2003a7586e99dd1674be18ae3050904dd49eb58a3040b8ebd1af2732c35d253a3107050a5699535bd863fe9abea46790c757b9c639959fba6ef159570b1599e9ec0110bf010965cdaeb4c6efba6fc47d9ea96546e35580d204827e8cd2e17af27ff714b08fb9a94b4eed312dc4b70f1ba61846c26ddff8941329502d7f78bcadbbcfde4fb2539bd4f2c97aeadcd2c78cf40230520e04c2291da6fdc8ae2450bc3c5974bfbaf8cb0cc13a6ad124dcaf7895e11ae5ce4e836557d92dfa8b5d2867b9c56fdc786d0e943bdc7fa33ed0692a4e873af1447a89442c3380f8f"}}, @cf={0x4, 0x6, {0x20, 0x1, 0x81}}, @ibss={0x6, 0x2, 0x7e8}, @chsw_timing={0x68, 0x4, {0x6a91, 0x6}}, @random_vendor={0xdd, 0xc5, "d4e410a38df3aa9aca4d17c6a7c2127c4ae9e2c98875ed5758a9692752fab5f35b8c77a23b29bc8fbae24a5f8456a45149e4531852c593cccfac4d35daa2985edaf56d4e9470688c85f7175b323151095771f0fdaf33f9eae14f01adce7bce3fd88e83e28f531dd3a8ac7c524d91f350163e9113219eff4c6746b04abf85bd91e55335cba9e0f9561e8e8f08b188e642ecd35b78ad8cd6f368c55125c37474ba4ecad65e955a5d9abae2183f4ca2ba328711a465f0ac4b256fd2d3d391c0011cfcd18b2a85"}, @mesh_chsw={0x76, 0x6, {0x61, 0x7, 0x10, 0x7}}, @mic={0x8c, 0x10, {0xea7, "9502d00e0c00", @short="2361e433542c9c71"}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@supported_rates={0x1, 0x6, [{0x18, 0x1}, {0x24, 0x1}, {0x16}, {0x12}, {0x36, 0x1}, {0x9, 0x1}]}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x22c}, 0x1, 0x0, 0x0, 0xc840}, 0x1) [ 76.623059] audit: type=1400 audit(1663977669.634:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:01:09 executing program 4: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @private=0xa010101}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x20, {0x2, 0x4e20, @multicast1}, 'veth0_to_hsr\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x4, 0x6b0, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000444], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x0, 0x892f, 'hsr0\x00', 'macsec0\x00', 'wlan0\x00', 'veth0_to_batadv\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xae, 0x136, 0x16e, [@time={{'time\x00', 0x0, 0x18}, {{0xdd1, 0x7, 0x3edd, 0x7f7, 0x101, 0x1, 0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00', {0x9}}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0xfffffffffffffffd}}}}, {0x9, 0x22, 0x6, 'veth0_vlan\x00', 'veth1_virt_wifi\x00', 'erspan0\x00', 'veth0_to_hsr\x00', @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xb7bc09c91c278697], @remote, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xfe, 0x16e, 0x1b6, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x4, 0x3, 0x1, 0x0, 0x1f}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x1ff}}}], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@random="973665f0978a", 0xfffffffffffffffc}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x2, 0x3f, {0x8}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x3, 0x40, 0x88a8, 'macvlan1\x00', 'bridge_slave_0\x00', 'gre0\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xee, 0x176, 0x1ae, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x75c}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x2}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0xfff, {0x5}}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x11, 0x60, 0x1a, 'veth1_to_bond\x00', 'veth1\x00', 'vxcan1\x00', 'macvlan0\x00', @random="781bae7cc8ae", [0x0, 0x0, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@ERROR={'ERROR\x00', 0x20, {"2b7d377374f4a6b32e20b43c0aaaeefab7ac7cf08fc56770ed7f31bb78f8"}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}}]}]}, 0x728) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000880)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x7f, 0x2, 0x2, 0x2, 0x6], 0x2, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r1 = creat(&(0x7f0000000940)='./file0\x00', 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000980)={'ip6_vti0\x00', {0x2, 0x0, @multicast2}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000009c0)={@loopback, @dev}, &(0x7f0000000a00)=0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0xa, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xad3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x410}, 0x20008000) r3 = syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x10000, 0x1, &(0x7f0000000d80)=[{&(0x7f0000000d40)="1b008965a23e8363ac8178cb05d127", 0xf, 0x8f}], 0x122000, &(0x7f0000000dc0)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlate}], [{@pcr={'pcr', 0x3d, 0x30}}]}) utimensat(r3, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={{0x77359400}, {0x77359400}}, 0x100) r4 = openat(r1, &(0x7f0000000ec0)='./file0\x00', 0x70000, 0x29dde2fba79ff70a) r5 = open_tree(r0, &(0x7f0000000f00)='./file0/file0\x00', 0x81800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000012c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000000fc0)={0x2b4, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x284, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3ff, 0x3bf9, 0x6780, 0x4, 0xb582, 0xdbb, 0x9]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x2}, {0x0, 0x1d}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x2, 0x5}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x2, 0xa}, {0x2, 0x2}, {0x4, 0x9}, {0x7}, {0x6, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x2, 0xa}, {0x7, 0x6}, {0x6}, {0x3, 0xa}, {0x2, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x8}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x4}, {0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x4}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x1}, {0x4, 0x3}, {0x0, 0x1}, {0x4, 0xa}, {0x6}, {0x3, 0x8}, {0x3, 0x3}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x4}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41ac, 0x7, 0x8, 0x5, 0xfffd, 0x8, 0x0, 0xb36e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x1f, 0x5, 0x8, 0x9, 0x4174, 0x7, 0xc563]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xa, 0x5, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f, 0x2, 0x2, 0x2, 0x3, 0x400, 0x100]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x9, 0x30, 0x3, 0x4e, 0xc, 0x0, 0x48, 0x18, 0xb, 0xc, 0x2, 0x48, 0x3, 0x3, 0xb, 0xb, 0x1b, 0x73, 0x12, 0x24, 0xc, 0x1, 0x5, 0x24]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x16, 0x24, 0x2, 0x15, 0x5, 0xb, 0x78]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf539, 0x2, 0x4, 0x0, 0x0, 0x2404, 0x7, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x2}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x2, 0x5}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0x5}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {0x4, 0x9}, {0x6, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0xb}, {0x3, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x9, 0x1, 0x6, 0x16, 0x36, 0x48, 0x0, 0xb, 0x4, 0x16, 0x60, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xffff, 0x20, 0x80, 0x400, 0x800, 0x4]}}]}, @NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x8}, {0x1, 0x8}, {0x7}, {0x2}, {0x3, 0x6}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x8}, {0x6, 0x9}, {0x5, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x5}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x3, 0x6}, {0x7, 0x8}, {0x4}, {0x2, 0x4}, {0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0xb, 0x2, 0xb, 0x18, 0xb, 0x6, 0x24, 0x4, 0x36, 0x12, 0x1, 0x6, 0x18, 0x2f, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x5}, {0x7, 0x7}, {0x7, 0x3}, {0x7, 0x8}, {0x3, 0x5}, {}, {0x0, 0x7}, {0x5, 0x8}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0xe}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x7}, {0x2}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x5, 0x12}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x2, 0x7}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x1}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x3}, {0x3, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {0x3, 0xa}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x1b, 0x1b, 0x1, 0x4, 0x27, 0xc, 0x1, 0x4, 0xb, 0x16, 0x48, 0x1, 0x1b, 0xc, 0x69, 0x60, 0x1b, 0x6, 0x4b, 0x386e2cc8dde65fa5, 0xb, 0x18, 0x4, 0x0, 0x2, 0x48, 0x12, 0x29, 0x2, 0x16, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x3, 0x3ff, 0x2, 0xaae1, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x50}, 0x4000) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000014c0)={0x1, 0x1, 0x1000, 0xa4, &(0x7f0000001300)="ac86b26150b578a2ab1bed53ffeb4136268930c66774704b51df21d43f05aa68fd5d000b12d662d893dd2ae1f68d983a3bc749ffc9b31943a0cfe6697537567bf21aea8dd10f16521e2b13a47557aefc34b1bdb9442136c1a044bb82e4147a523fe2fed1d368f7e6935d4da3e6c4373595926656ce46014202123deb6c8c637acb8a494d7dfed0001b0d27da43471f40ecf231b70bfab0ee08fc24fec9762df8f34cc976", 0xc1, 0x0, &(0x7f00000013c0)="e74ac357da64f5b68351cb264fbe807e4c523c42a37d9f956cdcc58a918b9889f4185c1507373c3518975f0b340893dea2f684e505b67f4ed6f5863ec33889535f9e694cf805f56651b96a225b5d017c407f870069db80931d9717fa8df99a9573bd63bef8b564e72a2b73cacb738028b979094d0d9609419b9d46f80a8446db0c92658c24a3d46cee4482cd8dedbb95983d9e70f9e52861a1567bed3c944790ca2d03760be13365b673173fc53d1463a9af04c7d2c45d394053a3a8e8b8553827"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r0, {0x55c, 0x3}}, './file0/file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x88, 0x0, 0x1, 0x10000, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8a10, 0x2d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4004041) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001780)={{0x1, 0x1, 0x18}, './file0\x00'}) 00:01:09 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x400282) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$802154_raw(r2, &(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) r5 = accept4(r1, &(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000740)=0x80, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x2f, 0x1, 0x6, 0x3ff, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x80, 0x2cfa4e20, 0x5}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000a00)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000a80)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000c40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x118, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8004}, 0x40800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000cc0)={'syztnl2\x00', r8, 0x29, 0x4, 0x4, 0x3, 0x0, @rand_addr=' \x01\x00', @empty, 0x700, 0x8, 0x5, 0x90}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x108, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000010c0)={'ip6tnl0\x00', &(0x7f0000001040)={'syztnl2\x00', r9, 0x4, 0x9, 0x0, 0xfff, 0x11, @mcast1, @local, 0x1, 0x1, 0x8, 0x5592506d}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000001180)={'sit0\x00', &(0x7f0000001100)={'ip6tnl0\x00', r7, 0x2f, 0x2b, 0x9, 0xffff, 0x56, @private2, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x1939, 0xc00000}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000014c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x2a0, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x130, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x906fcf6761075a6d}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) 00:01:09 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x10bb00) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x650541, 0x0) read(r4, &(0x7f0000000100)=""/7, 0x7) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x20, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x28000000}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6c19}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0xcc}}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x9) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r1, 0x0) r7 = syz_io_uring_complete(r6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1}, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, 0x0, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040004}, 0x0) r8 = open_tree(r7, &(0x7f0000000740)='./file0/file0\x00', 0x8000) statx(r5, &(0x7f0000000780)='./file0\x00', 0x100, 0x20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/84, 0x54}, {&(0x7f0000000940)=""/80, 0x50}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f0000000a80)=""/35, 0x23}, {&(0x7f0000000ac0)=""/149, 0x95}, {&(0x7f0000000b80)=""/193, 0xc1}, {&(0x7f0000000c80)=""/185, 0xb9}, {&(0x7f0000000d40)=""/95, 0x5f}], 0x8, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40000003) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_any}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, r10}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x62, 0x37, 0x34, 0x33, 0x38, 0x31, 0x64], 0x2d, [0x0, 0x30, 0x31, 0x36], 0x2d, [0x51, 0x0, 0x32, 0x66], 0x2d, [0x61, 0x66, 0x66, 0x34], 0x2d, [0x31, 0x38, 0x35, 0x62, 0x66, 0x65, 0x33, 0x255fb5104f4e18c4]}}}, {@subj_role={'subj_role', 0x3d, '%'}}, {@appraise}]}}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000001080)={0x20, 0x97, 0x8, 0x5, 0x1fd2}) [ 77.839291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.840966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.843294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.846678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.856577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.858629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.863421] Bluetooth: hci0: HCI_REQ-0x0c1a [ 77.901422] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.903161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.919302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.920471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.921747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.925374] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 77.926776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.928072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.929126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.930628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.932195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 77.934226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.937024] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.938278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.939811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 77.944240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.945559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.961003] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.963743] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.965375] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.966975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.967579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.968129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.969662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 77.970572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.971823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 77.973828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 77.974061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.976442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.980472] Bluetooth: hci2: HCI_REQ-0x0c1a [ 77.980507] Bluetooth: hci1: HCI_REQ-0x0c1a [ 77.983294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.985297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.986324] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.987614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 77.989119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 77.989909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.990930] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 77.993017] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.994462] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.003977] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.007590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.009779] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.012789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.016690] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.017112] Bluetooth: hci6: HCI_REQ-0x0c1a [ 78.028535] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.038965] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.042807] Bluetooth: hci7: HCI_REQ-0x0c1a [ 79.926276] Bluetooth: hci0: command 0x0409 tx timeout [ 80.053065] Bluetooth: hci7: command 0x0409 tx timeout [ 80.053646] Bluetooth: hci6: command 0x0409 tx timeout [ 80.054191] Bluetooth: hci5: command 0x0409 tx timeout [ 80.054694] Bluetooth: hci1: command 0x0409 tx timeout [ 80.055225] Bluetooth: hci2: command 0x0409 tx timeout [ 80.055760] Bluetooth: hci4: command 0x0409 tx timeout [ 80.056306] Bluetooth: hci3: command 0x0409 tx timeout [ 81.972947] Bluetooth: hci0: command 0x041b tx timeout [ 82.101005] Bluetooth: hci3: command 0x041b tx timeout [ 82.101798] Bluetooth: hci4: command 0x041b tx timeout [ 82.102598] Bluetooth: hci2: command 0x041b tx timeout [ 82.103381] Bluetooth: hci1: command 0x041b tx timeout [ 82.104772] Bluetooth: hci5: command 0x041b tx timeout [ 82.105529] Bluetooth: hci6: command 0x041b tx timeout [ 82.106284] Bluetooth: hci7: command 0x041b tx timeout [ 84.020938] Bluetooth: hci0: command 0x040f tx timeout [ 84.149202] Bluetooth: hci7: command 0x040f tx timeout [ 84.149236] Bluetooth: hci5: command 0x040f tx timeout [ 84.150041] Bluetooth: hci6: command 0x040f tx timeout [ 84.150444] Bluetooth: hci1: command 0x040f tx timeout [ 84.151198] Bluetooth: hci2: command 0x040f tx timeout [ 84.151575] Bluetooth: hci4: command 0x040f tx timeout [ 84.152300] Bluetooth: hci3: command 0x040f tx timeout [ 86.068929] Bluetooth: hci0: command 0x0419 tx timeout [ 86.196968] Bluetooth: hci4: command 0x0419 tx timeout [ 86.197456] Bluetooth: hci2: command 0x0419 tx timeout [ 86.197906] Bluetooth: hci1: command 0x0419 tx timeout [ 86.198323] Bluetooth: hci6: command 0x0419 tx timeout [ 86.198721] Bluetooth: hci5: command 0x0419 tx timeout [ 86.199147] Bluetooth: hci7: command 0x0419 tx timeout [ 86.199920] Bluetooth: hci3: command 0x0419 tx timeout [ 130.395465] loop4: detected capacity change from 0 to 128 [ 130.464281] loop4: detected capacity change from 0 to 128 00:02:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/20, 0x14}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff3447c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef819558"], 0x125) [ 130.548543] audit: type=1400 audit(1663977723.562:7): avc: denied { open } for pid=3775 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.550034] audit: type=1400 audit(1663977723.562:8): avc: denied { kernel } for pid=3775 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.559749] ------------[ cut here ]------------ [ 130.559772] [ 130.559775] ====================================================== [ 130.559779] WARNING: possible circular locking dependency detected [ 130.559783] 6.0.0-rc6-next-20220923 #1 Not tainted [ 130.559789] ------------------------------------------------------ [ 130.559792] syz-executor.4/3776 is trying to acquire lock: [ 130.559799] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 130.559840] [ 130.559840] but task is already holding lock: [ 130.559843] ffff88800de50020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.559871] [ 130.559871] which lock already depends on the new lock. [ 130.559871] [ 130.559874] [ 130.559874] the existing dependency chain (in reverse order) is: [ 130.559878] [ 130.559878] -> #3 (&ctx->lock){....}-{2:2}: [ 130.559891] _raw_spin_lock+0x2a/0x40 [ 130.559910] __perf_event_task_sched_out+0x53b/0x18d0 [ 130.559922] __schedule+0xedd/0x2470 [ 130.559936] schedule+0xda/0x1b0 [ 130.559948] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.559960] syscall_exit_to_user_mode+0x19/0x40 [ 130.559973] do_syscall_64+0x48/0x90 [ 130.559989] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.560001] [ 130.560001] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 130.560015] _raw_spin_lock_nested+0x30/0x40 [ 130.560033] raw_spin_rq_lock_nested+0x1e/0x30 [ 130.560046] task_fork_fair+0x63/0x4d0 [ 130.560062] sched_cgroup_fork+0x3d0/0x540 [ 130.560076] copy_process+0x4183/0x6e20 [ 130.560087] kernel_clone+0xe7/0x890 [ 130.560096] user_mode_thread+0xad/0xf0 [ 130.560106] rest_init+0x24/0x250 [ 130.560118] arch_call_rest_init+0xf/0x14 [ 130.560135] start_kernel+0x4c1/0x4e6 [ 130.560150] secondary_startup_64_no_verify+0xe0/0xeb [ 130.560164] [ 130.560164] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 130.560178] _raw_spin_lock_irqsave+0x39/0x60 [ 130.560196] try_to_wake_up+0xab/0x1930 [ 130.560209] up+0x75/0xb0 [ 130.560223] __up_console_sem+0x6e/0x80 [ 130.560238] console_unlock+0x46a/0x590 [ 130.560253] vt_ioctl+0x2822/0x2ca0 [ 130.560267] tty_ioctl+0x7c4/0x1700 [ 130.560278] __x64_sys_ioctl+0x19a/0x210 [ 130.560294] do_syscall_64+0x3b/0x90 [ 130.560310] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.560322] [ 130.560322] -> #0 ((console_sem).lock){....}-{2:2}: [ 130.560335] __lock_acquire+0x2a02/0x5e70 [ 130.560352] lock_acquire+0x1a2/0x530 [ 130.560367] _raw_spin_lock_irqsave+0x39/0x60 [ 130.560386] down_trylock+0xe/0x70 [ 130.560400] __down_trylock_console_sem+0x3b/0xd0 [ 130.560415] vprintk_emit+0x16b/0x560 [ 130.560431] vprintk+0x84/0xa0 [ 130.560447] _printk+0xba/0xf1 [ 130.560458] report_bug.cold+0x72/0xab [ 130.560474] handle_bug+0x3c/0x70 [ 130.560490] exc_invalid_op+0x14/0x50 [ 130.560506] asm_exc_invalid_op+0x16/0x20 [ 130.560517] group_sched_out.part.0+0x2c7/0x460 [ 130.560528] ctx_sched_out+0x8f1/0xc10 [ 130.560538] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.560550] __schedule+0xedd/0x2470 [ 130.560563] schedule+0xda/0x1b0 [ 130.560575] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.560586] syscall_exit_to_user_mode+0x19/0x40 [ 130.560598] do_syscall_64+0x48/0x90 [ 130.560613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.560626] [ 130.560626] other info that might help us debug this: [ 130.560626] [ 130.560629] Chain exists of: [ 130.560629] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 130.560629] [ 130.560643] Possible unsafe locking scenario: [ 130.560643] [ 130.560646] CPU0 CPU1 [ 130.560648] ---- ---- [ 130.560650] lock(&ctx->lock); [ 130.560656] lock(&rq->__lock); [ 130.560663] lock(&ctx->lock); [ 130.560669] lock((console_sem).lock); [ 130.560674] [ 130.560674] *** DEADLOCK *** [ 130.560674] [ 130.560676] 2 locks held by syz-executor.4/3776: [ 130.560683] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 130.560711] #1: ffff88800de50020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.560739] [ 130.560739] stack backtrace: [ 130.560741] CPU: 0 PID: 3776 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 130.560754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.560762] Call Trace: [ 130.560765] [ 130.560770] dump_stack_lvl+0x8b/0xb3 [ 130.560787] check_noncircular+0x263/0x2e0 [ 130.560803] ? format_decode+0x26c/0xb50 [ 130.560820] ? print_circular_bug+0x450/0x450 [ 130.560836] ? enable_ptr_key_workfn+0x20/0x20 [ 130.560852] ? format_decode+0x26c/0xb50 [ 130.560869] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 130.560886] __lock_acquire+0x2a02/0x5e70 [ 130.560908] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.560929] lock_acquire+0x1a2/0x530 [ 130.560946] ? down_trylock+0xe/0x70 [ 130.560962] ? lock_release+0x750/0x750 [ 130.560982] ? vprintk+0x84/0xa0 [ 130.561000] _raw_spin_lock_irqsave+0x39/0x60 [ 130.561018] ? down_trylock+0xe/0x70 [ 130.561034] down_trylock+0xe/0x70 [ 130.561049] ? vprintk+0x84/0xa0 [ 130.561065] __down_trylock_console_sem+0x3b/0xd0 [ 130.561082] vprintk_emit+0x16b/0x560 [ 130.561100] vprintk+0x84/0xa0 [ 130.561117] _printk+0xba/0xf1 [ 130.561128] ? record_print_text.cold+0x16/0x16 [ 130.561144] ? report_bug.cold+0x66/0xab [ 130.561161] ? group_sched_out.part.0+0x2c7/0x460 [ 130.561173] report_bug.cold+0x72/0xab [ 130.561190] handle_bug+0x3c/0x70 [ 130.561207] exc_invalid_op+0x14/0x50 [ 130.561225] asm_exc_invalid_op+0x16/0x20 [ 130.561237] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.561250] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.561262] RSP: 0018:ffff888018a7fc48 EFLAGS: 00010006 [ 130.561271] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.561278] RDX: ffff88801e3db580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 130.561286] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 130.561294] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800de50000 [ 130.561301] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 130.561312] ? group_sched_out.part.0+0x2c7/0x460 [ 130.561325] ? group_sched_out.part.0+0x2c7/0x460 [ 130.561338] ctx_sched_out+0x8f1/0xc10 [ 130.561351] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.561366] ? lock_is_held_type+0xd7/0x130 [ 130.561379] ? __perf_cgroup_move+0x160/0x160 [ 130.561391] ? set_next_entity+0x304/0x550 [ 130.561408] ? update_curr+0x267/0x740 [ 130.561426] ? lock_is_held_type+0xd7/0x130 [ 130.561440] __schedule+0xedd/0x2470 [ 130.561456] ? io_schedule_timeout+0x150/0x150 [ 130.561472] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.561492] schedule+0xda/0x1b0 [ 130.561506] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.561518] syscall_exit_to_user_mode+0x19/0x40 [ 130.561531] do_syscall_64+0x48/0x90 [ 130.561548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.561561] RIP: 0033:0x7f7568c6cb19 [ 130.561569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.561580] RSP: 002b:00007f75661e2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.561591] RAX: 0000000000000001 RBX: 00007f7568d7ff68 RCX: 00007f7568c6cb19 [ 130.561598] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7568d7ff6c [ 130.561606] RBP: 00007f7568d7ff60 R08: 000000000000000e R09: 0000000000000000 [ 130.561613] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7568d7ff6c [ 130.561620] R13: 00007ffce89487bf R14: 00007f75661e2300 R15: 0000000000022000 [ 130.561632] [ 130.617703] WARNING: CPU: 0 PID: 3776 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 130.618384] Modules linked in: [ 130.618626] CPU: 0 PID: 3776 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 130.619221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.620058] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.620459] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.621799] RSP: 0018:ffff888018a7fc48 EFLAGS: 00010006 [ 130.622197] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.622726] RDX: ffff88801e3db580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 130.623251] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 130.623791] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800de50000 [ 130.624313] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 130.624840] FS: 00007f75661e2700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 130.625436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.625866] CR2: 00007fd4e03bd008 CR3: 000000000e01c000 CR4: 0000000000350ef0 [ 130.626388] Call Trace: [ 130.626585] [ 130.626757] ctx_sched_out+0x8f1/0xc10 [ 130.627050] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.627435] ? lock_is_held_type+0xd7/0x130 [ 130.627777] ? __perf_cgroup_move+0x160/0x160 [ 130.628115] ? set_next_entity+0x304/0x550 [ 130.628432] ? update_curr+0x267/0x740 [ 130.628730] ? lock_is_held_type+0xd7/0x130 [ 130.629054] __schedule+0xedd/0x2470 [ 130.629340] ? io_schedule_timeout+0x150/0x150 [ 130.629687] ? rcu_read_lock_sched_held+0x3e/0x80 [ 130.630064] schedule+0xda/0x1b0 [ 130.630328] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.630697] syscall_exit_to_user_mode+0x19/0x40 [ 130.631052] do_syscall_64+0x48/0x90 [ 130.631337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.631731] RIP: 0033:0x7f7568c6cb19 [ 130.632008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.633348] RSP: 002b:00007f75661e2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.633902] RAX: 0000000000000001 RBX: 00007f7568d7ff68 RCX: 00007f7568c6cb19 [ 130.634426] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7568d7ff6c [ 130.634957] RBP: 00007f7568d7ff60 R08: 000000000000000e R09: 0000000000000000 [ 130.635490] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7568d7ff6c [ 130.636036] R13: 00007ffce89487bf R14: 00007f75661e2300 R15: 0000000000022000 [ 130.636569] [ 130.636746] irq event stamp: 732 [ 130.636991] hardirqs last enabled at (731): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 130.637679] hardirqs last disabled at (732): [] __schedule+0x1225/0x2470 [ 130.638291] softirqs last enabled at (486): [] __irq_exit_rcu+0x11b/0x180 [ 130.638922] softirqs last disabled at (423): [] __irq_exit_rcu+0x11b/0x180 [ 130.639554] ---[ end trace 0000000000000000 ]--- 00:02:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/20, 0x14}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff3447c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef819558"], 0x125) 00:02:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x273, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/20, 0x14}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff3447c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef819558"], 0x125) 00:02:04 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0xfffffffffffffdc0, 0x7fffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000027f) openat(r3, &(0x7f0000000180)='./file0\x00', 0x400800, 0x82) close_range(r1, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) 00:02:04 executing program 5: syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x48, &(0x7f0000001980)={[{@shortname_lower}, {@shortname_win95}, {@shortname_mixed}, {@fat=@dmask}, {@shortname_win95}, {@shortname_mixed}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x100) [ 131.497332] ======================================================= [ 131.497332] WARNING: The mand mount option has been deprecated and [ 131.497332] and is ignored by this kernel. Remove the mand [ 131.497332] option from the mount to silence this warning. [ 131.497332] ======================================================= 00:02:04 executing program 2: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x105241, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r6 = eventfd(0x10001) r7 = signalfd(r1, &(0x7f0000000700)={[0x80000000]}, 0x8) io_submit(r0, 0x6, &(0x7f0000000780)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000240)="4c5e06bdf1d46764826e70e79c444dc66e771e5ef8c75a575858b9e6d2c16f3278ff6e0f527f40a83fbb67877e48d59f91a5865507e4fc0f85e0b38af2b19a65a41e12761fce6b3d128eeb69a2e3f30c857e9eb94ec3047639c73e86c7938b5527d0e38ad56493a52e5be1cdb41b09bf31a3fdac2623aca54e96cf30ff7361f29ef5fdd2db09429a8f5a5bfe3f50f225f981a3dfe48c9a997ef64516651f730758a02e78307ef0737c0601d8bcf9730c00bc5843efe32e77fc36c558cbbdc96fe0f1ea5b719f00bd68dbe52d810dae46", 0xd0, 0x40, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000380)="427ffcf03710589e412f6f9111ea8d353ec348daad1b42f1796cba19fd2b8939e17cc4781b627799", 0x28, 0x80, 0x0, 0x1, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000400)="47bcad784d4cd412b8f923f6cc6d1744b64fa2f17aec15210e421c4737ea85b6fa24804624bac88a3c45f51fc65177246ac69117429ef91f48e5dbcba7f57a60e2d7f61c85bc8bcf6dd39cfe35421362e8e64d58c99a9bda282ef241f0d04bc9076ab00599fcd09074b70885", 0x6c, 0xfffffffffffffffd, 0x0, 0x1, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x101, r1, &(0x7f0000000500)="3cfea20373af491ab0130bcccb101ae7a46a35d8f52140685492be077b9945539e2da310f4fac145a5b0ab1b95b1b8a5ec6403045a84d3b4df9128123aa5414cc839a1ece35bc699d9203f", 0x4b, 0x2, 0x0, 0x1, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x0, r5, &(0x7f0000000600)="732f8ded933b170a0b3108863cd6ac3566a34f22d176bcb433fb6774e971e57f41382d6139e5d91376a65002787a96dd40445d255ffcacdf8c052b931c11a9643093cd3b327175c9030aa7305207d09e9f9412bd46db141ecf", 0x59, 0x7, 0x0, 0x3, r6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f00000006c0)="c4da108307859915e525105088949b5a72646f4edca6c9ee6f925dbfdcc5c67b775f8a597c0131a631852ee163a8f7a2ae7c93ca6c42913c00be", 0x3a, 0x4, 0x0, 0x2, r7}]) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600fa0a244c6300000000000000001f000089"]) pwrite64(r8, &(0x7f0000000140)="01", 0x1, 0x7fff) fallocate(r8, 0x41, 0x7fff, 0x40) r9 = openat(r1, &(0x7f00000000c0)='./file1\x00', 0x400002, 0xc0) openat(r9, &(0x7f00000001c0)='./file1\x00', 0x8100, 0x3) pwrite64(r8, &(0x7f0000000180)="01", 0x1, 0x1000) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 131.525884] FAT-fs (loop5): bogus number of reserved sectors [ 131.526324] FAT-fs (loop5): Can't find a valid FAT filesystem 00:02:04 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x0, 0x7, 0x81, 0x1}, {0x5000, 0x1, 0x3f, 0x2}, {0xd5f, 0x7, 0x2, 0xf05f}, {0x2, 0x4, 0x9, 0x3}, {0x4, 0x5, 0x62, 0x1}, {0x4, 0x2, 0x80, 0x7f}, {0x7ff, 0x99, 0x0, 0x6}, {0x7, 0x0, 0xf8, 0x3d}, {0x400, 0x1f, 0x6, 0x8}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x1, 0x4}]}) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x4, 0x20, 0x0) ftruncate(r1, 0x0) finit_module(r0, &(0x7f00000001c0)='#^/\x00', 0x1) [ 131.635847] hrtimer: interrupt took 9838 ns [ 131.658716] audit: type=1326 audit(1663977724.672:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3880 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f93692b19 code=0x0 00:02:04 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10000, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x5) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000200)='x', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x25) fallocate(r2, 0x0, 0x0, 0x4f) link(&(0x7f0000001300)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) accept4(0xffffffffffffffff, &(0x7f0000002800)=@can, &(0x7f0000002880)=0x80, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003fc0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x4, 0x66}]}, 0x24}], 0x1}, 0x0) [ 132.473434] audit: type=1326 audit(1663977725.485:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3880 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f93692b19 code=0x0 VM DIAGNOSIS: 00:02:03 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff888018a7f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f75661e2700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4e03bd008 CR3=000000000e01c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f7568d537c0 00007f7568d537c8 YMM02=0000000000000000 0000000000000000 00007f7568d537e0 00007f7568d537c0 YMM03=0000000000000000 0000000000000000 00007f7568d537c8 00007f7568d537c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880084d8c00 RCX=0000000000000000 RDX=1ffff1100d9e70ef RSI=ffffffff8121ac8e RDI=ffff88806cf37d00 RBP=0000000000000000 RSP=ffff88806cf09d60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88806cf38778 R13=ffff88800def7458 R14=ffff88806cf2a6c0 R15=ffff88806cf37d00 RIP=ffffffff8130af52 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f42662958e0 CR3=0000000008ca4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000