Warning: Permanently added '[localhost]:45607' (ECDSA) to the list of known hosts. 2022/10/02 00:34:53 fuzzer started 2022/10/02 00:34:53 dialing manager at localhost:35095 syzkaller login: [ 44.540475] cgroup: Unknown subsys name 'net' [ 44.626063] cgroup: Unknown subsys name 'rlimit' 2022/10/02 00:35:07 syscalls: 2215 2022/10/02 00:35:07 code coverage: enabled 2022/10/02 00:35:07 comparison tracing: enabled 2022/10/02 00:35:07 extra coverage: enabled 2022/10/02 00:35:07 setuid sandbox: enabled 2022/10/02 00:35:07 namespace sandbox: enabled 2022/10/02 00:35:07 Android sandbox: enabled 2022/10/02 00:35:07 fault injection: enabled 2022/10/02 00:35:07 leak checking: enabled 2022/10/02 00:35:07 net packet injection: enabled 2022/10/02 00:35:07 net device setup: enabled 2022/10/02 00:35:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 00:35:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 00:35:07 USB emulation: enabled 2022/10/02 00:35:07 hci packet injection: enabled 2022/10/02 00:35:07 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 00:35:07 802.15.4 emulation: enabled 2022/10/02 00:35:07 fetching corpus: 50, signal 28593/30368 (executing program) 2022/10/02 00:35:07 fetching corpus: 100, signal 41782/45146 (executing program) 2022/10/02 00:35:07 fetching corpus: 150, signal 48779/53674 (executing program) 2022/10/02 00:35:08 fetching corpus: 200, signal 54412/60771 (executing program) 2022/10/02 00:35:08 fetching corpus: 250, signal 62026/69675 (executing program) 2022/10/02 00:35:08 fetching corpus: 300, signal 68036/76938 (executing program) 2022/10/02 00:35:08 fetching corpus: 350, signal 72307/82439 (executing program) 2022/10/02 00:35:08 fetching corpus: 400, signal 78931/90064 (executing program) 2022/10/02 00:35:08 fetching corpus: 450, signal 81977/94313 (executing program) 2022/10/02 00:35:08 fetching corpus: 500, signal 83253/96832 (executing program) 2022/10/02 00:35:08 fetching corpus: 550, signal 86755/101356 (executing program) 2022/10/02 00:35:09 fetching corpus: 600, signal 89319/105004 (executing program) 2022/10/02 00:35:09 fetching corpus: 650, signal 92651/109263 (executing program) 2022/10/02 00:35:09 fetching corpus: 700, signal 94250/111996 (executing program) 2022/10/02 00:35:09 fetching corpus: 750, signal 97547/116169 (executing program) 2022/10/02 00:35:09 fetching corpus: 800, signal 99491/119114 (executing program) 2022/10/02 00:35:09 fetching corpus: 850, signal 103511/123811 (executing program) 2022/10/02 00:35:09 fetching corpus: 900, signal 107492/128452 (executing program) 2022/10/02 00:35:10 fetching corpus: 950, signal 111135/132765 (executing program) 2022/10/02 00:35:10 fetching corpus: 1000, signal 113494/135893 (executing program) 2022/10/02 00:35:10 fetching corpus: 1050, signal 115636/138786 (executing program) 2022/10/02 00:35:10 fetching corpus: 1100, signal 117423/141368 (executing program) 2022/10/02 00:35:10 fetching corpus: 1150, signal 118768/143557 (executing program) 2022/10/02 00:35:10 fetching corpus: 1200, signal 120217/145808 (executing program) 2022/10/02 00:35:10 fetching corpus: 1250, signal 122085/148428 (executing program) 2022/10/02 00:35:10 fetching corpus: 1300, signal 124794/151720 (executing program) 2022/10/02 00:35:10 fetching corpus: 1350, signal 126352/154041 (executing program) 2022/10/02 00:35:11 fetching corpus: 1400, signal 127284/155759 (executing program) 2022/10/02 00:35:11 fetching corpus: 1450, signal 128452/157694 (executing program) 2022/10/02 00:35:11 fetching corpus: 1500, signal 129762/159719 (executing program) 2022/10/02 00:35:11 fetching corpus: 1550, signal 132213/162567 (executing program) 2022/10/02 00:35:11 fetching corpus: 1600, signal 133287/164348 (executing program) 2022/10/02 00:35:11 fetching corpus: 1650, signal 134586/166277 (executing program) 2022/10/02 00:35:11 fetching corpus: 1700, signal 135606/168014 (executing program) 2022/10/02 00:35:11 fetching corpus: 1750, signal 137530/170433 (executing program) 2022/10/02 00:35:12 fetching corpus: 1800, signal 138803/172296 (executing program) 2022/10/02 00:35:12 fetching corpus: 1850, signal 139868/173978 (executing program) 2022/10/02 00:35:12 fetching corpus: 1900, signal 140671/175517 (executing program) 2022/10/02 00:35:12 fetching corpus: 1950, signal 142213/177551 (executing program) 2022/10/02 00:35:12 fetching corpus: 2000, signal 143301/179185 (executing program) 2022/10/02 00:35:12 fetching corpus: 2050, signal 143859/180421 (executing program) 2022/10/02 00:35:12 fetching corpus: 2100, signal 145510/182379 (executing program) 2022/10/02 00:35:12 fetching corpus: 2150, signal 146168/183714 (executing program) 2022/10/02 00:35:12 fetching corpus: 2200, signal 147008/185053 (executing program) 2022/10/02 00:35:13 fetching corpus: 2250, signal 147954/186580 (executing program) 2022/10/02 00:35:13 fetching corpus: 2300, signal 149469/188405 (executing program) 2022/10/02 00:35:13 fetching corpus: 2350, signal 151689/190669 (executing program) 2022/10/02 00:35:13 fetching corpus: 2400, signal 153551/192674 (executing program) 2022/10/02 00:35:13 fetching corpus: 2450, signal 155342/194554 (executing program) 2022/10/02 00:35:13 fetching corpus: 2500, signal 155997/195748 (executing program) 2022/10/02 00:35:13 fetching corpus: 2550, signal 156704/196963 (executing program) 2022/10/02 00:35:14 fetching corpus: 2600, signal 157205/198032 (executing program) 2022/10/02 00:35:14 fetching corpus: 2650, signal 158256/199391 (executing program) 2022/10/02 00:35:14 fetching corpus: 2700, signal 159339/200815 (executing program) 2022/10/02 00:35:14 fetching corpus: 2750, signal 160078/201978 (executing program) 2022/10/02 00:35:14 fetching corpus: 2800, signal 160688/203056 (executing program) 2022/10/02 00:35:14 fetching corpus: 2850, signal 162075/204577 (executing program) 2022/10/02 00:35:14 fetching corpus: 2900, signal 162815/205710 (executing program) 2022/10/02 00:35:14 fetching corpus: 2950, signal 163394/206762 (executing program) 2022/10/02 00:35:14 fetching corpus: 3000, signal 164170/207911 (executing program) 2022/10/02 00:35:15 fetching corpus: 3050, signal 165166/209129 (executing program) 2022/10/02 00:35:15 fetching corpus: 3100, signal 166696/210641 (executing program) 2022/10/02 00:35:15 fetching corpus: 3150, signal 167605/211851 (executing program) 2022/10/02 00:35:15 fetching corpus: 3200, signal 168929/213209 (executing program) 2022/10/02 00:35:15 fetching corpus: 3250, signal 169465/214159 (executing program) 2022/10/02 00:35:15 fetching corpus: 3300, signal 170313/215255 (executing program) 2022/10/02 00:35:15 fetching corpus: 3350, signal 170839/216177 (executing program) 2022/10/02 00:35:15 fetching corpus: 3400, signal 171348/217096 (executing program) 2022/10/02 00:35:16 fetching corpus: 3450, signal 172040/218125 (executing program) 2022/10/02 00:35:16 fetching corpus: 3500, signal 173263/219318 (executing program) 2022/10/02 00:35:16 fetching corpus: 3550, signal 175005/220763 (executing program) 2022/10/02 00:35:16 fetching corpus: 3600, signal 176452/222110 (executing program) 2022/10/02 00:35:16 fetching corpus: 3650, signal 177309/223104 (executing program) 2022/10/02 00:35:16 fetching corpus: 3700, signal 177977/224003 (executing program) 2022/10/02 00:35:17 fetching corpus: 3750, signal 178972/225040 (executing program) 2022/10/02 00:35:17 fetching corpus: 3800, signal 179576/225886 (executing program) 2022/10/02 00:35:17 fetching corpus: 3850, signal 180069/226691 (executing program) 2022/10/02 00:35:17 fetching corpus: 3900, signal 180459/227478 (executing program) 2022/10/02 00:35:17 fetching corpus: 3950, signal 181121/228406 (executing program) 2022/10/02 00:35:17 fetching corpus: 4000, signal 181749/229317 (executing program) 2022/10/02 00:35:17 fetching corpus: 4050, signal 182518/230291 (executing program) 2022/10/02 00:35:17 fetching corpus: 4100, signal 183014/231121 (executing program) 2022/10/02 00:35:17 fetching corpus: 4150, signal 183792/231977 (executing program) 2022/10/02 00:35:18 fetching corpus: 4200, signal 184535/232810 (executing program) 2022/10/02 00:35:18 fetching corpus: 4250, signal 185245/233641 (executing program) 2022/10/02 00:35:18 fetching corpus: 4300, signal 186289/234605 (executing program) 2022/10/02 00:35:18 fetching corpus: 4350, signal 187134/235461 (executing program) 2022/10/02 00:35:18 fetching corpus: 4400, signal 187963/236227 (executing program) 2022/10/02 00:35:18 fetching corpus: 4450, signal 188724/236998 (executing program) 2022/10/02 00:35:18 fetching corpus: 4500, signal 189557/237772 (executing program) 2022/10/02 00:35:18 fetching corpus: 4550, signal 190460/238549 (executing program) 2022/10/02 00:35:18 fetching corpus: 4600, signal 190912/239217 (executing program) 2022/10/02 00:35:19 fetching corpus: 4650, signal 191583/239963 (executing program) 2022/10/02 00:35:19 fetching corpus: 4700, signal 192349/240659 (executing program) 2022/10/02 00:35:19 fetching corpus: 4750, signal 193145/241354 (executing program) 2022/10/02 00:35:19 fetching corpus: 4800, signal 193783/242037 (executing program) 2022/10/02 00:35:19 fetching corpus: 4850, signal 194368/242692 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/243257 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/243782 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/244275 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/244790 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/245312 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/245821 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/246352 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/246847 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/247312 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/247814 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/248343 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/248820 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/249343 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/249841 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/250350 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/250822 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/251315 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/251803 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/252306 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/252813 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/253332 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/253851 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/254315 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/254821 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/255344 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/255852 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/256356 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/256816 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/257301 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/257814 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/258001 (executing program) 2022/10/02 00:35:19 fetching corpus: 4874, signal 194680/258001 (executing program) 2022/10/02 00:35:22 starting 8 fuzzer processes 00:35:22 executing program 0: move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x202, 0xfffffffb, 0x0, 0x2, 0x2e, 0x32, 0x6, 0x7117], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) r1 = syz_io_uring_setup(0x398e, &(0x7f00000000c0)={0x0, 0xfa3e, 0x1, 0x2, 0x112}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) move_pages(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) shmat(0xffffffffffffffff, &(0x7f0000ff3000/0x2000)=nil, 0x2000) r2 = syz_io_uring_setup(0x2cb4, &(0x7f0000000240)={0x0, 0xc90f, 0x8, 0x0, 0x36, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) shmat(0xffffffffffffffff, &(0x7f0000ff1000/0x4000)=nil, 0x4000) r3 = open(&(0x7f0000000340)='./file0\x00', 0x20000, 0x1) io_uring_enter(r3, 0x439a, 0xf6ce, 0x3, &(0x7f0000000380)={[0xfffffffffffffffd]}, 0x8) shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ff5000/0x3000)=nil, 0x2000) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000003c0)=""/28) r4 = shmget(0x1, 0x1000, 0x8, &(0x7f0000ff0000/0x1000)=nil) shmat(r4, &(0x7f0000fec000/0x3000)=nil, 0x4000) r5 = shmget(0x3, 0x4000, 0x400, &(0x7f0000ff1000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ff4000/0x2000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmat(r5, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r0) io_uring_enter(r2, 0x8c7, 0xa57, 0x0, &(0x7f0000000400)={[0x3]}, 0x8) 00:35:22 executing program 1: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r2 = socket$inet(0x2, 0x4, 0x7) ioctl$FITHAW(r2, 0xc0045878) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) write$binfmt_aout(r3, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x2ac, 0x158, 0x8, 0x15c, 0x2}, "1a722279376062c11e4ca9ae9d52f44393eebab70f3d41ebddfc5550328c6455d6753a7c61b274d319aa405b7ab68c34649ec41598b299cde18e85bb74ffa360013f28a9c87a8d3d22c9073d85238bfe03a709d86845d7324af1d18e8a7c0076056589e2c0d10994be02b63bf9eb9f7152d86bd781be935273dadd58d99652d30c8ae5ebce1e438c4674059c31b54148c9340831a02b56b76c22e410142b9b58", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c0) r4 = perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x2, 0x7, 0x8, 0x38, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000880), 0xc}, 0x804, 0x1ff, 0x5, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x81, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f0000000940), 0x755c, 0x181000) sendfile(r4, r3, 0x0, 0x7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000980), &(0x7f00000009c0)=0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000a00), 0x101800, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000a40)={0x1, 0x2, 0x2}) syz_open_dev$sg(&(0x7f0000000a80), 0x3, 0x80000) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) [ 73.248764] audit: type=1400 audit(1664670922.863:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:35:22 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x310, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x20000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x244}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2c80000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0a3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x47}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6ac5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}}, 0x24000801) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0xf}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x4008840) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000007c0), 0x140c00, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40080100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r6 = signalfd(r5, &(0x7f0000000900)={[0xce]}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8ee, 0x1d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x1a8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x76}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4542}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xebf3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa600000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000084}, 0xc0) 00:35:22 executing program 3: r0 = syz_io_uring_setup(0x6129, &(0x7f0000000000)={0x0, 0x9301, 0x4, 0x2, 0x145}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x400001) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x6}, 0x50, {0x2, 0x4e22, @local}, 'vlan0\x00'}) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x182000, &(0x7f00000002c0)={'trans=unix,', {[{@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\'(-\xc6([(%'}}, {@euid_lt={'euid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '-$)'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xc6)'}}]}}) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000380)="bcee9388479d23bd44637a97471e65", 0xf}, {&(0x7f00000003c0)="c794f4ab6b9a5e91000a5b72855805358215e6027d541bdae4386739ffba5b187ddd0df1827bc469330cfb488577d019bbcca92e1fc89eeb7303002cc1d37f7ec1207d8957b34a814951bc088bb090c92226cb68da00c4a584fad3af23f69400582a4ce0afc143fe8eee08b9a51cf89bcd3f8b5a109c92cc5fd9b02943cdf0a2211fd26339bd55191c90dc69057a0184b19e", 0x92}], 0x2, 0x9, 0x9) sendfile(r0, r2, &(0x7f00000004c0)=0x1000, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/udplite6\x00') getsockname$netlink(r4, &(0x7f0000000580), &(0x7f00000005c0)=0xc) umount2(&(0x7f0000000600)='./file0\x00', 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x200000d, 0x30, r4, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000640)}, 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) pwritev(r6, &(0x7f0000001bc0)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="56cb81f04ff6f8a58c91abe3502df10900dd56c664b1038fceae7e2693823f6faa4b837a1074da93bd32699c5630eb5e8268df0fd308e432641f086a78a6f3fe397fa7a06a160c186d01964fc1d95ea0cb3d5c47213785ff7806d18369966b4f5dc595aeb4e4e9da264a855b58948ed8b8b294b80a08a5a9d35769911c06218181a8123e17f697305f7fb45629aeed158c0b445f9c0a75fe2781b91ab752f8fc813333397db8590d91a6802fa524a96bb438c84c", 0xb4}, {&(0x7f0000001780)="2fcc3fb06f93308179d65892e0ff9f363f8217c350f41ade2e43f0b13bddde007062aca5e19645c51a452682ce696bb20f9c3f218d34afade69b57ec5cb4b2330d1a208bdbc21509d5ead0e68b934214bfd58f28faaef5dc3a08bdbf78bc547239e673a7ad8d4d0f35876da1ffcc7e8efd08bc9085d7a73284ea82631821a808b00f1b71342b2776316dcf9bb3ac89400f745265f8224b44320d57c66f71b3341650da3944730e289d4b7da1c55e1922b401fd6cb7a259761ecdfd982d39a60565bc198d7db80ac7", 0xc8}, {&(0x7f0000001880)="eaa0fecd09ecdf8f89f7b242d034a3222943294d2cf4115768cd51e92f4b75437a1de274cd61cd45554b2a957071c4811e7712f14f58b6124be6cbadbc0efac2f5adbd02b68758c3ef35d1a4e1c41aa284480e028c031934ad77654e779b5859ff33ec3cf28f3fcdca6afe86cee4cac5705229d4e12dde3c459fdc3b4623113dc7cb6100aace24ce428230d2ffe49b1848dc425dcb12367a75eef9040ae72759a134edd999400666e4f8d359735dc6ca946f11ae986c3d886694e7524d40a59b06f0155db3dc9b74d90b50", 0xcb}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="fcb731a15e83bb93c46344ff9afd8e4815656959c0a7fbbd89726517297ba143067762a9f0638023003ae2c8216a5077a9a2133ac39826b5e4ada3684a2db3dabea9e2ff6d0ce8f9019ea54109b34ac2945a36659af5a8a72aa7af8afa88d28a9b54687445679fc8bee196e4ce3659", 0x6f}, {&(0x7f0000001a40)="fbcb75a23c6da37b598674c08e7b00b662ab89dfc2550b3bf325636d2ce09c3ea533eb82ce8bd626536303a79cb99c3d613a1911f8e882bdf7825018fdffed0b83e272d45e6ceac486a6fb5bda8a683d2a30770ed43ed6b2b24cd6", 0x5b}, {&(0x7f0000001ac0)="477b799c4e2afacb6a08d7334dd8d9947e12ee4afbedac487a3e9973b8844899fddbc4bd34ac5f169a449439e89892f8bba3496bcdfd27509b205952cec88043023eccf176edacb641ba3f7f0757bd07046ad8a23f344fa94bd7829a9f961da11084065fb2adf305fba76d66b2a3cd699851aac349de095ae10b24d4d619c8668747e9f274bf71e01b4ce2d84e617aba33478e4cb5742fed1b39cf4cd5772998e9b5761d7542d3566a1758b4b2cbcf8768796161888e30b925ae421e5940ab2e79cdbf4f8b1968b9074e0c27c88696700ae96b9a4543eb9bdcc0569ed84721ba9b110bc2075e664312182d6846d1377411de5adb99841f4538", 0xf9}], 0x8, 0x6, 0x4) acct(&(0x7f0000001c40)='./file1\x00') lgetxattr(&(0x7f0000001c80)='./file0/file0\x00', &(0x7f0000001cc0)=@known='trusted.overlay.impure\x00', &(0x7f0000001d00)=""/130, 0x82) syz_io_uring_setup(0x160, &(0x7f0000001dc0)={0x0, 0x77c5, 0x0, 0x0, 0x11d}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001e40), &(0x7f0000001e80)) openat2$dir(0xffffffffffffff9c, &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x2, 0x80, 0x1}, 0x18) mount$tmpfs(0x0, &(0x7f0000001f40)='./file0/file0\x00', &(0x7f0000001f80), 0x40000, &(0x7f0000001fc0)={[{@size={'size', 0x3d, [0x31]}}], [{@audit}, {@context={'context', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise_type}]}) 00:35:22 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) preadv2(r4, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/144, 0x90}], 0x8, 0x80000001, 0xffffffff, 0x3) fstatfs(r3, &(0x7f0000000b80)=""/199) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) syncfs(0xffffffffffffffff) 00:35:22 executing program 5: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000100)=0x401, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000140)=0x401, 0x4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1880010, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@access_any}, {@afid={'afid', 0x3d, 0x8}}, {@afid={'afid', 0x3d, 0x4}}], [{@dont_measure}]}}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x7f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000340)=0x8000, 0x4) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000003c0)=0x1c, 0x800) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x63, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r2 = getpgrp(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0xfff, 0x14}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x3f}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0x71}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x2c040494) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x5, 0x100, 0x60, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x1, 0x80, 0x401, 0x2}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e4, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x1e4}}, 0x20008021) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xeb}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000c00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000c40)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) r8 = openat$cgroup_ro(r3, &(0x7f0000000cc0)='memory.events\x00', 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d40)={0x1e0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xb}]}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4000}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x13, 0x5, 0x24, 0x0, 0x2, 0x60, 0x4, 0x24, 0xc, 0xb, 0x1b, 0x6, 0x5a, 0x5, 0x9, 0x24, 0x2, 0x3, 0x18, 0x5, 0x5, 0x4, 0x16, 0x3, 0x36, 0x12, 0x4, 0x60, 0x36, 0x4]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x9}, {0x2, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x7, 0x9}, {}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x5}, {0x3, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0x9, 0x4, 0x640, 0xd33c, 0x2, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff, 0x20, 0xfff7, 0x4, 0x1000, 0xffff, 0xd3c0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x60, 0x18, 0x60, 0x6c, 0x2, 0x24, 0x36, 0x5, 0x16, 0x3, 0x30, 0x0, 0x3, 0x36, 0x30, 0x34, 0x9, 0x6, 0x6, 0x18, 0xb, 0x6c, 0x1b, 0x30, 0x30]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x60, 0x9, 0x6e, 0x18, 0x48, 0x9, 0x18, 0x16]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x30, 0x6, 0x36, 0x3, 0x36, 0x1, 0x9, 0x3, 0x24, 0x16, 0x36, 0x3, 0x3, 0x48, 0xc, 0x12, 0xc, 0x1, 0x1, 0x2, 0x9, 0x30, 0x48, 0x60, 0x2, 0x60, 0x4f, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x24, 0x0, 0x36, 0xb, 0x36, 0x9, 0x30, 0x9, 0x0, 0x19, 0x4, 0xb, 0x2, 0x3, 0x5, 0x5, 0x6, 0x24, 0x18, 0x6c, 0x5, 0x36, 0x6, 0x3, 0x18, 0x0]}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x54, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x11}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xb}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x10}, 0x20044094) 00:35:22 executing program 6: prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x6) prctl$PR_SET_FPEMU(0xa, 0x0) 00:35:22 executing program 7: ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000040)={0x3, 0x80, 0xe, 0xa, 0x4, 0x20, @lba=0x7, @lba=0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x5, 0xff, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x8, 0x8001, 0x4}}) ioctl$CDROMREADTOCHDR(r1, 0x5305, &(0x7f0000000180)={0x9, 0x40}) r3 = dup2(r1, 0xffffffffffffffff) ioctl$CDROMPLAYTRKIND(r3, 0x5304, &(0x7f00000001c0)={0x0, 0x2, 0x17, 0x3}) r4 = syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x20040) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', r2, 0x4, 0x4, 0x0, 0x9, 0x0, @private0, @empty, 0x80, 0x7, 0x0, 0x3ff}}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000300)={0x954}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000340)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x100, 0x0, 0x1, 0x400, 0x3, 0x30001, r5}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0/file0\x00'}) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x109400, 0x4) ioctl$CDROMREADTOCENTRY(r7, 0x5306, &(0x7f0000000440)={0x0, 0xd, 0x9, 0x3, @lba=0x5, 0x2}) fcntl$addseals(r3, 0x409, 0x9) ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000000480)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) [ 74.576508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.578838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.580458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.583447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.589329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.594443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.607197] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.637820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.639943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.641703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.644769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.646768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.648445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.653682] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.696674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.699549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.702554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.713488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.714519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.715128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.718159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.719532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.722982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.727177] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.736758] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.736785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.749803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.751369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.752441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.754339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.757279] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.758640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.760310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.761384] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.768140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.785323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.788621] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.789873] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.791345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.792645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.794010] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.795842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.799626] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.815977] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.818154] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.892332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.903321] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.913382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.935900] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.660369] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 76.660528] Bluetooth: hci2: command 0x0409 tx timeout [ 76.661595] Bluetooth: hci0: command 0x0409 tx timeout [ 76.787139] Bluetooth: hci6: command 0x0409 tx timeout [ 76.851177] Bluetooth: hci5: command 0x0409 tx timeout [ 76.852339] Bluetooth: hci4: command 0x0409 tx timeout [ 76.852397] Bluetooth: hci3: command 0x0409 tx timeout [ 76.979237] Bluetooth: hci7: command 0x0409 tx timeout [ 78.707098] Bluetooth: hci2: command 0x041b tx timeout [ 78.707756] Bluetooth: hci0: command 0x041b tx timeout [ 78.835170] Bluetooth: hci6: command 0x041b tx timeout [ 78.899086] Bluetooth: hci3: command 0x041b tx timeout [ 78.899678] Bluetooth: hci4: command 0x041b tx timeout [ 78.900121] Bluetooth: hci5: command 0x041b tx timeout [ 79.027158] Bluetooth: hci7: command 0x041b tx timeout [ 79.793841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.794853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.796600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.800848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.805192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.808165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.813961] Bluetooth: hci1: HCI_REQ-0x0c1a [ 80.755086] Bluetooth: hci0: command 0x040f tx timeout [ 80.755543] Bluetooth: hci2: command 0x040f tx timeout [ 80.883114] Bluetooth: hci6: command 0x040f tx timeout [ 80.947107] Bluetooth: hci5: command 0x040f tx timeout [ 80.947545] Bluetooth: hci4: command 0x040f tx timeout [ 80.947937] Bluetooth: hci3: command 0x040f tx timeout [ 81.075114] Bluetooth: hci7: command 0x040f tx timeout [ 81.843144] Bluetooth: hci1: command 0x0409 tx timeout [ 82.804159] Bluetooth: hci2: command 0x0419 tx timeout [ 82.804632] Bluetooth: hci0: command 0x0419 tx timeout [ 82.932072] Bluetooth: hci6: command 0x0419 tx timeout [ 82.996095] Bluetooth: hci3: command 0x0419 tx timeout [ 82.996517] Bluetooth: hci4: command 0x0419 tx timeout [ 82.996914] Bluetooth: hci5: command 0x0419 tx timeout [ 83.123076] Bluetooth: hci7: command 0x0419 tx timeout [ 83.891213] Bluetooth: hci1: command 0x041b tx timeout [ 85.939119] Bluetooth: hci1: command 0x040f tx timeout [ 87.987313] Bluetooth: hci1: command 0x0419 tx timeout [ 125.625722] audit: type=1400 audit(1664670975.240:7): avc: denied { write } for pid=3586 comm="syz-executor.4" name="task" dev="proc" ino=14425 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 125.633638] audit: type=1400 audit(1664670975.248:8): avc: denied { add_name } for pid=3586 comm="syz-executor.4" name="3590" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 125.637741] audit: type=1400 audit(1664670975.252:9): avc: denied { create } for pid=3586 comm="syz-executor.4" name="3590" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 00:36:15 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) preadv2(r4, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/144, 0x90}], 0x8, 0x80000001, 0xffffffff, 0x3) fstatfs(r3, &(0x7f0000000b80)=""/199) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) syncfs(0xffffffffffffffff) 00:36:15 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) preadv2(r4, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/144, 0x90}], 0x8, 0x80000001, 0xffffffff, 0x3) fstatfs(r3, &(0x7f0000000b80)=""/199) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) syncfs(0xffffffffffffffff) 00:36:15 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) preadv2(r4, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/144, 0x90}], 0x8, 0x80000001, 0xffffffff, 0x3) fstatfs(r3, &(0x7f0000000b80)=""/199) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) syncfs(0xffffffffffffffff) 00:36:15 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) preadv2(r4, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/144, 0x90}], 0x8, 0x80000001, 0xffffffff, 0x3) fstatfs(r3, &(0x7f0000000b80)=""/199) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) 00:36:15 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) preadv2(r4, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/144, 0x90}], 0x8, 0x80000001, 0xffffffff, 0x3) fstatfs(r3, &(0x7f0000000b80)=""/199) 00:36:15 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r5, r6/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) preadv2(r4, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/71, 0x47}, {&(0x7f0000000900)=""/103, 0x67}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/144, 0x90}], 0x8, 0x80000001, 0xffffffff, 0x3) 00:36:16 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) io_uring_enter(r2, 0x3ed, 0x106, 0x2, &(0x7f0000000600)={[0x12e968f9]}, 0x8) 00:36:16 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) close_range(r2, r3, 0x2) [ 128.517761] audit: type=1400 audit(1664670978.132:10): avc: denied { open } for pid=3752 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:36:34 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 00:36:34 executing program 0: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/207, 0xcf}, {&(0x7f0000000c80)=""/135, 0x87}], 0x2}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/253, 0xfd}], 0x1, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001040)=""/152, 0x98}], 0x1}}], 0x4, 0x40, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000001240)=0x8, 0x4) syz_io_uring_setup(0x24c6, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff) 00:36:34 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000055040)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r0}], 0x3, "bc386eff17b8c9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055040)={0x6, [], 0x3, "bc386eff17b8c9"}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x1000}}, './file0\x00'}) 00:36:34 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000000400)="19b21047069728f92ff59802c9d2c40120ade88f2fbe693b8d88ce796a85b3508f5c80000000402854fd5f09b2c34771e1d84383b5dd27ae2adcb8edf099e8e777226da9d4806739ac4f6a05942b824712ac6a812c0e643548190ff2d925ec9306d1227b12420119e25c3f833c4ef96e6de9371b3dc0d2e6d4531e590d87c31d1af7c6f61fb1b1e5bd003c8587a3fa2cc0b6a0cc849e158911f6f8486fea45a0f16f0eb9839ff1186035536dc65600479521a4a423a783784c42bba953e54f6c364be98c3a4bb6c307c15fc5620d5ce73a502af3f0c7daa696", 0xd9, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00']) symlinkat(&(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file0\x00') stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 00:36:34 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000}) execveat(r4, &(0x7f0000000000)='./file1\x00', &(0x7f0000000400)=[&(0x7f0000000140)='/dev/sr0\x00', &(0x7f0000000180)='^:#\x00', &(0x7f00000001c0)='(\\+\x00', &(0x7f0000000200)='#-(${*\x00', &(0x7f0000000240)='\x00', &(0x7f0000000300)='/dev/sr0\x00', &(0x7f0000000340)='}\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='-\x00'], &(0x7f0000000680)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000640)='\x00'], 0x1000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffff) close(r0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r5, 0x5390, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc) 00:36:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x16, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffd4a48b62ff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010001fe870325132510000e870325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020001fe870325132510000e870325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020001fe870325132510000e870325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20001fe870325132510000e8703251070064000000", 0x120, 0x1}, {&(0x7f0000010800)="2e2020202020202020202010001fe870325132510000e87032510300000000002e2e20202020202020202010001fe870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020001fe870325132510000e870325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x951001}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8ff2d16b4373b3df269a6dd9e356765a3c87f3141fe503cb7e3b469be9f7ff8b0f57"]) chdir(&(0x7f0000000080)='./file0\x00') 00:36:34 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f00000005c0)={0x3, {0x486035960db73688, 0x100000001, 0x2, 0x8, 0xffffffffffffff01}}) 00:36:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) fcntl$getown(r2, 0x9) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x80000001, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a00800a6a763106"}) openat(r1, &(0x7f0000000000)='./file1\x00', 0x20880, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x208000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x32) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r1, r7, 0x0, 0x7) sendfile(r6, r3, &(0x7f0000000040), 0x8) [ 145.069287] loop1: detected capacity change from 0 to 38160 00:36:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) fcntl$getown(r2, 0x9) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x80000001, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a00800a6a763106"}) openat(r1, &(0x7f0000000000)='./file1\x00', 0x20880, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x208000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x32) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r1, r7, 0x0, 0x7) sendfile(r6, r3, &(0x7f0000000040), 0x8) [ 145.089573] FAT-fs (loop1): Unrecognized mount option "kCs&mVvZ<~;FW" or missing value [ 145.097994] audit: type=1400 audit(1664670994.712:11): avc: denied { kernel } for pid=3998 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 145.105698] loop1: detected capacity change from 0 to 38160 [ 145.113364] hrtimer: interrupt took 34225 ns [ 145.114573] FAT-fs (loop1): Unrecognized mount option "kCs&mVvZ<~;FW" or missing value [ 145.114868] ------------[ cut here ]------------ [ 145.114904] [ 145.114910] ====================================================== [ 145.114916] WARNING: possible circular locking dependency detected [ 145.114923] 6.0.0-rc7-next-20220930 #1 Not tainted [ 145.114936] ------------------------------------------------------ [ 145.114942] syz-executor.7/4007 is trying to acquire lock: [ 145.114954] ffffffff853faab8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70 [ 145.115027] [ 145.115027] but task is already holding lock: [ 145.115032] ffff888008b69820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 145.115086] [ 145.115086] which lock already depends on the new lock. [ 145.115086] [ 145.115092] [ 145.115092] the existing dependency chain (in reverse order) is: [ 145.115098] [ 145.115098] -> #3 (&ctx->lock){....}-{2:2}: [ 145.115125] _raw_spin_lock+0x2a/0x40 [ 145.115149] __perf_event_task_sched_out+0x53b/0x18d0 [ 145.115171] __schedule+0xedd/0x2470 [ 145.115199] preempt_schedule_common+0x45/0xc0 [ 145.115232] __cond_resched+0x17/0x30 [ 145.115259] __mutex_lock+0xa3/0x14d0 [ 145.115293] __do_sys_perf_event_open+0x1eec/0x32c0 [ 145.115319] do_syscall_64+0x3b/0x90 [ 145.115352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.115379] [ 145.115379] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 145.115408] _raw_spin_lock_nested+0x30/0x40 [ 145.115429] raw_spin_rq_lock_nested+0x1e/0x30 [ 145.115455] task_fork_fair+0x63/0x4d0 [ 145.115490] sched_cgroup_fork+0x3d0/0x540 [ 145.115518] copy_process+0x4183/0x6e20 [ 145.115541] kernel_clone+0xe7/0x890 [ 145.115560] user_mode_thread+0xad/0xf0 [ 145.115581] rest_init+0x24/0x250 [ 145.115604] arch_call_rest_init+0xf/0x14 [ 145.115640] start_kernel+0x4c6/0x4eb [ 145.115670] secondary_startup_64_no_verify+0xe0/0xeb [ 145.115700] [ 145.115700] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 145.115727] _raw_spin_lock_irqsave+0x39/0x60 [ 145.115748] try_to_wake_up+0xab/0x1930 [ 145.115778] up+0x75/0xb0 [ 145.115806] __up_console_sem+0x6e/0x80 [ 145.115838] console_unlock+0x46a/0x590 00:36:34 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) [ 145.115871] vprintk_emit+0x1bd/0x560 [ 145.115903] vprintk+0x84/0xa0 [ 145.115939] _printk+0xba/0xf1 [ 145.115960] regdb_fw_cb.cold+0x6c/0xa7 [ 145.115995] request_firmware_work_func+0x12e/0x240 [ 145.116033] process_one_work+0xa17/0x16a0 [ 145.116069] worker_thread+0x637/0x1260 [ 145.116103] kthread+0x2ed/0x3a0 [ 145.116130] ret_from_fork+0x22/0x30 [ 145.116158] [ 145.116158] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 145.116185] __lock_acquire+0x2a02/0x5e70 [ 145.116219] lock_acquire+0x1a2/0x530 [ 145.116252] _raw_spin_lock_irqsave+0x39/0x60 [ 145.116273] down_trylock+0xe/0x70 [ 145.116307] __down_trylock_console_sem+0x3b/0xd0 [ 145.116339] vprintk_emit+0x16b/0x560 [ 145.116372] vprintk+0x84/0xa0 [ 145.116405] _printk+0xba/0xf1 [ 145.116425] report_bug.cold+0x72/0xab [ 145.116463] handle_bug+0x3c/0x70 [ 145.116499] exc_invalid_op+0x14/0x50 [ 145.116535] asm_exc_invalid_op+0x16/0x20 [ 145.116560] group_sched_out.part.0+0x2c7/0x460 [ 145.116594] ctx_sched_out+0x8f1/0xc10 [ 145.116631] __perf_event_task_sched_out+0x6d0/0x18d0 [ 145.116652] __schedule+0xedd/0x2470 [ 145.116679] preempt_schedule_common+0x45/0xc0 [ 145.116712] __cond_resched+0x17/0x30 [ 145.116740] __mutex_lock+0xa3/0x14d0 [ 145.116773] __do_sys_perf_event_open+0x1eec/0x32c0 [ 145.116796] do_syscall_64+0x3b/0x90 [ 145.116829] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.116857] [ 145.116857] other info that might help us debug this: [ 145.116857] [ 145.116862] Chain exists of: [ 145.116862] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 145.116862] [ 145.116892] Possible unsafe locking scenario: [ 145.116892] [ 145.116897] CPU0 CPU1 [ 145.116901] ---- ---- [ 145.116905] lock(&ctx->lock); [ 145.116919] lock(&rq->__lock); [ 145.116932] lock(&ctx->lock); [ 145.116944] lock((console_sem).lock); [ 145.116956] [ 145.116956] *** DEADLOCK *** [ 145.116956] [ 145.116959] 2 locks held by syz-executor.7/4007: [ 145.116972] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 00:36:34 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) [ 145.117034] #1: ffff888008b69820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 145.117090] [ 145.117090] stack backtrace: [ 145.117095] CPU: 1 PID: 4007 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 145.117119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 145.117134] Call Trace: [ 145.117140] [ 145.117150] dump_stack_lvl+0x8b/0xb3 [ 145.117188] check_noncircular+0x263/0x2e0 [ 145.117225] ? format_decode+0x26c/0xb50 [ 145.117257] ? print_circular_bug+0x450/0x450 [ 145.117291] ? simple_strtoul+0x30/0x30 [ 145.117324] ? __lockdep_reset_lock+0x180/0x180 [ 145.117358] ? format_decode+0x26c/0xb50 [ 145.117395] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 145.117430] __lock_acquire+0x2a02/0x5e70 [ 145.117477] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 145.117521] lock_acquire+0x1a2/0x530 [ 145.117558] ? down_trylock+0xe/0x70 [ 145.117592] ? lock_release+0x750/0x750 [ 145.117636] ? vprintk+0x84/0xa0 [ 145.117671] _raw_spin_lock_irqsave+0x39/0x60 [ 145.117698] ? down_trylock+0xe/0x70 [ 145.117729] down_trylock+0xe/0x70 [ 145.117764] ? vprintk+0x84/0xa0 [ 145.117798] __down_trylock_console_sem+0x3b/0xd0 [ 145.117833] vprintk_emit+0x16b/0x560 [ 145.117873] vprintk+0x84/0xa0 [ 145.117908] _printk+0xba/0xf1 [ 145.117934] ? record_print_text.cold+0x16/0x16 [ 145.117962] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 145.117992] ? lock_downgrade+0x6d0/0x6d0 [ 145.118028] ? report_bug.cold+0x66/0xab [ 145.118065] ? group_sched_out.part.0+0x2c7/0x460 [ 145.118104] report_bug.cold+0x72/0xab [ 145.118143] handle_bug+0x3c/0x70 [ 145.118179] exc_invalid_op+0x14/0x50 [ 145.118216] asm_exc_invalid_op+0x16/0x20 [ 145.118248] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 145.118288] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 145.118310] RSP: 0018:ffff88800ff7f978 EFLAGS: 00010006 [ 145.118332] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 145.118350] RDX: ffff88803fda0000 RSI: ffffffff81565dc7 RDI: 0000000000000005 00:36:34 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) [ 145.118365] RBP: ffff88801bc98000 R08: 0000000000000005 R09: 0000000000000001 [ 145.118379] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008b69800 [ 145.118394] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 145.118440] ? group_sched_out.part.0+0x2c7/0x460 [ 145.118482] ? group_sched_out.part.0+0x2c7/0x460 [ 145.118526] ctx_sched_out+0x8f1/0xc10 [ 145.118564] __perf_event_task_sched_out+0x6d0/0x18d0 [ 145.118596] ? lock_is_held_type+0xd7/0x130 [ 145.118624] ? __perf_cgroup_move+0x160/0x160 [ 145.118645] ? set_next_entity+0x304/0x550 [ 145.118686] ? update_curr+0x267/0x740 [ 145.118723] ? lock_is_held_type+0xd7/0x130 [ 145.118757] __schedule+0xedd/0x2470 [ 145.118791] ? io_schedule_timeout+0x150/0x150 [ 145.118821] ? find_held_lock+0x2c/0x110 [ 145.118858] ? lock_is_held_type+0xd7/0x130 [ 145.118883] ? __cond_resched+0x17/0x30 [ 145.118918] preempt_schedule_common+0x45/0xc0 [ 145.118950] __cond_resched+0x17/0x30 [ 145.118982] __mutex_lock+0xa3/0x14d0 [ 145.119016] ? lock_is_held_type+0xd7/0x130 [ 145.119041] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 145.119072] ? mutex_lock_io_nested+0x1310/0x1310 [ 145.119105] ? lock_release+0x3b2/0x750 [ 145.119143] ? __up_read+0x192/0x730 [ 145.119172] ? up_write+0x520/0x520 [ 145.119211] __do_sys_perf_event_open+0x1eec/0x32c0 [ 145.119242] ? __up_read+0x192/0x730 [ 145.119270] ? perf_compat_ioctl+0x130/0x130 [ 145.119296] ? up_write+0x520/0x520 [ 145.119332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.119362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.119394] do_syscall_64+0x3b/0x90 [ 145.119429] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.119455] RIP: 0033:0x7f9390677b19 [ 145.119472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.119493] RSP: 002b:00007f938dbed188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 145.119515] RAX: ffffffffffffffda RBX: 00007f939078af60 RCX: 00007f9390677b19 [ 145.119531] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 145.119545] RBP: 00007f93906d1f6d R08: 0000000000000000 R09: 0000000000000000 [ 145.119559] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 145.119574] R13: 00007ffe13759f9f R14: 00007f938dbed300 R15: 0000000000022000 [ 145.119602] [ 145.240238] WARNING: CPU: 1 PID: 4007 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 145.241646] Modules linked in: [ 145.242142] CPU: 1 PID: 4007 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 145.243346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 145.245048] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 145.245846] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 145.248611] RSP: 0018:ffff88800ff7f978 EFLAGS: 00010006 [ 145.249414] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 145.250494] RDX: ffff88803fda0000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 145.251581] RBP: ffff88801bc98000 R08: 0000000000000005 R09: 0000000000000001 [ 145.252659] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008b69800 [ 145.253729] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 145.254832] FS: 00007f938dbed700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 145.256011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.256900] CR2: 0000000020000540 CR3: 0000000018b0c000 CR4: 0000000000350ee0 [ 145.257974] Call Trace: [ 145.258374] [ 145.258713] ctx_sched_out+0x8f1/0xc10 [ 145.259334] __perf_event_task_sched_out+0x6d0/0x18d0 [ 145.260128] ? lock_is_held_type+0xd7/0x130 [ 145.260798] ? __perf_cgroup_move+0x160/0x160 [ 145.261486] ? set_next_entity+0x304/0x550 [ 145.262148] ? update_curr+0x267/0x740 [ 145.262779] ? lock_is_held_type+0xd7/0x130 [ 145.263447] __schedule+0xedd/0x2470 [ 145.264032] ? io_schedule_timeout+0x150/0x150 [ 145.264746] ? find_held_lock+0x2c/0x110 [ 145.265339] ? lock_is_held_type+0xd7/0x130 [ 145.266010] ? __cond_resched+0x17/0x30 [ 145.266624] preempt_schedule_common+0x45/0xc0 [ 145.267339] __cond_resched+0x17/0x30 [ 145.267892] __mutex_lock+0xa3/0x14d0 [ 145.268493] ? lock_is_held_type+0xd7/0x130 [ 145.269155] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 145.269951] ? mutex_lock_io_nested+0x1310/0x1310 [ 145.270710] ? lock_release+0x3b2/0x750 [ 145.271336] ? __up_read+0x192/0x730 [ 145.271914] ? up_write+0x520/0x520 [ 145.272495] __do_sys_perf_event_open+0x1eec/0x32c0 [ 145.273266] ? __up_read+0x192/0x730 [ 145.273848] ? perf_compat_ioctl+0x130/0x130 [ 145.274541] ? up_write+0x520/0x520 [ 145.275123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.275915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 145.276715] do_syscall_64+0x3b/0x90 [ 145.277308] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.278105] RIP: 0033:0x7f9390677b19 [ 145.278672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.281407] RSP: 002b:00007f938dbed188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 145.282573] RAX: ffffffffffffffda RBX: 00007f939078af60 RCX: 00007f9390677b19 [ 145.283651] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 145.284730] RBP: 00007f93906d1f6d R08: 0000000000000000 R09: 0000000000000000 [ 145.285811] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 145.286896] R13: 00007ffe13759f9f R14: 00007f938dbed300 R15: 0000000000022000 [ 145.287989] [ 145.288350] irq event stamp: 374 [ 145.288867] hardirqs last enabled at (373): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 145.290298] hardirqs last disabled at (374): [] __schedule+0x1225/0x2470 [ 145.291578] softirqs last enabled at (372): [] __irq_exit_rcu+0x11b/0x180 [ 145.292867] softirqs last disabled at (339): [] __irq_exit_rcu+0x11b/0x180 [ 145.294153] ---[ end trace 0000000000000000 ]--- [ 145.308674] loop7: detected capacity change from 0 to 256 [ 145.343110] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 145.362980] I/O error, dev loop1, sector 38016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 00:36:34 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) 00:36:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) fcntl$getown(r2, 0x9) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x80000001, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a00800a6a763106"}) openat(r1, &(0x7f0000000000)='./file1\x00', 0x20880, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x208000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x32) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r1, r7, 0x0, 0x7) sendfile(r6, r3, &(0x7f0000000040), 0x8) [ 145.388124] audit: type=1400 audit(1664670994.992:12): avc: denied { block_suspend } for pid=3998 comm="syz-executor.3" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 145.398671] audit: type=1400 audit(1664670995.008:13): avc: denied { write } for pid=3999 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:36:44 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000000400)="19b21047069728f92ff59802c9d2c40120ade88f2fbe693b8d88ce796a85b3508f5c80000000402854fd5f09b2c34771e1d84383b5dd27ae2adcb8edf099e8e777226da9d4806739ac4f6a05942b824712ac6a812c0e643548190ff2d925ec9306d1227b12420119e25c3f833c4ef96e6de9371b3dc0d2e6d4531e590d87c31d1af7c6f61fb1b1e5bd003c8587a3fa2cc0b6a0cc849e158911f6f8486fea45a0f16f0eb9839ff1186035536dc65600479521a4a423a783784c42bba953e54f6c364be98c3a4bb6c307c15fc5620d5ce73a502af3f0c7daa696", 0xd9, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00']) symlinkat(&(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file0\x00') stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 00:36:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 00:36:44 executing program 5: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_open_dev$usbmon(&(0x7f0000000580), 0x401, 0xa8941) 00:36:44 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000}) execveat(r4, &(0x7f0000000000)='./file1\x00', &(0x7f0000000400)=[&(0x7f0000000140)='/dev/sr0\x00', &(0x7f0000000180)='^:#\x00', &(0x7f00000001c0)='(\\+\x00', &(0x7f0000000200)='#-(${*\x00', &(0x7f0000000240)='\x00', &(0x7f0000000300)='/dev/sr0\x00', &(0x7f0000000340)='}\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='-\x00'], &(0x7f0000000680)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000640)='\x00'], 0x1000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffff) close(r0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r5, 0x5390, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc) 00:36:44 executing program 0: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) 00:36:44 executing program 1: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r4, r5/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) openat(r3, &(0x7f0000000300)='./file0\x00', 0x400000, 0x0) 00:36:44 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0xfff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pcmcia', 0x200080, 0x80) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="0a268eec659f0f89b31a46bec06d4b59ae15d937e541f0a2dbebbb63", 0x1c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{r3, r4/1000+10000}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 00:36:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) fcntl$getown(r2, 0x9) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x80000001, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a00800a6a763106"}) openat(r1, &(0x7f0000000000)='./file1\x00', 0x20880, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x208000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x32) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r1, r7, 0x0, 0x7) sendfile(r6, r3, &(0x7f0000000040), 0x8) [ 154.787588] loop7: detected capacity change from 0 to 256 00:36:44 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000}) execveat(r4, &(0x7f0000000000)='./file1\x00', &(0x7f0000000400)=[&(0x7f0000000140)='/dev/sr0\x00', &(0x7f0000000180)='^:#\x00', &(0x7f00000001c0)='(\\+\x00', &(0x7f0000000200)='#-(${*\x00', &(0x7f0000000240)='\x00', &(0x7f0000000300)='/dev/sr0\x00', &(0x7f0000000340)='}\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='-\x00'], &(0x7f0000000680)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000640)='\x00'], 0x1000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffff) close(r0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r5, 0x5390, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc) [ 154.818704] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) VM DIAGNOSIS: 00:36:35 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803ebef408 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000005 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5302600700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2db23000 CR3=000000001f2a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800ff7f368 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f938dbed700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000540 CR3=0000000018b0c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000