Warning: Permanently added '[localhost]:63827' (ECDSA) to the list of known hosts. 2022/10/03 09:56:49 fuzzer started 2022/10/03 09:56:50 dialing manager at localhost:35095 syzkaller login: [ 42.020031] cgroup: Unknown subsys name 'net' [ 42.136275] cgroup: Unknown subsys name 'rlimit' 2022/10/03 09:57:03 syscalls: 2215 2022/10/03 09:57:03 code coverage: enabled 2022/10/03 09:57:03 comparison tracing: enabled 2022/10/03 09:57:03 extra coverage: enabled 2022/10/03 09:57:03 setuid sandbox: enabled 2022/10/03 09:57:03 namespace sandbox: enabled 2022/10/03 09:57:03 Android sandbox: enabled 2022/10/03 09:57:03 fault injection: enabled 2022/10/03 09:57:03 leak checking: enabled 2022/10/03 09:57:03 net packet injection: enabled 2022/10/03 09:57:03 net device setup: enabled 2022/10/03 09:57:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 09:57:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 09:57:03 USB emulation: enabled 2022/10/03 09:57:03 hci packet injection: enabled 2022/10/03 09:57:03 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 09:57:03 802.15.4 emulation: enabled 2022/10/03 09:57:03 fetching corpus: 50, signal 25643/27460 (executing program) 2022/10/03 09:57:03 fetching corpus: 100, signal 35477/38986 (executing program) 2022/10/03 09:57:03 fetching corpus: 150, signal 43204/48319 (executing program) 2022/10/03 09:57:03 fetching corpus: 200, signal 47833/54527 (executing program) 2022/10/03 09:57:04 fetching corpus: 250, signal 53403/61576 (executing program) 2022/10/03 09:57:04 fetching corpus: 300, signal 57103/66800 (executing program) 2022/10/03 09:57:04 fetching corpus: 350, signal 62827/73905 (executing program) 2022/10/03 09:57:04 fetching corpus: 400, signal 66921/79350 (executing program) 2022/10/03 09:57:04 fetching corpus: 450, signal 69397/83206 (executing program) 2022/10/03 09:57:04 fetching corpus: 500, signal 73819/88883 (executing program) 2022/10/03 09:57:04 fetching corpus: 550, signal 76597/92959 (executing program) 2022/10/03 09:57:04 fetching corpus: 600, signal 78962/96630 (executing program) 2022/10/03 09:57:04 fetching corpus: 650, signal 83928/102657 (executing program) 2022/10/03 09:57:04 fetching corpus: 700, signal 87259/107152 (executing program) 2022/10/03 09:57:05 fetching corpus: 750, signal 90916/111849 (executing program) 2022/10/03 09:57:05 fetching corpus: 800, signal 95388/117216 (executing program) 2022/10/03 09:57:05 fetching corpus: 850, signal 99858/122475 (executing program) 2022/10/03 09:57:05 fetching corpus: 900, signal 101869/125533 (executing program) 2022/10/03 09:57:05 fetching corpus: 950, signal 103711/128523 (executing program) 2022/10/03 09:57:05 fetching corpus: 1000, signal 104998/130978 (executing program) 2022/10/03 09:57:05 fetching corpus: 1050, signal 106562/133667 (executing program) 2022/10/03 09:57:05 fetching corpus: 1100, signal 109449/137386 (executing program) 2022/10/03 09:57:06 fetching corpus: 1150, signal 111340/140244 (executing program) 2022/10/03 09:57:06 fetching corpus: 1200, signal 112770/142702 (executing program) 2022/10/03 09:57:06 fetching corpus: 1250, signal 115090/145862 (executing program) 2022/10/03 09:57:06 fetching corpus: 1300, signal 116728/148473 (executing program) 2022/10/03 09:57:06 fetching corpus: 1350, signal 117779/150563 (executing program) 2022/10/03 09:57:06 fetching corpus: 1400, signal 119134/152889 (executing program) 2022/10/03 09:57:06 fetching corpus: 1450, signal 120472/155214 (executing program) 2022/10/03 09:57:06 fetching corpus: 1500, signal 123178/158552 (executing program) 2022/10/03 09:57:06 fetching corpus: 1550, signal 124041/160417 (executing program) 2022/10/03 09:57:07 fetching corpus: 1600, signal 126359/163419 (executing program) 2022/10/03 09:57:07 fetching corpus: 1650, signal 128802/166447 (executing program) 2022/10/03 09:57:07 fetching corpus: 1700, signal 130201/168629 (executing program) 2022/10/03 09:57:07 fetching corpus: 1750, signal 131278/170584 (executing program) 2022/10/03 09:57:07 fetching corpus: 1800, signal 131880/172180 (executing program) 2022/10/03 09:57:07 fetching corpus: 1850, signal 133257/174343 (executing program) 2022/10/03 09:57:07 fetching corpus: 1900, signal 134608/176474 (executing program) 2022/10/03 09:57:07 fetching corpus: 1950, signal 136129/178678 (executing program) 2022/10/03 09:57:08 fetching corpus: 2000, signal 139675/182398 (executing program) 2022/10/03 09:57:08 fetching corpus: 2050, signal 140978/184435 (executing program) 2022/10/03 09:57:08 fetching corpus: 2100, signal 142041/186314 (executing program) 2022/10/03 09:57:08 fetching corpus: 2150, signal 143841/188628 (executing program) 2022/10/03 09:57:08 fetching corpus: 2200, signal 144717/190282 (executing program) 2022/10/03 09:57:08 fetching corpus: 2250, signal 145931/192147 (executing program) 2022/10/03 09:57:08 fetching corpus: 2300, signal 146523/193561 (executing program) 2022/10/03 09:57:08 fetching corpus: 2350, signal 147363/195227 (executing program) 2022/10/03 09:57:09 fetching corpus: 2400, signal 148443/197024 (executing program) 2022/10/03 09:57:09 fetching corpus: 2450, signal 149239/198597 (executing program) 2022/10/03 09:57:09 fetching corpus: 2500, signal 150422/200483 (executing program) 2022/10/03 09:57:09 fetching corpus: 2550, signal 151014/201864 (executing program) 2022/10/03 09:57:09 fetching corpus: 2600, signal 151936/203447 (executing program) 2022/10/03 09:57:09 fetching corpus: 2650, signal 153135/205220 (executing program) 2022/10/03 09:57:09 fetching corpus: 2700, signal 154049/206808 (executing program) 2022/10/03 09:57:09 fetching corpus: 2750, signal 155611/208828 (executing program) 2022/10/03 09:57:10 fetching corpus: 2800, signal 156692/210452 (executing program) 2022/10/03 09:57:10 fetching corpus: 2850, signal 157982/212229 (executing program) 2022/10/03 09:57:10 fetching corpus: 2900, signal 158945/213802 (executing program) 2022/10/03 09:57:10 fetching corpus: 2950, signal 160242/215523 (executing program) 2022/10/03 09:57:10 fetching corpus: 3000, signal 160841/216764 (executing program) 2022/10/03 09:57:10 fetching corpus: 3050, signal 162130/218490 (executing program) 2022/10/03 09:57:10 fetching corpus: 3100, signal 163433/220174 (executing program) 2022/10/03 09:57:10 fetching corpus: 3150, signal 164763/221845 (executing program) 2022/10/03 09:57:10 fetching corpus: 3200, signal 166076/223516 (executing program) 2022/10/03 09:57:11 fetching corpus: 3250, signal 167115/225028 (executing program) 2022/10/03 09:57:11 fetching corpus: 3300, signal 167841/226317 (executing program) 2022/10/03 09:57:11 fetching corpus: 3350, signal 168677/227687 (executing program) 2022/10/03 09:57:11 fetching corpus: 3400, signal 170157/229369 (executing program) 2022/10/03 09:57:11 fetching corpus: 3450, signal 171510/230973 (executing program) 2022/10/03 09:57:11 fetching corpus: 3500, signal 172103/232130 (executing program) 2022/10/03 09:57:11 fetching corpus: 3550, signal 172896/233385 (executing program) 2022/10/03 09:57:11 fetching corpus: 3600, signal 173952/234822 (executing program) 2022/10/03 09:57:12 fetching corpus: 3650, signal 175008/236224 (executing program) 2022/10/03 09:57:12 fetching corpus: 3700, signal 175869/237501 (executing program) 2022/10/03 09:57:12 fetching corpus: 3750, signal 176980/238923 (executing program) 2022/10/03 09:57:12 fetching corpus: 3800, signal 177727/240096 (executing program) 2022/10/03 09:57:12 fetching corpus: 3850, signal 178260/241163 (executing program) 2022/10/03 09:57:12 fetching corpus: 3900, signal 179282/242447 (executing program) 2022/10/03 09:57:12 fetching corpus: 3950, signal 179952/243607 (executing program) 2022/10/03 09:57:12 fetching corpus: 4000, signal 180660/244730 (executing program) 2022/10/03 09:57:13 fetching corpus: 4050, signal 181257/245828 (executing program) 2022/10/03 09:57:13 fetching corpus: 4100, signal 181980/246997 (executing program) 2022/10/03 09:57:13 fetching corpus: 4150, signal 182951/248180 (executing program) 2022/10/03 09:57:13 fetching corpus: 4200, signal 183558/249254 (executing program) 2022/10/03 09:57:13 fetching corpus: 4250, signal 184743/250556 (executing program) 2022/10/03 09:57:13 fetching corpus: 4300, signal 186267/251956 (executing program) 2022/10/03 09:57:13 fetching corpus: 4350, signal 186705/252917 (executing program) 2022/10/03 09:57:13 fetching corpus: 4400, signal 187349/253895 (executing program) 2022/10/03 09:57:13 fetching corpus: 4450, signal 187908/254873 (executing program) 2022/10/03 09:57:14 fetching corpus: 4500, signal 188489/255879 (executing program) 2022/10/03 09:57:14 fetching corpus: 4550, signal 189134/256900 (executing program) 2022/10/03 09:57:14 fetching corpus: 4600, signal 190087/258070 (executing program) 2022/10/03 09:57:14 fetching corpus: 4650, signal 190697/259102 (executing program) 2022/10/03 09:57:14 fetching corpus: 4700, signal 191793/260230 (executing program) 2022/10/03 09:57:14 fetching corpus: 4750, signal 192152/261062 (executing program) 2022/10/03 09:57:14 fetching corpus: 4800, signal 192515/261936 (executing program) 2022/10/03 09:57:14 fetching corpus: 4850, signal 193004/262860 (executing program) 2022/10/03 09:57:14 fetching corpus: 4900, signal 193859/263889 (executing program) 2022/10/03 09:57:15 fetching corpus: 4950, signal 194457/264879 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/265710 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/266390 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/267106 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/267835 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/268527 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/269226 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/269941 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/270662 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/271322 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/272014 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/272749 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/273417 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/274136 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/274832 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/275528 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/276240 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/276945 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/277641 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/278329 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/279058 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/279733 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/280452 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/281155 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/281871 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/282572 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/283302 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/283995 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/284681 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/285407 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/286105 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/286804 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/287520 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/288214 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/288980 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/289646 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/290285 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/291022 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/291720 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/292458 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/293166 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/293857 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/294549 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/295272 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/295942 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/296647 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/297351 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/298021 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/298714 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/299476 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/299676 (executing program) 2022/10/03 09:57:15 fetching corpus: 4998, signal 194783/299676 (executing program) 2022/10/03 09:57:18 starting 8 fuzzer processes 09:57:18 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x80200) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x1f, 0x5, 0x765eec5af52faf75}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000440)={{r0}, {@val={r1}, @actul_num={@val=0x2d, 0x3, 0x74}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r0}, 0x0, 0x4, @unused=[0x153, 0xd586, 0x7fff, 0x101], @devid=r1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, {0x4, 0x401}}, './file0\x00'}) dup(r0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000014c0)=0x5) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001500), 0x80080, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000001540), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000001580)={0x20000010}) dup3(r4, r4, 0x0) syz_mount_image$ext4(&(0x7f00000015c0)='ext2\x00', &(0x7f0000001600)='./file1\x00', 0x3, 0x9, &(0x7f0000002cc0)=[{&(0x7f0000001640)="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", 0x1000, 0x5}, {&(0x7f0000002640)="49b3521cf8910ee2a6e2ec2d09d7664eba9caad2a12c40a0cec9d8ccd3e27109c2624e1d01da134c6b2f1976ede42bb8ef68972331173d41a9085fd4b9ca36e2745f1bf7ed69362bf75672949170637f19a4afb9a6586138274e3c6e19cef6", 0x5f, 0x4}, {&(0x7f00000026c0)="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", 0xfc, 0xffffffff80000001}, {&(0x7f00000027c0)="d0fb4473599f50dfe14cb048751a719631fb57233d63ee48aa9b560a221bd7f3dc941eb099952937b411f0f57dc94a4b488cbdc56b9cc03c345a1e5a8eec14cb36a6abcb9eec16b150b44fb4992481258b26b99d52796bbe2cda18b698bafe296569916e", 0x64, 0x9}, {&(0x7f0000002840)="9dd23ddd3afe3a936565b9364c950226251ffaa567ce12a514fcfe814d1b2642a2695686323f89ccd40c04ab44e6fbd301fbdd878286e2190fe4851af3fd5e75edfb87f8160ae3f8d8d2b6477483bb450eb902142abc22fbbdb783dd37e6c02eedd8c7d42033dd0531f455814c4a4a2d6a7073ab650da0343574ccef953e57992b43864928654b86d1eabd2c8a52042bfb51697df1f8e3636ac8c8e0d5fd7e5d49", 0xa1, 0xe}, {&(0x7f0000002900)="a8bc52b9f4991b778f905e7a5db3478cd5871f60e7dd001381f090bd12769310b48c17a0eb3ce84bef5ddcbbac0cd7691b556795969246a8ca5a2d992c1c1e86765676ad6a9370b4dec5af197ead129c7c76fdf2ab19f35dc012a27ca20bf066fc7d4689371b226fc7bb268fe50fe159382b22a22d1222123b295141d47a3647ee2c57e4e54ad622f4321231672bad5c0947193568856901149b8e5aebfe29d5fe1fce680e55558024ae732d8466b472161b0dba0188c54c7fd7a8002d4cd6bf33b81b0f521b8cf82f0ebe8993d73ccf32843a218bdd", 0xd6, 0xff}, {&(0x7f0000002a00)="c7bfb9c731492b54ecd488b0f5957d100b14fa5b56431c4357b2172b068fb8fe03c682604d717f2f5709248396c277ca69d5ed927170b12852cf1a8af51e6645213ebcf185805e81a7b18b58b6464ae1a3a276825ff65ab939330fd9f16bd82ae59eeb9324106cc083782f2b29dea075bdd75637c35db3088a2574f7aa71a2eb768bc5219948b63b0f34b3ee369b53a4858f333257792c98ecb91203b34dab7b7d1a75607dc087a10e260660f8ed9f19235e9f7c0c339ae3faa41abd39eb057d27c7c773f34d1f1d23ff3e01f7eb5af4fa5816708f0aab27935d5facaec0eacc6d", 0xe1, 0x3}, {&(0x7f0000002b00)="c0f2e6a6bba54149d54180d34151f485e37e614d475668e3417b766b35f58cd96bc5f1f1ff7549c166e1b2b626a63726dce4eb9294ee6d4fc753887d169b52d5456cddd44d024d7082e0fd69207b5f57f62b2a57619cf36b20ea2237dc9fdb219cfe35282b2a53da1110d4fb491faba108f1daf0a43c17359ecf2dc8868af1ab23b72408bd55d6a0f2c574e912815a0dc68b1c776e2ee5761d79290f2c5c792b971b84ef545eb82e", 0xa8, 0xffffffffffffffc0}, {&(0x7f0000002bc0)="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", 0xff, 0x1}], 0x3000, &(0x7f0000002dc0)={[{@commit={'commit', 0x3d, 0xda}}, {@lazytime}], [{@dont_measure}]}) r5 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r5, &(0x7f0000002e00)) lstat(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r8 = syz_mount_image$tmpfs(&(0x7f0000002e40), &(0x7f0000002e80)='./file1\x00', 0x232ac83c, 0x2, &(0x7f0000003000)=[{&(0x7f0000002ec0)="d2742dc0be5e02d5484fb09124d856f7a7624f24abf719d44419d40052373c3d391f5e79f947c665c31161ea4a3c151a4fffe7d77ea599536f22bc94d2cb7eb9f12a8cb3fc88f8f4d8828d2c084b3736f29a76d5f6402570a28f15ab3707d801c61088ca936f23a74821903bc3d08344e3ae4e240e3d5eb0c2ebd7e952320a541c1a3e13115b394f9398de82f81a07aac872fd4c82feac7b9b507d612235bef3711475d216401f5e7713b53b0f302de4e5d6ba64de463dbae8a7dd4142714f2d5019396e42e73a5bfe21ca30d9d0a46195b5eb4078394f530900e25538", 0xdd, 0x1f}, {&(0x7f0000002fc0)="91bc247152cfa0e0dd0f29dcce276b792775709616c51202ac63", 0x1a, 0x3986}], 0x1008080, &(0x7f00000031c0)={[{@huge_always}, {@huge_always}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x39, 0x31, 0x35, 0x2f, 0x34, 0x30, 0x0]}}}}, {@gid={'gid', 0x3d, r6}}], [{@euid_lt={'euid<', r7}}, {@seclabel}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcs#\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}) fremovexattr(r8, &(0x7f0000003280)=@known='com.apple.system.Security\x00') fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000032c0)=0x5) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000003300)) 09:57:18 executing program 1: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000040) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xffffffff, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x44810}, 0x4080) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x181401, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x72}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="7930928eb969"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0x9, 0x0, @random="02c7f8424b"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0xa7bbac542a7a7680) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x453, 0x4, 0x70bd2a, 0x25dfdbfe, "d58fe753147e89808cbddb371aaaf936547c677bc1b05f95276a869fd120c03480d5c2e8dc7b15436abb8209b05634a180b06538122d627fa7dbd604c8384226c94c589fa477e34997cbf46deaf106f66e49dd638f73ea21b02458bbd7539905453118fb4b", ["", "", "", "", "", "", "", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x900}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x1) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x5, 0x4, '}'}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6152dcc1bdbf7b160fb6f5fdcc"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9378218cbf"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c85e55261a8d08cf0afc1fc1ab"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r3 = signalfd(r0, &(0x7f0000000900)={[0x800]}, 0x8) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000) ioctl$sock_ifreq(0xffffffffffffffff, 0xc5, &(0x7f0000000a40)={'ip6erspan0\x00', @ifru_ivalue}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a80), 0x42200, 0x0) r4 = openat$incfs(r3, &(0x7f0000000c40)='.log\x00', 0x800, 0x37) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x204, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xcc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfb5c, 0x7c}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x62, 0xbe, "49ce762aa7f2b4a87ac45bf717b4b602e421e7a59e99126b7771922fe63bfbb72d09899598d8acc2fa12dc64c44b77e075a79a10364713a0f0e856a10fc0a1dd05d343b9ea4acd7206f66e1c4a683e55a3f67273922412828a88fe324d6b"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x9}, {0x9, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0xc, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x30}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x70, r6, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1e, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0xc}, 0x0, 0x3, @broadcast, 0x800, 0xa72b, 0xffff5b80}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x24044014}, 0x20000081) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x94) 09:57:18 executing program 2: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000005800)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005600)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/61, 0x3d}], 0x1, &(0x7f00000001c0)=""/96, 0x60}, 0xd40000}, {{&(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/71, 0x47}], 0x4, &(0x7f0000000640)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000001640)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/218, 0xda}], 0x1, &(0x7f0000001800)=""/4096, 0x1000}, 0xea4}, {{&(0x7f0000002800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002880)=""/160, 0xa0}, {&(0x7f0000002940)=""/222, 0xde}, {&(0x7f0000002a40)=""/159, 0x9f}], 0x3, &(0x7f0000002b40)=""/32, 0x20}, 0x40}, {{&(0x7f0000002b80)=@nl=@proc, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002c00)=""/129, 0x81}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/224, 0xe0}, {&(0x7f0000003dc0)=""/133, 0x85}], 0x4, &(0x7f0000003ec0)=""/17, 0x11}}, {{&(0x7f0000003f00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f80)=""/178, 0xb2}], 0x1, &(0x7f0000004080)=""/135, 0x87}, 0x800}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004140)=""/112, 0x70}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/238, 0xee}], 0x3, &(0x7f0000005300)=""/244, 0xf4}, 0x8}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005400)=""/45, 0x2d}, {&(0x7f0000005440)=""/105, 0x69}], 0x2, &(0x7f0000005500)=""/236, 0xec}, 0x3}], 0x8, 0x1, &(0x7f0000005840)={r1, r2+60000000}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000005900)=@get={0x1, &(0x7f0000005880)=""/113, 0xd91e}) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000005940), &(0x7f0000005980)=0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005a00), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000005ac0)={'ip6_vti0\x00', &(0x7f0000005a40)={'sit0\x00', r3, 0x2f, 0x0, 0x8c, 0x1ff, 0x23, @private1, @local, 0x20, 0x10, 0x6, 0x5}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000005bc0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b00)={0x78, r5, 0xc00, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20000011) lchown(&(0x7f0000005c00)='./file0\x00', 0xee01, 0xee01) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000005c40)={'veth1_to_bond\x00'}) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000005c80), &(0x7f0000005cc0)=0x8) socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000005dc0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000005d00)={0x9, 0x65e, 0x1, 0x5, 0x81, 0x4, 0x0, 0x3}, &(0x7f0000005d40)={0x287, 0xfffffffffffffff9, 0x1, 0x400000, 0x80000001, 0x867, 0xd7}, &(0x7f0000005d80)={0xd, 0x80000001, 0x1000, 0x7, 0x4, 0xff, 0x796, 0x8}, &(0x7f0000005e00)={r7, r8+60000000}, &(0x7f0000005e80)={&(0x7f0000005e40)={[0x1]}, 0x8}) rt_sigtimedwait(&(0x7f0000005ec0)={[0x3]}, &(0x7f0000005f00), &(0x7f0000005f80), 0x8) io_getevents(0x0, 0xb471, 0x6, &(0x7f0000005fc0)=[{}, {}, {}, {}, {}, {}], 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000006080), &(0x7f00000060c0)=0x8) 09:57:18 executing program 3: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='veth1_to_batadv\x00'}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000180)=0x10) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x40800) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) r4 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1) r5 = fsmount(r4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r6, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x19}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44084}, 0x8000) ioctl$CDROMREADTOCENTRY(r5, 0x5306, &(0x7f0000000400)={0x2, 0x7, 0x5, 0x1, @lba=0x2, 0x3a}) r7 = dup2(r4, r1) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000440)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000480)='gre0\x00'}) r8 = syz_open_dev$rtc(&(0x7f0000000500), 0x70a6, 0x100) dup2(r4, r8) [ 70.367885] audit: type=1400 audit(1664791038.582:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:57:18 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x80}}, 0x8810) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, 0x0, 0x2fa33b0bb69cd501, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xa39e}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xa6}, {0x8, 0x15, 0x10001}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x2, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa3}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xae02}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x16c, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x52706a74c63958ba}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd14}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x50003, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4050) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) r4 = syz_open_dev$mouse(&(0x7f0000000a40), 0xffff, 0x200) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24048084) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x22}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6b}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44004) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0xf, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000008) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d80)='net/psched\x00') r5 = fcntl$getown(r4, 0x9) syz_open_procfs(r5, &(0x7f0000000dc0)='net/netlink\x00') r6 = signalfd(0xffffffffffffffff, &(0x7f0000000e00)={[0x3]}, 0x8) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x2008c080) creat(&(0x7f0000000f80)='./file0\x00', 0x96) 09:57:18 executing program 5: getsockopt(0xffffffffffffffff, 0x7, 0x7fff, &(0x7f0000000000)=""/217, &(0x7f0000000100)=0xd9) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x60080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = accept$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4000890) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0xd21, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c880) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r5 = signalfd(r3, &(0x7f0000000600)={[0x10000]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) mq_getsetattr(r7, &(0x7f00000007c0)={0x10000, 0x400, 0x8, 0x101}, &(0x7f0000000800)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) preadv(r5, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/52, 0x34}, {&(0x7f0000000980)=""/37, 0x25}, {&(0x7f00000009c0)=""/136, 0x88}], 0x3, 0x80000001, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000001d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d00)={&(0x7f0000000b00)={0x11e0, 0x14, 0x400, 0x70bd25, 0x25dfdbff, {0xa, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "1e6dda2be31497819435cb67aa5e34ee7cd32609970fd00657099bd7adb1cb325e6ca312dbcf6f90f7dfe5eadfbc85e6e791d563d8ee2afbb2311faca27d4ea363e3e192ef8cd2dbd5ec8fc0c0c481363bd1d11e5ee9400fe143859613d7bfabdb3f88ad948578ad9ce5a41fca076db431f36e2657e0fc89609f4108a45a8eda31dad8c620f7205483716cfdc3663d22c19ae79337fb9e7e"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "0b25da0b17c8a48026d8c15afe5e401f8847b0d5a5fe744fac2d1253a9c63dd7882e36b94208f9898952bd1d163bcb05686b5cfefbf7fe349348680e14eb6e67761796d126be0eccc19f0feb064a6fbdbd699bfc8ce2a94a311560766524a8b785ebc5521bd37412dda86a5ccd45371814f3ff397a4411062f3b78f51b0f246d47ee08371398c240"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "980b2ba475d4827626e6348ce8d0d22fe4d9122d4838693236fc37eefb3ec3fd1875d9a5f70a529af3f947270926b4cfd41f5ac0ea345e9e2e40ce81bfe09f8c79f33c4ed8b15c490847c87bde6dfc53043340393a9cc8a8688068b012ac2793f2ee32233593a4ae27bc2c5cad337e0b8f5b7078b669a95b2e71134f9c538dda009e6fde5d1f3d0f112fdcb8a5e0a2ab9f55c986db429b450c5f"}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20008005) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000002000)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80001050}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x1e8, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7cd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "b0fa927d8c0597b2d7a168afa155d18c0a571d38fa2975f4dfe68b9d0edf5d0d5152df4c99ae2ae8e891bb76a6c18a5c989978c86d61e4867daf41"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff01}]}]}, 0x1e8}}, 0x800) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6f}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x128}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x28e1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ae08f2f95bb2"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf0bc}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000044) 09:57:18 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/212, 0xd4}], 0x1, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000240), 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/243, 0xf3}], 0x3, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000680)=""/34, 0x22}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000800)=""/60, 0x3c}, {&(0x7f0000000840)=""/12, 0xc}], 0x2}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/143, 0x8f}], 0x1}}], 0x5, 0x2020, &(0x7f0000000b80)) r4 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000bc0)={{0x1, 0xee00, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x15}, 0x2, 0xc3ef, 0x100, 0x1ff, 0xffffffffffffffff, r4, 0x3}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r5 = dup2(r0, r3) openat(r5, &(0x7f0000000c40)='./file0\x00', 0x400, 0x124) r6 = shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000400000/0xc00000)=nil, 0x1000) sched_getparam(r1, &(0x7f0000000c80)) pkey_mprotect(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x2000005, 0xffffffffffffffff) mremap(&(0x7f0000ca1000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000531000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000cc0), 0x3cc4730f3940c10b, 0x0) syz_mount_image$vfat(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0x10001, 0x0, &(0x7f0000000d80), 0x814004, &(0x7f0000000dc0)={[{@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp850'}}], [{@obj_type={'obj_type', 0x3d, '.,,+,'}}, {@appraise_type}, {@hash}, {@obj_type={'obj_type', 0x3d, '/dev/sr0\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type}, {@permit_directio}, {@seclabel}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) shmat(r6, &(0x7f0000cbc000/0x3000)=nil, 0x7000) shmat(r6, &(0x7f0000b6d000/0x14000)=nil, 0x5000) shmget(0x2, 0x1000, 0x2, &(0x7f00008ac000/0x1000)=nil) r7 = shmget$private(0x0, 0x2000, 0x1200, &(0x7f00007a8000/0x2000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000ec0)=""/70) shmat(r6, &(0x7f0000429000/0x1000)=nil, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x4000010, 0xffffffffffffffff, 0x506ed000) 09:57:18 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x7}, @device_b, @device_b, @compressed={{0x1, 0x0, 0x1, 0x0, 0x6}, {0xa, 0x4}}}}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000001}, 0x804) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008811) r2 = syz_open_dev$vcsn(&(0x7f0000000400), 0x9, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, r3, 0x120, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040000}, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0x81b}}, './file0\x00'}) getsockname$packet(r2, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000800)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x0, 0x80, 0x4, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x80, 0x3ff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xa, 0x6, 0x42, @private1, @empty, 0x20, 0x8000, 0x2, 0x8001}}) accept$packet(r2, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000b40)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000d80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1b4, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5a}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x26004004) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000ec0)=0x1ff) r11 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x5, 0x800) sendmsg$IPVS_CMD_GET_INFO(r11, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xc8, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x44000) [ 71.702707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.704392] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.706913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.708040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.711382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.712602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.718906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.720298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.723374] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.724443] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.731333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.732423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.746163] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.751703] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.765509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.767544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.769849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.771004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.773776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.775226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.779610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.783376] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.789477] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.796414] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.796496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.798922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.823282] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.823484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.826723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.836164] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.837352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.840471] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.843133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.844650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.851308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.852030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.854142] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.855688] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.857028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.858725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.861599] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.866010] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.897635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.899456] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.903239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.906361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.917676] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.919194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.924436] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.785524] Bluetooth: hci1: command 0x0409 tx timeout [ 73.786819] Bluetooth: hci0: command 0x0409 tx timeout [ 73.849169] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 73.850261] Bluetooth: hci4: command 0x0409 tx timeout [ 73.850609] Bluetooth: hci3: command 0x0409 tx timeout [ 73.913231] Bluetooth: hci7: command 0x0409 tx timeout [ 73.914015] Bluetooth: hci5: command 0x0409 tx timeout [ 73.977302] Bluetooth: hci2: command 0x0409 tx timeout [ 75.833212] Bluetooth: hci0: command 0x041b tx timeout [ 75.833231] Bluetooth: hci1: command 0x041b tx timeout [ 75.897669] Bluetooth: hci4: command 0x041b tx timeout [ 75.898165] Bluetooth: hci3: command 0x041b tx timeout [ 75.961255] Bluetooth: hci7: command 0x041b tx timeout [ 75.961694] Bluetooth: hci5: command 0x041b tx timeout [ 76.025171] Bluetooth: hci2: command 0x041b tx timeout [ 77.881173] Bluetooth: hci1: command 0x040f tx timeout [ 77.881260] Bluetooth: hci0: command 0x040f tx timeout [ 77.945564] Bluetooth: hci3: command 0x040f tx timeout [ 77.945599] Bluetooth: hci4: command 0x040f tx timeout [ 78.009235] Bluetooth: hci5: command 0x040f tx timeout [ 78.009254] Bluetooth: hci7: command 0x040f tx timeout [ 78.073198] Bluetooth: hci2: command 0x040f tx timeout [ 79.161139] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 79.929159] Bluetooth: hci0: command 0x0419 tx timeout [ 79.929174] Bluetooth: hci1: command 0x0419 tx timeout [ 79.993601] Bluetooth: hci3: command 0x0419 tx timeout [ 79.994129] Bluetooth: hci4: command 0x0419 tx timeout [ 80.057208] Bluetooth: hci7: command 0x0419 tx timeout [ 80.058202] Bluetooth: hci5: command 0x0419 tx timeout [ 80.122131] Bluetooth: hci2: command 0x0419 tx timeout [ 81.685707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.689179] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.693250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.699263] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.700808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.701770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.705829] Bluetooth: hci6: HCI_REQ-0x0c1a [ 83.769194] Bluetooth: hci6: command 0x0409 tx timeout [ 85.817257] Bluetooth: hci6: command 0x041b tx timeout [ 87.865184] Bluetooth: hci6: command 0x040f tx timeout [ 89.913172] Bluetooth: hci6: command 0x0419 tx timeout 09:58:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000470000004f8010020004000030000000000000080002916eb61f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e2020202020202020202010002ce970325132510000e97032510300000000002e2e20202020202020202010002ce970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020002ce970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21800}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51800}], 0x0, &(0x7f0000000040)={[{@utf8}, {@shortname_winnt}, {@nonumtail}]}) [ 125.323737] loop7: detected capacity change from 0 to 1304 [ 125.336717] FAT-fs (loop7): Unrecognized mount option "nnonumtail=1" or missing value [ 125.358655] loop7: detected capacity change from 0 to 1304 [ 125.359715] FAT-fs (loop7): Unrecognized mount option "nnonumtail=1" or missing value 09:58:13 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffa, @any, 0x1, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) [ 125.481752] audit: type=1400 audit(1664791093.696:7): avc: denied { open } for pid=3574 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.483269] audit: type=1400 audit(1664791093.696:8): avc: denied { kernel } for pid=3574 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.507564] ------------[ cut here ]------------ [ 125.507585] [ 125.507588] ====================================================== [ 125.507592] WARNING: possible circular locking dependency detected [ 125.507596] 6.0.0-rc7-next-20220930 #1 Not tainted [ 125.507603] ------------------------------------------------------ [ 125.507606] syz-executor.7/3576 is trying to acquire lock: [ 125.507612] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.507653] [ 125.507653] but task is already holding lock: [ 125.507656] ffff888040009420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.507683] [ 125.507683] which lock already depends on the new lock. [ 125.507683] [ 125.507686] [ 125.507686] the existing dependency chain (in reverse order) is: [ 125.507689] [ 125.507689] -> #3 (&ctx->lock){....}-{2:2}: [ 125.507703] _raw_spin_lock+0x2a/0x40 [ 125.507714] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.507725] __schedule+0xedd/0x2470 [ 125.507739] preempt_schedule_common+0x45/0xc0 [ 125.507754] __cond_resched+0x17/0x30 [ 125.507768] __mutex_lock+0xa3/0x14d0 [ 125.507783] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.507794] do_syscall_64+0x3b/0x90 [ 125.507812] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.507824] [ 125.507824] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.507838] _raw_spin_lock_nested+0x30/0x40 [ 125.507848] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.507862] task_fork_fair+0x63/0x4d0 [ 125.507879] sched_cgroup_fork+0x3d0/0x540 [ 125.507893] copy_process+0x4183/0x6e20 [ 125.507905] kernel_clone+0xe7/0x890 [ 125.507914] user_mode_thread+0xad/0xf0 [ 125.507925] rest_init+0x24/0x250 [ 125.507937] arch_call_rest_init+0xf/0x14 [ 125.507954] start_kernel+0x4c6/0x4eb [ 125.507969] secondary_startup_64_no_verify+0xe0/0xeb [ 125.507984] [ 125.507984] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.507997] _raw_spin_lock_irqsave+0x39/0x60 [ 125.508008] try_to_wake_up+0xab/0x1930 [ 125.508020] up+0x75/0xb0 [ 125.508034] __up_console_sem+0x6e/0x80 [ 125.508051] console_unlock+0x46a/0x590 [ 125.508067] vt_ioctl+0x2822/0x2ca0 [ 125.508079] tty_ioctl+0x785/0x16b0 [ 125.508090] __x64_sys_ioctl+0x19a/0x210 [ 125.508104] do_syscall_64+0x3b/0x90 [ 125.508120] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.508132] [ 125.508132] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.508146] __lock_acquire+0x2a02/0x5e70 [ 125.508163] lock_acquire+0x1a2/0x530 [ 125.508179] _raw_spin_lock_irqsave+0x39/0x60 [ 125.508189] down_trylock+0xe/0x70 [ 125.508204] __down_trylock_console_sem+0x3b/0xd0 [ 125.508220] vprintk_emit+0x16b/0x560 [ 125.508236] vprintk+0x84/0xa0 [ 125.508251] _printk+0xba/0xf1 [ 125.508263] report_bug.cold+0x72/0xab [ 125.508279] handle_bug+0x3c/0x70 [ 125.508295] exc_invalid_op+0x14/0x50 [ 125.508312] asm_exc_invalid_op+0x16/0x20 [ 125.508324] group_sched_out.part.0+0x2c7/0x460 [ 125.508342] ctx_sched_out+0x8f1/0xc10 [ 125.508358] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.508369] __schedule+0xedd/0x2470 [ 125.508383] preempt_schedule_common+0x45/0xc0 [ 125.508397] __cond_resched+0x17/0x30 [ 125.508411] __mutex_lock+0xa3/0x14d0 [ 125.508426] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.508437] do_syscall_64+0x3b/0x90 [ 125.508453] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.508466] [ 125.508466] other info that might help us debug this: [ 125.508466] [ 125.508468] Chain exists of: [ 125.508468] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.508468] [ 125.508483] Possible unsafe locking scenario: [ 125.508483] [ 125.508486] CPU0 CPU1 [ 125.508488] ---- ---- [ 125.508490] lock(&ctx->lock); [ 125.508496] lock(&rq->__lock); [ 125.508503] lock(&ctx->lock); [ 125.508509] lock((console_sem).lock); [ 125.508514] [ 125.508514] *** DEADLOCK *** [ 125.508514] [ 125.508516] 2 locks held by syz-executor.7/3576: [ 125.508523] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.508552] #1: ffff888040009420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.508578] [ 125.508578] stack backtrace: [ 125.508580] CPU: 1 PID: 3576 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.508593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.508601] Call Trace: [ 125.508604] [ 125.508608] dump_stack_lvl+0x8b/0xb3 [ 125.508626] check_noncircular+0x263/0x2e0 [ 125.508642] ? format_decode+0x26c/0xb50 [ 125.508659] ? print_circular_bug+0x450/0x450 [ 125.508675] ? simple_strtoul+0x30/0x30 [ 125.508690] ? __lockdep_reset_lock+0x180/0x180 [ 125.508707] ? format_decode+0x26c/0xb50 [ 125.508724] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.508741] __lock_acquire+0x2a02/0x5e70 [ 125.508763] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.508785] lock_acquire+0x1a2/0x530 [ 125.508801] ? down_trylock+0xe/0x70 [ 125.508818] ? lock_release+0x750/0x750 [ 125.508837] ? find_held_lock+0x2c/0x110 [ 125.508853] ? vprintk+0x84/0xa0 [ 125.508871] _raw_spin_lock_irqsave+0x39/0x60 [ 125.508882] ? down_trylock+0xe/0x70 [ 125.508898] down_trylock+0xe/0x70 [ 125.508914] ? vprintk+0x84/0xa0 [ 125.508930] __down_trylock_console_sem+0x3b/0xd0 [ 125.508947] vprintk_emit+0x16b/0x560 [ 125.508966] vprintk+0x84/0xa0 [ 125.508983] _printk+0xba/0xf1 [ 125.508994] ? record_print_text.cold+0x16/0x16 [ 125.509008] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 125.509023] ? lock_downgrade+0x6d0/0x6d0 [ 125.509040] ? report_bug.cold+0x66/0xab [ 125.509058] ? group_sched_out.part.0+0x2c7/0x460 [ 125.509076] report_bug.cold+0x72/0xab [ 125.509095] handle_bug+0x3c/0x70 [ 125.509112] exc_invalid_op+0x14/0x50 [ 125.509130] asm_exc_invalid_op+0x16/0x20 [ 125.509143] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.509163] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.509174] RSP: 0018:ffff88803faff978 EFLAGS: 00010006 [ 125.509183] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.509190] RDX: ffff8880175cd040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.509198] RBP: ffff888040748000 R08: 0000000000000005 R09: 0000000000000001 [ 125.509205] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040009400 [ 125.509212] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 125.509241] ? group_sched_out.part.0+0x2c7/0x460 [ 125.509261] ? group_sched_out.part.0+0x2c7/0x460 [ 125.509281] ctx_sched_out+0x8f1/0xc10 [ 125.509300] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.509314] ? lock_is_held_type+0xd7/0x130 [ 125.509328] ? __perf_cgroup_move+0x160/0x160 [ 125.509339] ? set_next_entity+0x304/0x550 [ 125.509356] ? update_curr+0x267/0x740 [ 125.509375] ? lock_is_held_type+0xd7/0x130 [ 125.509388] __schedule+0xedd/0x2470 [ 125.509405] ? io_schedule_timeout+0x150/0x150 [ 125.509420] ? find_held_lock+0x2c/0x110 [ 125.509437] ? lock_is_held_type+0xd7/0x130 [ 125.509450] ? __cond_resched+0x17/0x30 [ 125.509465] preempt_schedule_common+0x45/0xc0 [ 125.509481] __cond_resched+0x17/0x30 [ 125.509496] __mutex_lock+0xa3/0x14d0 [ 125.509512] ? lock_is_held_type+0xd7/0x130 [ 125.509525] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.509538] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.509555] ? lock_release+0x3b2/0x750 [ 125.509572] ? __up_read+0x192/0x730 [ 125.509587] ? up_write+0x520/0x520 [ 125.509603] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.509618] ? __up_read+0x192/0x730 [ 125.509632] ? perf_compat_ioctl+0x130/0x130 [ 125.509644] ? up_write+0x520/0x520 [ 125.509662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.509676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.509691] do_syscall_64+0x3b/0x90 [ 125.509709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.509722] RIP: 0033:0x7ffa5c18ab19 [ 125.509730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.509741] RSP: 002b:00007ffa59700188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.509752] RAX: ffffffffffffffda RBX: 00007ffa5c29df60 RCX: 00007ffa5c18ab19 [ 125.509759] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 125.509766] RBP: 00007ffa5c1e4f6d R08: 0000000000000000 R09: 0000000000000000 [ 125.509773] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.509781] R13: 00007fff2a96191f R14: 00007ffa59700300 R15: 0000000000022000 [ 125.509793] [ 125.571813] WARNING: CPU: 1 PID: 3576 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.572504] Modules linked in: [ 125.572749] CPU: 1 PID: 3576 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.573361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.574197] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.574618] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.575969] RSP: 0018:ffff88803faff978 EFLAGS: 00010006 [ 125.576380] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.576914] RDX: ffff8880175cd040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.577446] RBP: ffff888040748000 R08: 0000000000000005 R09: 0000000000000001 [ 125.577976] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888040009400 [ 125.578513] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 125.579051] FS: 00007ffa59700700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 125.579655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.580087] CR2: 00007f5629a06260 CR3: 000000000e428000 CR4: 0000000000350ee0 [ 125.580624] Call Trace: [ 125.580818] [ 125.580991] ctx_sched_out+0x8f1/0xc10 [ 125.581302] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.581699] ? lock_is_held_type+0xd7/0x130 [ 125.582037] ? __perf_cgroup_move+0x160/0x160 [ 125.582385] ? set_next_entity+0x304/0x550 [ 125.582713] ? update_curr+0x267/0x740 [ 125.583019] ? lock_is_held_type+0xd7/0x130 [ 125.583350] __schedule+0xedd/0x2470 [ 125.583644] ? io_schedule_timeout+0x150/0x150 [ 125.583996] ? find_held_lock+0x2c/0x110 [ 125.584310] ? lock_is_held_type+0xd7/0x130 [ 125.584648] ? __cond_resched+0x17/0x30 [ 125.584952] preempt_schedule_common+0x45/0xc0 [ 125.585316] __cond_resched+0x17/0x30 [ 125.585611] __mutex_lock+0xa3/0x14d0 [ 125.585905] ? lock_is_held_type+0xd7/0x130 [ 125.586233] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.586620] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.587000] ? lock_release+0x3b2/0x750 [ 125.587313] ? __up_read+0x192/0x730 [ 125.587600] ? up_write+0x520/0x520 [ 125.587885] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.588276] ? __up_read+0x192/0x730 [ 125.588568] ? perf_compat_ioctl+0x130/0x130 [ 125.588904] ? up_write+0x520/0x520 [ 125.589194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.589596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.589999] do_syscall_64+0x3b/0x90 [ 125.590293] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.590691] RIP: 0033:0x7ffa5c18ab19 [ 125.590973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.592333] RSP: 002b:00007ffa59700188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.592901] RAX: ffffffffffffffda RBX: 00007ffa5c29df60 RCX: 00007ffa5c18ab19 [ 125.593444] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 125.593980] RBP: 00007ffa5c1e4f6d R08: 0000000000000000 R09: 0000000000000000 [ 125.594514] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.595051] R13: 00007fff2a96191f R14: 00007ffa59700300 R15: 0000000000022000 [ 125.595589] [ 125.595771] irq event stamp: 744 [ 125.596025] hardirqs last enabled at (743): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.596754] hardirqs last disabled at (744): [] __schedule+0x1225/0x2470 [ 125.597384] softirqs last enabled at (730): [] __irq_exit_rcu+0x11b/0x180 [ 125.598034] softirqs last disabled at (493): [] __irq_exit_rcu+0x11b/0x180 [ 125.598678] ---[ end trace 0000000000000000 ]--- [ 125.628496] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value [ 125.679758] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value 09:58:13 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffa, @any, 0x1, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) [ 125.810439] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value 09:58:14 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffa, @any, 0x1, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) [ 125.994239] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value 09:58:14 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffa, @any, 0x1, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) [ 126.287610] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value 09:58:14 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000008400000021ef943e6751e34d2096116b488acbe55abc2f2b77e3c2849368e6bcdad76c6b54141d1ac9d6be3bbedee565f18adc82fd1c23c00451d5cbcfd926cd66163ef92937c3d17f1cbad2bc158bf6e1a963d1bb9b92870397ec8ff2649aae3e11d11c4c59183c669b089441f93d6659a970beff638ad65cca36a314104fae6abfa2b6eef2fc5218a3416fc5a1c100e36b09f1704d65e8ddee96bf979e4e4bb02e228bad12ea297d46f2eec3d612c950c3e3baf9eee794beaf5aa9afbc00992cd3b915a6f23ce80ed6062b3e0d3be22e2f044c9fb674589c9241a8bc1bc69cd2c7da9e6f281d9d1990ad7300bdd8849896d2dee26efd89c62142d7541f5ffed8da447a305c9a46941ad7056dfb476070fdc133ed75fe7b69ad9a8514b92764d9e2d2e618dd3175"], &(0x7f0000000240)=0xa8) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffa, @any, 0x1, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) [ 126.518410] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value 09:58:14 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000008400000021ef943e6751e34d2096116b488acbe55abc2f2b77e3c2849368e6bcdad76c6b54141d1ac9d6be3bbedee565f18adc82fd1c23c00451d5cbcfd926cd66163ef92937c3d17f1cbad2bc158bf6e1a963d1bb9b92870397ec8ff2649aae3e11d11c4c59183c669b089441f93d6659a970beff638ad65cca36a314104fae6abfa2b6eef2fc5218a3416fc5a1c100e36b09f1704d65e8ddee96bf979e4e4bb02e228bad12ea297d46f2eec3d612c950c3e3baf9eee794beaf5aa9afbc00992cd3b915a6f23ce80ed6062b3e0d3be22e2f044c9fb674589c9241a8bc1bc69cd2c7da9e6f281d9d1990ad7300bdd8849896d2dee26efd89c62142d7541f5ffed8da447a305c9a46941ad7056dfb476070fdc133ed75fe7b69ad9a8514b92764d9e2d2e618dd3175"], &(0x7f0000000240)=0xa8) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffa, @any, 0x1, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) [ 126.725364] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value 09:58:15 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESOCT=r3]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xa8) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0xfffa, @any, 0x1, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0xffc0}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) openat(r6, &(0x7f0000000080)='./file0\x00', 0x64000, 0x0) [ 126.932893] FAT-fs (loop7): Unrecognized mount option "00000000000000000008" or missing value [ 127.415045] loop0: detected capacity change from 0 to 81920 [ 129.011893] loop6: detected capacity change from 0 to 128 [ 129.014505] FAT-fs (loop6): Unrecognized mount option "obj_type=." or missing value [ 129.055794] loop6: detected capacity change from 0 to 128 [ 129.057459] FAT-fs (loop6): Unrecognized mount option "obj_type=." or missing value VM DIAGNOSIS: 09:58:14 Registers: info registers vcpu 0 RAX=ffffffff85e8083b RBX=0000000000000001 RCX=ffff88804072f9b0 RDX=dffffc0000000000 RSI=0000000000000000 RDI=1ffffffff0bd0107 RBP=ffff88804072f960 RSP=ffff88804072f888 R8 =ffffffff85e8083a R9 =ffffffff85e8083e R10=ffffed10080e5f2e R11=000000000003603d R12=ffff88804072f949 R13=ffff88804072f968 R14=ffff88804072f908 R15=ffffffff85e8083f RIP=ffffffff8111a692 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff56251f580 CR3=00000000087f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803faff3c0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffa59700700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5629a06260 CR3=000000000e428000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000