syzkaller login: [ 33.670201] sshd (244) used greatest stack depth: 24776 bytes left Warning: Permanently added '[localhost]:8084' (ECDSA) to the list of known hosts. 2022/09/14 20:21:12 fuzzer started 2022/09/14 20:21:12 dialing manager at localhost:33849 [ 35.836928] cgroup: Unknown subsys name 'net' [ 35.957738] cgroup: Unknown subsys name 'rlimit' 2022/09/14 20:21:26 syscalls: 2215 2022/09/14 20:21:26 code coverage: enabled 2022/09/14 20:21:26 comparison tracing: enabled 2022/09/14 20:21:26 extra coverage: enabled 2022/09/14 20:21:26 setuid sandbox: enabled 2022/09/14 20:21:26 namespace sandbox: enabled 2022/09/14 20:21:26 Android sandbox: enabled 2022/09/14 20:21:26 fault injection: enabled 2022/09/14 20:21:26 leak checking: enabled 2022/09/14 20:21:26 net packet injection: enabled 2022/09/14 20:21:26 net device setup: enabled 2022/09/14 20:21:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 20:21:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 20:21:26 USB emulation: enabled 2022/09/14 20:21:26 hci packet injection: enabled 2022/09/14 20:21:26 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 20:21:26 802.15.4 emulation: enabled 2022/09/14 20:21:26 fetching corpus: 50, signal 38838/40557 (executing program) 2022/09/14 20:21:26 fetching corpus: 100, signal 47399/50718 (executing program) 2022/09/14 20:21:26 fetching corpus: 150, signal 55316/60098 (executing program) 2022/09/14 20:21:26 fetching corpus: 200, signal 65292/71384 (executing program) 2022/09/14 20:21:26 fetching corpus: 250, signal 71541/78924 (executing program) 2022/09/14 20:21:27 fetching corpus: 300, signal 76151/84775 (executing program) 2022/09/14 20:21:27 fetching corpus: 350, signal 80382/90219 (executing program) 2022/09/14 20:21:27 fetching corpus: 400, signal 83653/94737 (executing program) 2022/09/14 20:21:27 fetching corpus: 450, signal 87527/99727 (executing program) 2022/09/14 20:21:27 fetching corpus: 500, signal 93227/106453 (executing program) 2022/09/14 20:21:27 fetching corpus: 550, signal 96284/110644 (executing program) 2022/09/14 20:21:27 fetching corpus: 600, signal 101683/116907 (executing program) 2022/09/14 20:21:27 fetching corpus: 650, signal 106997/122984 (executing program) 2022/09/14 20:21:28 fetching corpus: 700, signal 110074/126959 (executing program) 2022/09/14 20:21:28 fetching corpus: 750, signal 113117/130896 (executing program) 2022/09/14 20:21:28 fetching corpus: 800, signal 117238/135761 (executing program) 2022/09/14 20:21:28 fetching corpus: 850, signal 118958/138425 (executing program) 2022/09/14 20:21:28 fetching corpus: 900, signal 122741/142884 (executing program) 2022/09/14 20:21:28 fetching corpus: 950, signal 124654/145662 (executing program) 2022/09/14 20:21:28 fetching corpus: 1000, signal 127437/149154 (executing program) 2022/09/14 20:21:28 fetching corpus: 1050, signal 129078/151662 (executing program) 2022/09/14 20:21:28 fetching corpus: 1100, signal 131189/154503 (executing program) 2022/09/14 20:21:29 fetching corpus: 1150, signal 132712/156851 (executing program) 2022/09/14 20:21:29 fetching corpus: 1200, signal 134920/159759 (executing program) 2022/09/14 20:21:29 fetching corpus: 1250, signal 136943/162443 (executing program) 2022/09/14 20:21:29 fetching corpus: 1300, signal 139230/165334 (executing program) 2022/09/14 20:21:29 fetching corpus: 1350, signal 141420/168071 (executing program) 2022/09/14 20:21:29 fetching corpus: 1400, signal 144102/171174 (executing program) 2022/09/14 20:21:29 fetching corpus: 1450, signal 147547/174830 (executing program) 2022/09/14 20:21:29 fetching corpus: 1500, signal 149381/177140 (executing program) 2022/09/14 20:21:30 fetching corpus: 1550, signal 152387/180409 (executing program) 2022/09/14 20:21:30 fetching corpus: 1600, signal 153800/182361 (executing program) 2022/09/14 20:21:30 fetching corpus: 1650, signal 155491/184495 (executing program) 2022/09/14 20:21:30 fetching corpus: 1700, signal 157383/186800 (executing program) 2022/09/14 20:21:30 fetching corpus: 1750, signal 158065/188142 (executing program) 2022/09/14 20:21:30 fetching corpus: 1800, signal 159993/190446 (executing program) 2022/09/14 20:21:30 fetching corpus: 1850, signal 161931/192757 (executing program) 2022/09/14 20:21:30 fetching corpus: 1900, signal 163531/194742 (executing program) 2022/09/14 20:21:31 fetching corpus: 1950, signal 164764/196444 (executing program) 2022/09/14 20:21:31 fetching corpus: 2000, signal 166038/198157 (executing program) 2022/09/14 20:21:31 fetching corpus: 2050, signal 169158/201179 (executing program) 2022/09/14 20:21:31 fetching corpus: 2100, signal 170582/202974 (executing program) 2022/09/14 20:21:31 fetching corpus: 2150, signal 172027/204709 (executing program) 2022/09/14 20:21:31 fetching corpus: 2200, signal 173255/206311 (executing program) 2022/09/14 20:21:31 fetching corpus: 2250, signal 174238/207754 (executing program) 2022/09/14 20:21:32 fetching corpus: 2300, signal 175474/209297 (executing program) 2022/09/14 20:21:32 fetching corpus: 2350, signal 177203/211129 (executing program) 2022/09/14 20:21:32 fetching corpus: 2400, signal 177956/212356 (executing program) 2022/09/14 20:21:32 fetching corpus: 2450, signal 179368/214006 (executing program) 2022/09/14 20:21:32 fetching corpus: 2500, signal 180194/215276 (executing program) 2022/09/14 20:21:32 fetching corpus: 2550, signal 180985/216454 (executing program) 2022/09/14 20:21:32 fetching corpus: 2600, signal 182259/217956 (executing program) 2022/09/14 20:21:33 fetching corpus: 2650, signal 183114/219147 (executing program) 2022/09/14 20:21:33 fetching corpus: 2700, signal 184241/220534 (executing program) 2022/09/14 20:21:33 fetching corpus: 2750, signal 185673/222052 (executing program) 2022/09/14 20:21:33 fetching corpus: 2800, signal 186450/223138 (executing program) 2022/09/14 20:21:33 fetching corpus: 2850, signal 187729/224599 (executing program) 2022/09/14 20:21:33 fetching corpus: 2900, signal 188499/225703 (executing program) 2022/09/14 20:21:33 fetching corpus: 2950, signal 189346/226870 (executing program) 2022/09/14 20:21:33 fetching corpus: 3000, signal 190326/228051 (executing program) 2022/09/14 20:21:34 fetching corpus: 3050, signal 191074/229086 (executing program) 2022/09/14 20:21:34 fetching corpus: 3100, signal 192131/230311 (executing program) 2022/09/14 20:21:34 fetching corpus: 3150, signal 192927/231331 (executing program) 2022/09/14 20:21:34 fetching corpus: 3200, signal 194700/232861 (executing program) 2022/09/14 20:21:34 fetching corpus: 3250, signal 196289/234229 (executing program) 2022/09/14 20:21:34 fetching corpus: 3300, signal 197245/235328 (executing program) 2022/09/14 20:21:34 fetching corpus: 3350, signal 197968/236300 (executing program) 2022/09/14 20:21:34 fetching corpus: 3400, signal 198941/237278 (executing program) 2022/09/14 20:21:34 fetching corpus: 3450, signal 199636/238194 (executing program) 2022/09/14 20:21:35 fetching corpus: 3500, signal 200389/239096 (executing program) 2022/09/14 20:21:35 fetching corpus: 3550, signal 201193/240019 (executing program) 2022/09/14 20:21:35 fetching corpus: 3600, signal 202075/240978 (executing program) 2022/09/14 20:21:35 fetching corpus: 3650, signal 203031/241970 (executing program) 2022/09/14 20:21:35 fetching corpus: 3700, signal 203742/242865 (executing program) 2022/09/14 20:21:35 fetching corpus: 3750, signal 204554/243749 (executing program) 2022/09/14 20:21:35 fetching corpus: 3800, signal 205312/244637 (executing program) 2022/09/14 20:21:35 fetching corpus: 3850, signal 206131/245512 (executing program) 2022/09/14 20:21:36 fetching corpus: 3900, signal 207180/246515 (executing program) 2022/09/14 20:21:36 fetching corpus: 3950, signal 208372/247523 (executing program) 2022/09/14 20:21:36 fetching corpus: 4000, signal 209138/248296 (executing program) 2022/09/14 20:21:36 fetching corpus: 4050, signal 210199/249227 (executing program) 2022/09/14 20:21:36 fetching corpus: 4100, signal 210828/249957 (executing program) 2022/09/14 20:21:36 fetching corpus: 4150, signal 211405/250696 (executing program) 2022/09/14 20:21:37 fetching corpus: 4200, signal 212550/251611 (executing program) 2022/09/14 20:21:37 fetching corpus: 4250, signal 213073/252242 (executing program) 2022/09/14 20:21:37 fetching corpus: 4300, signal 213768/252964 (executing program) 2022/09/14 20:21:37 fetching corpus: 4350, signal 215020/253912 (executing program) 2022/09/14 20:21:37 fetching corpus: 4400, signal 215725/254646 (executing program) 2022/09/14 20:21:37 fetching corpus: 4450, signal 216221/255278 (executing program) 2022/09/14 20:21:37 fetching corpus: 4500, signal 217227/256029 (executing program) 2022/09/14 20:21:37 fetching corpus: 4550, signal 218811/256964 (executing program) 2022/09/14 20:21:38 fetching corpus: 4600, signal 219350/257547 (executing program) 2022/09/14 20:21:38 fetching corpus: 4650, signal 220310/258272 (executing program) 2022/09/14 20:21:38 fetching corpus: 4700, signal 220993/258844 (executing program) 2022/09/14 20:21:38 fetching corpus: 4750, signal 221667/259440 (executing program) 2022/09/14 20:21:38 fetching corpus: 4800, signal 222153/260005 (executing program) 2022/09/14 20:21:38 fetching corpus: 4850, signal 223121/260673 (executing program) 2022/09/14 20:21:38 fetching corpus: 4900, signal 224238/261363 (executing program) 2022/09/14 20:21:38 fetching corpus: 4950, signal 224886/261887 (executing program) 2022/09/14 20:21:39 fetching corpus: 5000, signal 225458/262457 (executing program) 2022/09/14 20:21:39 fetching corpus: 5050, signal 226312/263031 (executing program) 2022/09/14 20:21:39 fetching corpus: 5100, signal 227028/263591 (executing program) 2022/09/14 20:21:39 fetching corpus: 5150, signal 227803/264160 (executing program) 2022/09/14 20:21:39 fetching corpus: 5200, signal 228427/264627 (executing program) 2022/09/14 20:21:39 fetching corpus: 5250, signal 229106/265183 (executing program) 2022/09/14 20:21:39 fetching corpus: 5300, signal 229638/265611 (executing program) 2022/09/14 20:21:39 fetching corpus: 5350, signal 230179/266077 (executing program) 2022/09/14 20:21:40 fetching corpus: 5400, signal 230887/266576 (executing program) 2022/09/14 20:21:40 fetching corpus: 5450, signal 231730/267046 (executing program) 2022/09/14 20:21:40 fetching corpus: 5500, signal 232222/267495 (executing program) 2022/09/14 20:21:40 fetching corpus: 5550, signal 233239/267987 (executing program) 2022/09/14 20:21:40 fetching corpus: 5600, signal 234088/268432 (executing program) 2022/09/14 20:21:40 fetching corpus: 5650, signal 234645/269015 (executing program) 2022/09/14 20:21:41 fetching corpus: 5700, signal 235099/269391 (executing program) 2022/09/14 20:21:41 fetching corpus: 5750, signal 235518/269752 (executing program) 2022/09/14 20:21:41 fetching corpus: 5800, signal 235889/270133 (executing program) 2022/09/14 20:21:41 fetching corpus: 5850, signal 236517/270529 (executing program) 2022/09/14 20:21:41 fetching corpus: 5900, signal 237043/270870 (executing program) 2022/09/14 20:21:41 fetching corpus: 5950, signal 237567/271175 (executing program) 2022/09/14 20:21:41 fetching corpus: 6000, signal 237959/271506 (executing program) 2022/09/14 20:21:41 fetching corpus: 6050, signal 238633/271915 (executing program) 2022/09/14 20:21:42 fetching corpus: 6100, signal 239040/272259 (executing program) 2022/09/14 20:21:42 fetching corpus: 6150, signal 239673/272583 (executing program) 2022/09/14 20:21:42 fetching corpus: 6200, signal 240117/272900 (executing program) 2022/09/14 20:21:42 fetching corpus: 6250, signal 241009/273211 (executing program) 2022/09/14 20:21:42 fetching corpus: 6300, signal 241527/273541 (executing program) 2022/09/14 20:21:42 fetching corpus: 6350, signal 242140/273857 (executing program) 2022/09/14 20:21:42 fetching corpus: 6400, signal 242820/274125 (executing program) 2022/09/14 20:21:42 fetching corpus: 6450, signal 243336/274369 (executing program) 2022/09/14 20:21:43 fetching corpus: 6500, signal 243881/274628 (executing program) 2022/09/14 20:21:43 fetching corpus: 6550, signal 244589/274899 (executing program) 2022/09/14 20:21:43 fetching corpus: 6600, signal 245429/275004 (executing program) 2022/09/14 20:21:43 fetching corpus: 6650, signal 246006/275021 (executing program) 2022/09/14 20:21:43 fetching corpus: 6700, signal 246446/275055 (executing program) 2022/09/14 20:21:43 fetching corpus: 6750, signal 247015/275087 (executing program) 2022/09/14 20:21:43 fetching corpus: 6800, signal 247438/275121 (executing program) 2022/09/14 20:21:43 fetching corpus: 6850, signal 247900/275156 (executing program) 2022/09/14 20:21:44 fetching corpus: 6900, signal 248556/275167 (executing program) 2022/09/14 20:21:44 fetching corpus: 6950, signal 249243/275182 (executing program) 2022/09/14 20:21:44 fetching corpus: 7000, signal 249644/275188 (executing program) 2022/09/14 20:21:44 fetching corpus: 7050, signal 250416/275328 (executing program) 2022/09/14 20:21:44 fetching corpus: 7100, signal 250900/275374 (executing program) 2022/09/14 20:21:44 fetching corpus: 7150, signal 251591/275392 (executing program) 2022/09/14 20:21:44 fetching corpus: 7200, signal 252069/275420 (executing program) 2022/09/14 20:21:45 fetching corpus: 7250, signal 252488/275439 (executing program) 2022/09/14 20:21:45 fetching corpus: 7300, signal 252948/275449 (executing program) 2022/09/14 20:21:45 fetching corpus: 7350, signal 254042/275469 (executing program) 2022/09/14 20:21:45 fetching corpus: 7400, signal 254585/275476 (executing program) 2022/09/14 20:21:45 fetching corpus: 7450, signal 254902/275477 (executing program) 2022/09/14 20:21:45 fetching corpus: 7500, signal 255257/275485 (executing program) 2022/09/14 20:21:45 fetching corpus: 7550, signal 255792/275495 (executing program) 2022/09/14 20:21:45 fetching corpus: 7600, signal 256549/275500 (executing program) 2022/09/14 20:21:46 fetching corpus: 7650, signal 257055/275526 (executing program) 2022/09/14 20:21:46 fetching corpus: 7700, signal 257631/275542 (executing program) 2022/09/14 20:21:46 fetching corpus: 7750, signal 258298/275546 (executing program) 2022/09/14 20:21:46 fetching corpus: 7800, signal 258794/275606 (executing program) 2022/09/14 20:21:46 fetching corpus: 7850, signal 259260/275611 (executing program) 2022/09/14 20:21:46 fetching corpus: 7900, signal 259643/275618 (executing program) 2022/09/14 20:21:46 fetching corpus: 7950, signal 260092/275624 (executing program) 2022/09/14 20:21:47 fetching corpus: 8000, signal 260433/275629 (executing program) 2022/09/14 20:21:47 fetching corpus: 8050, signal 261138/275642 (executing program) 2022/09/14 20:21:47 fetching corpus: 8100, signal 261746/275671 (executing program) 2022/09/14 20:21:47 fetching corpus: 8150, signal 262331/275672 (executing program) 2022/09/14 20:21:47 fetching corpus: 8200, signal 262909/275690 (executing program) 2022/09/14 20:21:47 fetching corpus: 8226, signal 263469/275690 (executing program) 2022/09/14 20:21:47 fetching corpus: 8226, signal 263469/275690 (executing program) 2022/09/14 20:21:50 starting 8 fuzzer processes 20:21:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x61) lseek(r0, 0x101, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x18040, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x853, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048085}, 0x8800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x7, 0x5, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x7, 0x1, 0xf40}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x77}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6b}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x78}}, 0x2400c884) r6 = dup2(r0, r1) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0x4e21, @loopback}, {0x306, @random="bc40768408b1"}, 0x1c, {0x2, 0x4e22, @rand_addr=0x64010102}, 'veth0_virt_wifi\x00'}) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000600)={0xd9, 0xcebe000, 0x4, 0x2, 0x9}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x44000) accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000800)={@private2, r8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000840)=[@window={0x3, 0xffe0, 0xfff}, @timestamp, @timestamp, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x7}, @sack_perm], 0x8) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x123081, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x81) 20:21:50 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'sit0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe9, 0x48}}}}, ["", "", ""]}, 0x28}}, 0xc0d1) readlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/77, 0x4d) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x1e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x713}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000004) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000500)) r5 = openat(r1, &(0x7f0000000540)='./file0\x00', 0x480200, 0x1e0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x560af4efe2ace3f7}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r7, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x58}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r8, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r5) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x800}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) 20:21:50 executing program 2: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)={0x80, {{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x4, @empty, 0x7}}]}, 0x110) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xcc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x610200, 0x101) r3 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000300)="76f7eadb70bdf60b990487a99ea7b8749b1f23e6db01ac8b861a85b1b142becfd071dc00fc", 0x25}, {&(0x7f0000000340)="6b4cfcb4b1b6afb783adbbbca1ccc5f3688082e19aaf4d82cd71576741819dbe4dbf3292cd9f363e53fd9f4517a86c1ac7e833bfe916e6458c2a3c210495fb1c118b346ad5f5845c3e394703be6d31dd4b6861717f25cffd894753463a39fc1e022d8105f48f6f9309b0cbfc963b648e21e7e1720646aaa5def70c0d80a78ea7c025f18930ec6c7a4cabc527bb2c7877a506856681179d5842f1ce0a68d571d7407cd6eb00e49c1f7130f566d9d0d6edb14d5d4f397cdbfe7bf4483e1c81c55dd410a02d06e55935b5fea8a62ca7ba42465d09c4d3014efbe502dc342cbf859edc7b66e28a5d0c70e5b577f9cce109b4ae132b12faca66a8df0bd2", 0xfb}, {&(0x7f0000000440)="d6f84dfae6f70eb82dc922f6343e3f16d1cdb447b1c7b688ec9c7175097c5341f7d22c6be713487f7ce1906c44147db0d58cd2b3f322b2bf365d6e4ce5b7538bc8b59189779d5cfe9f9d0574242d031a75d744347d4b650e633da6093ab80e0e49612026d85282e3dd444225eb9231223859ab1404636e1f17266ddffaa39e7a7905c3d1a1c7f078e5c9a4b92eae6aefac83a505d18f988d38b49beda40f41782ef2", 0xa2}, {&(0x7f0000000500)="dbee1cf2c1825061af43a614e127c5f534c4ace0be78d964ea29b2400072dd2196aecb00f79657156a9042901170f96f8e949ef0e8c905ed14794d90ce19a13358a37b0acdb32c5e7592d7f730d94d8c2cb03619a12aa4fd3017fde397dc57f9620d24e7b86b9eeb64b550153b477457467904ee1b0ea49e4c5f5eb01bf9b915da8c", 0x82}], 0x4, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x50}, 0x20008000) r4 = syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x3f, 0x6, &(0x7f0000000b00)=[{&(0x7f0000000740)="db85d302b1e1a2077301cf65aab59a8c2c14cfe08518dda7d102a55e6a240d24114b0b9441edf6918bded6be71f3e0da3243660cbd0ed970a7841dea76eee3f0627d73557a5a50d50201be197b08d6979be83fc4160fa8cbe9c3333fe96f43d6fb258d4161e8534f28dc5871deefa26595111eea503661839f7b00193c948e2da841f1c536d59e07b46f41d44cbf8236c74b03af37adb0388d114d558bd11f0ad600edeb94e53aa733dee82362acb4dc07e57badea4ce7a25e2cd339a31ab64bcbf41aa1f678", 0xc6, 0x3}, {&(0x7f0000000840)="f77e00be391cafe943184141dc45e58aa750741496db286982bb6c575c2f1312de4fab246390f86348b70e49e10ce5f067421fb3371beeca28d5089eb7edb1375cf5de191c7ca6", 0x47, 0x100}, {&(0x7f00000008c0)="17f9af0adcea5bb3390c0059913902ccb609c5789d13c126cb6593ee897d73c3e5170ede4db93d51f18b24d6b6e85b9080289cfe70c6d475a133a257e5de025ca0f469c9be2099702a130b3a09da5aadc969e675759f9204328a1a3fa0c12215981d50cf85bda18f5508f01b2cb3b5b529389e6e216fe4b49a577af6d16102579d20317a6d5fe4d6fda2e4fd39f10cce643609338940ee5d7206d155ffdfdfb9bac21e6d4a758c1ee3bb7636fd1cbb02a907cbc41985e8ba97ac5b2264e5a8bd7356f49295304c8937cf44f178f5e70f2ea5808c127a7305c17c1e797c43e77eb0c9b3617479cb3fd8a0fd884ecf28f394068f7f12", 0xf5}, {&(0x7f00000009c0), 0x0, 0x6}, {&(0x7f0000000a00)="752a2944578cd347efc4977089705fae817e9859ec0d969dc9c4c40b7f5ee9ca7e77b362913d068d730956ee81a45a3858ff639a6192d9bb26eb7ccf46f2460421d17278b618a8a7a4274a89b7f72d207d989ea6b24dd2e40ddf67447ebbee7b32800ae180fbc416f9165f3315f672", 0x6f, 0x6}, {&(0x7f0000000a80)="c5af7538172aa3981a9a1ce176ea3e046f597bb4eadd0b2e34bc1ab93276f37ec98ba83179db7b113b322fc0caa1d7b1c22eadae70bdce5b1f582f8c34c6c380675bf13616584f91d6b00cb6debbbe599f60cb6339326740a91e3f964468f93a705c553fcd80b92f39", 0x69, 0x80000000}], 0x80, &(0x7f0000000bc0)={[{@utf8}], [{@euid_gt={'euid>', 0xee01}}, {@obj_user}, {@uid_lt}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000c40)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000e40)={r0, 0x2, 0x3, 0xfffffffffffffffe}) getsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) fcntl$getflags(0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0/file0\x00'}) pwrite64(r1, &(0x7f0000000f40)="2b7546e234fb88806618464131ace58eb29f768922192d04519d4d73e36c3c8e9b655d93a7aacc34180ae3b6ec8b71a7c73f5ab7477eff97fd7a3b53a2a106890394828b26a4e5f8b0a8cf53cf", 0x4d, 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r6, {0x7ff, 0x400000}}, './file0/file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000001000)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x6, &(0x7f00000019c0)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x8, 0x5, r8, &(0x7f0000001400)="4047d29db1fc45168a1c4a75a4ea09826e755c46248a711874d331c79641d9de634a57b4bf8d191cb950bd597086bfcfabc458c6f46b3de15688b2836a83a6daafef4c46d49e3da8e2db5c54441f57abd4b200e630258cf6f0b719ac468a4ae2cf2d69c7bebd319261", 0x69, 0x3, 0x0, 0x1, r7}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f00000014c0)="55ea7d5b6d0534194bee89e36e3eac20159619e105f073eb97e3fcc70ae192602b30b2b0d3ca9878c4172ea3e67cc83c40257068de2de17be6bb9fcf8f649c214b264866d997c66f4f4b1c0a71bf04448cddbe156e982f27c79e0e21c6ae2121692dcf63400b428ebe6d1f9a10b480ae80874fd52dc1ae2d8ee8139e661cf2fa815bc9c540c815bc1188c3a47fb57d4f062c8541d89dbab309fe5b99d5e88939daeb84cd28eb2c08c3560ae4758915831c47a60af1d66a4b702f26b0ea8cbb2dd8ddd3355bbfb42572a0dcecd1c3bbc5", 0xd0, 0x28, 0x0, 0x1, r7}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0x49, r9, &(0x7f0000001600)="d13d2eab0b11bd6ac8249559176a51f1f3621ef1edd32db36dc6c9841fe5e41d7d8b6bc1c33e9e61dec530c29262f8797172e45cb9584b173ba151bd138119da8e9853d41bbc7de1444f467a5b99b52c2edd35f24b3e8daeaa026389705702bec73161b6752232bc4a2a35c6aca6d1c938809e38a2d7445d2e3ea5f0fc616f8c6eb513f1f93130b634d3df21ee4b37ccfdf65c1b569cabee3fee54740826a0dba6a79fa774bc28495049f77fc522f53e9c54df4e87fbebb7a0986344cbda109e2cb1e751c4741b47b546b1cd34026018e26042aab7", 0xd5, 0x0, 0x0, 0x3, r6}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x5, 0xc7fb, r1, &(0x7f0000001740)="2d7d11e0abf241e2f7bf144c72c3b1db3bd5314c5ab492eae5002779847f0c9ab43e6ccb381f558e9c3027c3a7e561d6451a45530f2b5a060ea1ac183179de6adb766dc91a137004c3712ae06b2cef9faa8a4a3a26648a7c388e71a235906d98d8a936512960b916b9113417580dd2027ce95468d11b9c5c8cd22422b839a294fdd79441d37418ec55036344be10975e1564d0f3e1c6ecf70b495f14784cb37e9a", 0xa1, 0x6aa5, 0x0, 0x3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x7, r5, &(0x7f0000001840)="adcdbf2f83bbe1a8a00ac0741762738839053d52917e8c708f656274fdba669ee7082da16ff07f327cf38aff1324db7867a6b071d04e1c31dad53dedd2bec7cf141ad446fcad7462d9d195d164e2bee390d80838", 0x54, 0xffffffffffffd112, 0x0, 0x1}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x6, 0x8f66, r2, &(0x7f0000001940)="446bfa8fc8c297dcead4c6795086437560450dc11c32d8fedd8f38a3d213302c50acaffd", 0x24, 0x5, 0x0, 0x2}]) [ 73.400024] audit: type=1400 audit(1663186910.427:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:21:50 executing program 3: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x7ff, 0x58ee44c5, 0x1}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x311000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={r0, 0x400, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000840)={0x0, 0x211e}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c40)={r2, 0x38000000000, 0x81e7}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000001040)={0x1, 0x6, 0x2, 0xe3, 0x1, [{0x6, 0x6, 0x7, '\x00', 0x200}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000010c0)={r0, 0xab, 0x1}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r4 = openat$cgroup_subtree(r1, &(0x7f00000014c0), 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001500)={{r4}, {@void, @actul_num={@val=0x2d, 0x67, 0x4d}}}) r5 = openat(r1, &(0x7f0000001540)='./file0\x00', 0x200100, 0x10) openat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x40200, 0x110) fcntl$setownex(r1, 0xf, &(0x7f00000015c0)={0x1, 0xffffffffffffffff}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = syz_open_dev$usbmon(&(0x7f0000001600), 0x7, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000001640)) r8 = openat$cgroup_int(r5, &(0x7f0000001680)='cpu.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f00000016c0)={r3, 0x1, 0x6}) r9 = fork() fcntl$setownex(r6, 0xf, &(0x7f0000001ac0)={0x0, r9}) 20:21:50 executing program 4: r0 = eventfd(0x7f) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x6, 0x7, r1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat2(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400, 0xc0, 0x8}, 0x18) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x4004) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x7) openat(r2, &(0x7f0000000280)='./file0\x00', 0x941, 0x4) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x44000, 0x0) r5 = socket(0xa, 0xa, 0x6) sendfile(r4, r5, &(0x7f0000000300)=0x5, 0x6) recvmsg$unix(r3, &(0x7f0000001780)={&(0x7f0000000340), 0x6e, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/43, 0x2b}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x6, &(0x7f00000016c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x101) ioctl$KDGKBMETA(r8, 0x4b62, &(0x7f00000017c0)) ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f0000001800)) ioctl$RNDGETENTCNT(r9, 0x80045200, &(0x7f0000001840)) write$binfmt_script(r7, &(0x7f0000001880)={'#! ', './file1', [{0x20, '/dev/urandom\x00'}, {}, {0x20, '/dev/urandom\x00'}], 0xa, "01186a41c8f750f2a0584ee41189cfb4c183639b2b85e2fcc4bcefb3662d6e2912607eac2aa2bfc20512067d959e3abe07ba7a96c6ff9171589ce08d2b89beeacc43a43491848a2dd9"}, 0x71) write$cgroup_subtree(r6, &(0x7f0000001900)={[{0x2b, 'rlimit'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'devices'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'net_cls'}]}, 0x46) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000001980)={{0x6, 0xfffff000}, 0x100, './file1\x00'}) 20:21:50 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/51, 0x33}], 0x9, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/54, 0x36}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/30, 0x1e}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000002880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xa8}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/100, 0x64}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)=""/119, 0x77}], 0x3, &(0x7f0000002b40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xd8}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002cc0)=""/167, 0xa7}, {&(0x7f0000002d80)=""/109, 0x6d}], 0x2, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xf8}}, {{&(0x7f0000002f40)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000002fc0)=""/63, 0x3f}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/114, 0x72}, {&(0x7f0000004080)=""/159, 0x9f}, {&(0x7f0000004140)=""/205, 0xcd}, {&(0x7f0000004240)=""/156, 0x9c}, {&(0x7f0000004300)=""/149, 0x95}, {&(0x7f00000043c0)=""/204, 0xcc}], 0x8, &(0x7f0000004540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}}], 0x5, 0x40000000, &(0x7f00000046c0)={0x77359400}) r48 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004740)='sched\x00') mount_setattr(r39, &(0x7f0000004700)='./file0\x00', 0x0, &(0x7f0000004780)={0x70, 0x75, 0x100000, {r48}}, 0x20) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000047c0)={0x0, 0x0, 0x0, [0x9, 0x3f, 0xffff, 0xc0, 0x4], [0x3f, 0x6, 0x800, 0x30, 0x8, 0x0, 0x3, 0x5, 0x6, 0x101, 0x1, 0x1, 0x1, 0xffffffffffff6e53, 0x1, 0x856b, 0x101, 0x3, 0x5b8, 0xf6f, 0x3, 0xfffffffffffffff9, 0x9, 0x6, 0x9, 0xff, 0x7, 0x8, 0xdf, 0xff, 0x100, 0x1ac98d7b, 0x7, 0x3, 0x7, 0x5, 0x3, 0x1, 0x3ff, 0x7, 0x6, 0x40, 0xb1fc, 0x321f, 0x7ff, 0x6, 0xfffffffffffffff8, 0x0, 0x2, 0xf489, 0x8, 0x1e2d, 0x2, 0x8, 0x2, 0xfffffffffffffd67, 0x85c, 0xc0c, 0xffffffffffffffe3, 0x7, 0x1, 0xfffffffffffffeff, 0x8, 0x101, 0x3, 0xfffffffffffffffd, 0x9f, 0xfffffffffffffffd, 0x632, 0x5, 0x9, 0x8, 0xffff, 0x8001, 0x8001, 0x100000000, 0x2, 0x1000, 0x20, 0x8000000000000000, 0xffffffff, 0x10000, 0xf11f, 0x0, 0x5, 0x4, 0x0, 0x8, 0x40, 0xaf44, 0xf0, 0x101, 0x0, 0x4, 0x80000001, 0x3, 0x0, 0x4, 0x7, 0x3ff, 0x10001, 0x10000, 0x800000000000000, 0x8, 0x3ed, 0x1, 0x7, 0x7866, 0xffffffff, 0x7, 0x7ff, 0x8, 0x1000, 0x0, 0x8, 0x80, 0x8, 0x7, 0x5, 0x10000, 0x9]}) r49 = dup(r27) r50 = fsmount(r49, 0x0, 0x84) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000005280)={0x0}, &(0x7f00000052c0)=0xc) r52 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005300), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000005340)={{0x1, 0x1, 0x18, r32, {r15, r41}}, './file0\x00'}) r54 = gettid() getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f00000053c0)={0x0, 0x0}, &(0x7f0000005400)=0xc) r56 = syz_open_dev$rtc(&(0x7f0000005440), 0x10001, 0x80) r57 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f00000054c0)='./file0\x00', &(0x7f0000005500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r59 = epoll_create(0x2) recvmsg$unix(r34, &(0x7f0000005b40)={&(0x7f0000005880)=@abs, 0x6e, &(0x7f0000005a00)=[{&(0x7f0000005900)=""/196, 0xc4}], 0x1, &(0x7f0000005a40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x20) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007440)=[{{&(0x7f0000005b80), 0x6e, &(0x7f0000005e00)=[{&(0x7f0000005c00)=""/12, 0xc}, {&(0x7f0000005c40)=""/170, 0xaa}, {&(0x7f0000005d00)=""/211, 0xd3}], 0x3, &(0x7f0000005e40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000005f40), 0x6e, &(0x7f0000006040)=[{&(0x7f0000005fc0)=""/124, 0x7c}], 0x1, &(0x7f0000006080)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000006100)=@abs, 0x6e, &(0x7f0000007300)=[{&(0x7f0000006180)=""/81, 0x51}, {&(0x7f0000006200)=""/14, 0xe}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000007240)=""/142, 0x8e}], 0x4, &(0x7f0000007340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}], 0x3, 0x10000, &(0x7f0000007500)={0x0, 0x3938700}) sendmmsg$unix(r23, &(0x7f0000012980)=[{{&(0x7f0000004c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000004c80)="29192b46a2d7a74e6e50dc36b405349340c1f5898ec6f35345642a5f2adffc2afea99512cd7a699c6942e2923c8ccdec76e392c8d5060c7bf5923e560df97b14e0333ea9b47e4c55f5ffb3aa605849bbfc921aefc76b600e61b9169d8e521b1cad1fdcaed1596b7fc4fb7f98a02b", 0x6e}], 0x1, &(0x7f0000004d40)=[@rights={{0x2c, 0x1, 0x1, [r28, 0xffffffffffffffff, r26, r5, r35, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r50]}}], 0x48, 0x4000000}}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000004dc0)="afa939c9964bbf63833a67cf5e9c7fe4558ca494392269144212fed49a12de8efe333219626cf1f3749d4c0d2e6fd13e897429aa60300c457fbe981b9831e7a32f2e2d8040ce7409f9199a6a29748e24801f8610ec28908f34b744a7f00371d0538df268621126d2f5f91d5f9dde993335a8e4f040fac819cd364c9fbdf2a952aa1dfd1b8be39210610f2112a371bb458dbcfa1a1700afc1c4f97de27e577cab5bfa540949610d489b0bda8def998172bff8a0f164a0cae5f15bab3feedeed585af2b61c2ec4b990013c015717caa4c807a9b69cb87bfbb03dd0d75b", 0xdc}, {&(0x7f0000004ec0)="3df104e565738be79d038600b75a13aaeae755abc95800ff2f2b2938fb79223dcaf38489094be694ac564975903a6f212b578fb650c6f9cfe156e6c0c284e68f2c45e1a7884c1ae80ee5fdc045e011bfa48030583d1735631e5fc873c5198f68e5343545e45356c847631f33fa34892d8baf468aaf699923977998b6a17dedb3b3c0f840e2cef1f11a4f810209287150d579ddbdcbcca85c19f3412c14c5", 0x9e}, {&(0x7f0000004f80)="a44252d9d5463943d2fa9dec9a764289c0d33729622eba3a5fcf60fe495876f0d9ce7ef0a3a6c7a315095da742a83779d559a3ea1c17db76e5044dbd202c254f5e36db33b93aa7d761e6edea95fbd8696c3a26f4c6e24306e5f63b", 0x5b}, {&(0x7f0000005000)="23ee83033cd08b7fe65cbe9e8aeef9614dba599e24c11344e5521dc882804ffb3fbdf0f119e95fde77fe2d9804dc928fcca9f8d4ecd054ef2ab60397a0a4bdae8a2ba3fdc8e5534821fab32d6729652089de121e06af00b3c97abf94e38bab056b707eb7b5dc4174a3f837dbaa5fc14445d875bf2ae9fb84", 0x78}, {&(0x7f0000005080)="cb0bded3b565dc35e90f21fa29fca6d1e068153efdd10940648c7a043806342c4d569d1c07004e09abf61f38bd9cd1b73f4e5b83974850d0cdecb209e18bb8016b15351d821971b8ed5478f7d637b453f93a8973d87cf70f5fde6b183336fb5a5ab14eaab3798a06c7c205fc42ead1700264eb9cb9605bf843261b2e8153750dad85abdc3e4d82866956b1d7", 0x8c}, {&(0x7f0000005140)="150709df27bdbdb1ab7e1e53d13b41aa563c810845750da9b4aea86d23218d805ef7557219d16dffb691e27e8a2ac46859d8d7f3bb7fe8269caff11b940d7f2bf305efb76f627791d5599a81604ef95fca8b893a25035d7be3f7837a3be750cd01c04c3e9f55f053c629810edc41a4ce226fd72382ff0f385dffc875d08f3002cb025c464ef5e1bd6ceb39d61bca0a538c92a2ecfbcd2917eae8ecd995ec46eb31ed9336", 0xa4}], 0x6, &(0x7f0000005580)=[@cred={{0x1c, 0x1, 0x2, {r51, r15, r10}}}, @cred={{0x1c, 0x1, 0x2, {r46, r31, r47}}}, @rights={{0x28, 0x1, 0x1, [r19, r52, r20, r16, r2, r37]}}, @cred={{0x1c, 0x1, 0x2, {r14, r11, r53}}}, @cred={{0x1c, 0x1, 0x2, {r54, r55, r43}}}, @rights={{0x18, 0x1, 0x1, [r24, r56]}}, @cred={{0x1c, 0x1, 0x2, {r44, r57, r58}}}, @rights={{0x14, 0x1, 0x1, [r59]}}], 0xf8, 0x4000}}, {{&(0x7f0000005680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005840)=[{&(0x7f0000005700)="ff782ab495bdf65e9587f531933ab066028e772b07f5aac55d95076fcf0875ea97512fff9a190f5badf31e0ca70fd4d4f29faa3d1670beb8747b10f17c296d2b0ee2afee44fc78b365fa6242f201f47f5ebff8a91c7264c275dcb84ca19866ebf7596ea7dec972285e9d0ab2bd99a93e1a07e99b7544b7fe65642ae52639398923167b6c69f5dd56b632db179c8f490a2fe10b6a008e33ba6bd3d4dd2c69c6cc5418942c6d1354b9421a6b27c6b7", 0xae}, {&(0x7f00000057c0)="0cc6bd6922f20626cf3cf3b71fb81829612fe0e1932fec9d8061f1614ed233a21ba6df601ab48d555f332c4d7068670aa95c8d42c8f2866d38672946c43f22cae4873ebc39fb84c907f806ddf7fcf8cea001b00548c3996948a4fdc893f0e766769fb6f1850d380b", 0x68}], 0x2, &(0x7f0000007540)=[@cred={{0x1c, 0x1, 0x2, {r6, r15, r8}}}, @cred={{0x1c, 0x1, 0x2, {r46, r60, r61}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r42, r41}}}], 0x60, 0x4000}}, {{&(0x7f00000075c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000079c0)=[{&(0x7f0000007640)="f130fc3d1d09c9e877144c31faeafb318cbc4cbb99db0f32cec429f4b80f27305056663d58480fc01cbfcf829201d77ef154d1bf8ae493952183d392bccf9d09a155187869449e27d6cc682ad6c2625235fd7babc59b9b25964f4ef2461764db016b548990a09eeba7f9161b7b22bb6f6b90267b490cb766ba3b44dd36e527938e69aa583411dd6d909534a8826f092ce223771aace0d20c5447b243ae8f7bd6c753b966b77376d72b42eec9dfb26c02", 0xb0}, {&(0x7f0000007700)="88c41943828574713c86dd0ac80a7695a7b2ade560d735d57181da5105a4e22c43a26bf9d701b7cfb37c75d1264d70f0bc61dbae76ad8aa34642f37e3355d359b5f9ed7270461aa1e14e50771f4fc0ea04f89adaf93a7331bd0c34404a1b18f7b3c0cb71d6af347d6e2400", 0x6b}, {&(0x7f0000007780)="80746b74b1047161aea6bc23a5ada79242b8b40f8cea2a67fb1fe936205737b11da24128f2ee3df2afc59c85433dd671ca9bddb78b0e82ae1588a2265a8c694b3bdb73a7bd693b27475496b6df81ad7fff33e8797807148b5deb9b29b32dad01ae4837145e4c79efba5ab4967439", 0x6e}, {&(0x7f0000007800)="b58cfec0266a22d5996c0daec61887c6568ed51bd4e5cac7921e71ff00cfe46a97ab052af1bc5889c7b2f0c728cb952092123d9c5c53be6d009106846404a35b35bceccd0e7bf966a9e8cdb99f68d5afba38230f160473d4a8a6bad72b34638bbb39255657021f7af1a34d497035addca3f499bc7a3dc50f3cbb773ba2a2135e0cadf2fe0368f0e281e4af74ce70b9c611259290e38d301ef9f4dae6239c95f1a8c6f6d3e323abb1134385241f6965b8f29bf79ec79acbba16b6f5829b39f54c5070c7099835019c674099b5f32e066d07b8e781748696fa47828d218c192697f7744eb7ef3700503b0da6dd10d104e53c8c", 0xf2}, {&(0x7f0000007900)="23d35ae07d9d01321e01d26ed21ca7f46efcc34c1684347eda889a6a1fd09ce8fc378b006f2f6f01fb1603721b2971406b3518bad836d6da", 0x38}, {&(0x7f0000007940)="f3284ba41698b66fa543d4ac36935cbc9cdb1ff402168f034a37762e17f26e4db36acec93b9f112d0f2c57d6e5828b4cca6719f61b6a4b2517", 0x39}, {&(0x7f0000007980)="adf2881cf272ac9b2e83440d44d056b94c4f2e1964680edd3e00b2374cc2988203ad19a905bf5bd75fdb9ec55302bf01797252e60a", 0x35}], 0x7, &(0x7f0000010180)=[@cred={{0x1c, 0x1, 0x2, {r30, r9}}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r37, 0xffffffffffffffff, r13, 0xffffffffffffffff, r36, r12]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r40, r45, r17, r22]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r26, 0xffffffffffffffff, r18]}}, @rights={{0x1c, 0x1, 0x1, [r4, r25, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r10}}}], 0x130, 0x4000880}}, {{&(0x7f00000102c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000010480)=[{&(0x7f0000010340)="33c54a8fa889f488f9e7755d30b5a7825734725ff5daa68be54ba80117063ec955ed7485153a3792032a", 0x2a}, {&(0x7f0000010380)="4e37eaf23413a1b34bbae6320cae2cc1284db53a8bf9f5d1f111450f5d74a342b5312ebab88411d05ac8f4ecc13d2de0522a7aec7f2149739d93038f914e08b9eb267c0cdba45e7b95a2b91d87f2db8e4e5ec8db0f200e0a95428eed9c689ca990f59826842d2fdbd9534fbabc93008e799809845c86e4762ccc800ce2ad8a1a112144701f", 0x85}, {&(0x7f0000010440)="ab075f45dde4cb9ec6d8720fa538be9453648167c1744819f6667955ba98e068464a345c1647a6ce68370c64f7bfd3120a4c86d4", 0x34}], 0x3, &(0x7f0000010d80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r29}}}, @cred={{0x1c, 0x1, 0x2, {r30}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, r43}}}, @rights={{0x20, 0x1, 0x1, [r20, 0xffffffffffffffff, r33, r21]}}], 0x80, 0x2000001c}}, {{&(0x7f0000010e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000011080)=[{&(0x7f0000010e80)="e311442ca18d794fae7cfc9fab15683115ef0e6ed21f250eed85558fd2521abcfa95c6148cbaa4a7877077ab2cc536238fb401a1cb20c5f982c3b3131a170d42dbff0310965502b7d7279f9ddb335077388d5713db", 0x55}, {&(0x7f0000010f00)="2b78855b29a53689a946bd0ad0d9e4cd2245c670967bc5f8425696d6bd4427cd39dea4516b7f7f3bf62ee7ec520843ec82263711551a19805bb850e4fbe7984b985dabd0e59605dc1f34092468fcfcd1", 0x50}, {&(0x7f0000010f80)="4c3b0379221b22fc007be7341d2411229eea441d3f17af69b0dfda28f26a30ca55573df5235f874d49352a45f492bc2825b0486b72ba8f799aa5e562f7769121ba90a3e3b5fdac0469bc16adcdd280d4d4988af7137f3b7a3df775e6df13ada765520880f1a49eced82c3007115832d98284214235b221d1bcf8ec3047525da5dc0506fe211c3f72abdf2a817c199716af6ac0199aa5f67675eae5162b72d77d4cf3835e587638154bb765be39c33b1e5f71ed3e9dfd0c83b243dde06b69", 0xbe}, {&(0x7f0000011040)="c9c6cf1eec11fe7fbdef1a69155f23578af2a57dc4322dd06a8bd65ddb1034844212ba1318df08", 0x27}], 0x4, 0x0, 0x0, 0x4c000}}, {{0x0, 0x0, &(0x7f0000011140)=[{&(0x7f00000110c0)="cf28b35ab939fea220f73cf679004ef3cf1589dbfebd76a25627f6e0fc2bedfa9432b2533f8da5413e24daf6f60925ef93310dc9279b811ddb43f94cb2ee1ca9ef55d49d51c00ef0483e4acb81af2b72e8f8d8d3a54ffa2a768b85846477754600c65b971fbb7712afb9b15c", 0x6c}], 0x1, &(0x7f0000012940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r27, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x44000}}], 0x7, 0x1) 20:21:50 executing program 6: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="79b811f7a82efa879dab6c04a192bfd667e54d26846f70f00450b5cdadd595e765e15edc559c903664c311d9b85fb4d937a9732175492f7d0170e66f05b631fe2db7cbebf9166edcbf8214a9ee837cc5cd087476e0bfa675e693ecb927adee7ff5ac2c5616849da53a0f601adc499499f9527141f4b82d091060a412495d8fdabe927f0d677ea6fd515786d3ee7cb68073e5c000667ed6a13c55f42c887a2ec54a4cefa0cbfc5b6c210d7a293b2a5af66f3dec3b07a35f346b51402af65f", 0xbe, 0x4}, {&(0x7f0000000140)="682c97aa0a297f41a026ac1e0a7c1cf5ac4e17cd58350d0a89cc2e66fdc35fa3429c5da402ba3b721c5992d69511d07c17501d34f4939b079d04c2d7ae2e877f16115d1e083a4a9c2a6f8c4b98779cace4c2ae2c68300d7a02db5013982757b500c62b52adbcc14aab5f978bdec5cd9967ba9628bc3e0e469a6186766adfdb081fd2b4806c282b505bf5d7b94df979dd2a024ae28557114eb8d49bf697d8921899ff1006b9921f42", 0xa8, 0x1ff}, {&(0x7f0000000200)="fde5d1e3d50ffcb06c1a4e6d4b0dba55dca24b10e73dc4e6effb95826f06b9e7d79e7decc200d9e95c67af2f407c10dd55c00b811c1f75ac3fd4311b68c1d8a881c2a58904566fad84cddce549aeb1866986bca9f665029c77c6731c86f81ea014767de1140d2288a838f2fdcdd488ebe75fe95e16c6cdb5fd47a2aee5fb24f864ba253e9b08e56f15469d524584af52c017a6c7145dbe62a4ec198d2b1a71dd88352b89911a3810", 0xa8, 0x4}], 0x1010002, &(0x7f0000000340)={[{}, {'{{5}'}, {'&$7'}, {}, {'\\^\xa6::^,,:-\r'}, {'#/,'}], [{@obj_type={'obj_type', 0x3d, '^\''}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.#\xc4*$}'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x5d, 0x62, 0x33, 0x64, 0x31, 0x36, 0x31, 0x66], 0x2d, [0x64, 0x65, 0x30], 0x2d, [0x38, 0x36, 0x65, 0x61], 0x2d, [0x32, 0x65, 0x64, 0x63], 0x2d, [0x66, 0x34, 0x38, 0xfe, 0x61, 0x33, 0x32, 0x32]}}}]}) rmdir(&(0x7f00000003c0)='./file0\x00') setresuid(0xffffffffffffffff, 0xee00, 0xee00) r1 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) r3 = syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0x712, 0x4, &(0x7f0000000740)=[{&(0x7f0000000480)="1050cecaf7cfc59bc8db304177046313032302bd6efaa8804865070867f2876a86de08275b03fb7f5ea2d4a99c735cc8b4dbb01c7dd1eb536ffbbbada2064f2dee071ee6f00328d037000fa39c97e0289e534a", 0x53, 0xf1}, {&(0x7f0000000500)="d94c931f73a61c78a3e36957f2a5c148b6bfbb3ac859f5e6167dcd4469a3c613353a27445a1f9fa615a0910c1e95ea6b5be1924281db8ace9d8027b28e0cb9c7f9e3d54d631b5190048eece640b84b5f2f0f11a71e97a5d1fdff4b80d0ad63fd5327597a420a0fccf7d785b70d426acd3940d3919643d55f4cf4a63498d18615d5f6749814f31354622b5a6398af3cb6ad202d52069890dbf2c122ff868da769164489c1e4b5620c7be817f7", 0xac, 0xfffffffffffffe01}, {&(0x7f00000005c0)="17e228b5326987e1685b5ce8e2ec482fac93d8a70bc85ea6e154c6c089ebd67dc46aa0cec18e05b661c1c329a5dc366da3e6e28850bf1a700db042a4f96b072663e60e87082b5249f094f19d3de5232178a8b96f8b61575d69b04f812445bf6af4a67147f1f89373e97fa4b848443e28157b270b543d20517833faa89206a603015d3485511bb1e356792cb2cb6520940d09bb91760bcf416d2830160b99e484ade74188e49b10b0dcf1806ac665e3728fe016ca6377", 0xb6, 0x8}, {&(0x7f0000000680)="a7361310b3ad97dacc352c90910a9f1e630b7da3919f0f871d6af0c3b0044cbb12fee3f7c857ed04627eb7623aea007eb976bb751b7932bd9d471a1ff61b0fc4ee47ac56cae3ae287e7c2f3a8bedbda24b99d39d09ede4878fd317be3f2fdf86571e8883b6669307c706478079953267371c9ba9b8d7a20cac8789d1815120543500a7e0a58ec3ed62697681f023eef809bcd5f15ab5d322d006828b", 0x9c, 0xffffffffffffffff}], 0x30000, &(0x7f0000000900)={[{@dots}], [{@uid_lt={'uid<', r1}}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '#/,'}}, {@uid_lt={'uid<', r2}}]}) symlink(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0)='./file0\x00') r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000c80)=0x0) r6 = geteuid() r7 = syz_open_dev$mouse(&(0x7f0000005400), 0x1, 0x103240) r8 = mq_open(&(0x7f0000005440)='.#\xc4*$}', 0x2, 0x4, &(0x7f0000005480)={0x1, 0xffffffffffffff81, 0x19, 0x6}) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f00000054c0), 0x28081, 0x0) r10 = accept$inet(0xffffffffffffffff, &(0x7f0000005500)={0x2, 0x0, @broadcast}, &(0x7f0000005540)=0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000005700)={&(0x7f0000000a00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a80)="def7c7d6ba26533ea4f9612098ec739de2a03e954c4111c7c1152a24b8bd94da991f2d5073fb5744d3441aca169149fca79d511c8c721bc4b38e4aab17731d748906f856794da2696635c1e7fd74cbc04f398f6f32e9fe94181f615a2d9436a3789b4a32dce6e1c0f69f7742fd2d99c3846dcfac779b79f9a292392ff3e7c5dbe139eb63b35b8da6ba981366171783e75b63bfd4b81910e73caab26edde7507a40f970b6", 0xa4}, {&(0x7f0000000b40)="ad2a4f7ba7b32d912bc1c229e833321f6bfbcb05fc28e0af98deb86ac3d5271b9dd27a34468c40bf33b5dea771abf8796987a8d20c5577914ef2ff8c31128ada6464d3a113e93ec89a09f5e934a76e97bba3734a2a519d4cf980e4b7d55480b2b2202f1d93af5feaa2aa85fbc933eeaba55a55dcb89ac59f3f0303354b9f07d387d29057974de9d3a0737ea4da37", 0x8e}, {&(0x7f0000000c00)="dfe4f4f7bb97fc10618b10e0fca23d7e3c69e05680940eba1cbf19090a26e47c359b6252780814ea235bb73200d2f885b18310240b31e0f1b5767e41", 0x3c}], 0x3, &(0x7f0000005640)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r7, r3, r8, r9, r0, r10, r0, r0, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, 0xee01}}}], 0xa8, 0x4000080}, 0x4000801) mkdirat(r7, &(0x7f0000005740)='./file0\x00', 0x3) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000005780)) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000058c0)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005880)={&(0x7f0000005800)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) unlink(&(0x7f0000005900)='./file0\x00') 20:21:50 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x2, 0x20, 0x0, 0x4, 0x100000, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x953a0bde99bb0075}, 0x804, 0x7ff, 0x8, 0x3, 0x1c0e, 0x1918000, 0x8001, 0x0, 0x8, 0x0, 0x8}, 0x0, 0x3, r0, 0x9) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x78, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xa46b, 0x3}, 0x4, 0x0, 0x101, 0x8, 0x4, 0x4, 0x8, 0x0, 0xff8, 0x0, 0x4}, 0xffffffffffffffff, 0x5, r1, 0x1) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x8c) fchmodat(r3, &(0x7f00000001c0)='./file0\x00', 0x100) fallocate(r2, 0x49, 0x7, 0x2) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x5, 0xff, 0x7f, 0xc7, 0x0, 0x5, 0x80100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x4008, 0x32, 0x5, 0x8, 0x3111, 0x71, 0x8, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x7) connect(0xffffffffffffffff, &(0x7f00000002c0)=@in={0x2, 0x4e23, @multicast2}, 0x80) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000340)) read(r1, &(0x7f0000000380)=""/239, 0xef) r5 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x7f, 0xcc, 0x6, 0x0, 0x0, 0x7fffffff, 0x20022, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffcf, 0x2, @perf_config_ext={0x4, 0x1}, 0x1084, 0x0, 0x6, 0x3, 0x8, 0x7ff, 0x6, 0x0, 0x1f}, 0xffffffffffffffff, 0x1, r2, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000500)={0x0, r2, 0x4, 0x7, 0x7ff, 0x7}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000540)={0x0, 0x2, 0x8000000000000000}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xac}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044010}, 0x24000080) r7 = openat$incfs(r0, &(0x7f0000000740)='.pending_reads\x00', 0x2000, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4aa062da6c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "148d83d095a2967db74b65"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f037d74d0783b40872e5c92e41"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "8a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "333020e660"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3e7ac9e90a2ccb6db959eaf875"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = openat(r0, &(0x7f0000000900)='./file0\x00', 0x2000, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}}, 0xc880) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000a80)) [ 74.651118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.654408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.656729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.657630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.658230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.660843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.665054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.667515] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.668837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.672674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.674468] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.683567] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.683605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.698661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.708699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.712555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.713443] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.718783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.724841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.726080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.738316] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.760532] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.762213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.770140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.773031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.774837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.776340] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.777927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.778927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.780117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.792638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.795116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.799143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.802731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.804969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.808041] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.809460] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.810944] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.823016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.824467] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.826154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.828134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.833716] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.834844] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.847418] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.900609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.915858] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.921971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.931726] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.948050] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.967803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.970890] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.976952] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.979313] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.981021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.987518] Bluetooth: hci6: HCI_REQ-0x0c1a [ 76.735005] Bluetooth: hci1: command 0x0409 tx timeout [ 76.736643] Bluetooth: hci0: command 0x0409 tx timeout [ 76.799450] Bluetooth: hci2: command 0x0409 tx timeout [ 76.862548] Bluetooth: hci4: command 0x0409 tx timeout [ 76.863295] Bluetooth: hci3: command 0x0409 tx timeout [ 76.864026] Bluetooth: hci7: command 0x0409 tx timeout [ 77.055419] Bluetooth: hci6: command 0x0409 tx timeout [ 77.055968] Bluetooth: hci5: command 0x0409 tx timeout [ 78.782480] Bluetooth: hci0: command 0x041b tx timeout [ 78.783020] Bluetooth: hci1: command 0x041b tx timeout [ 78.846426] Bluetooth: hci2: command 0x041b tx timeout [ 78.911429] Bluetooth: hci7: command 0x041b tx timeout [ 78.911907] Bluetooth: hci3: command 0x041b tx timeout [ 78.912351] Bluetooth: hci4: command 0x041b tx timeout [ 79.102470] Bluetooth: hci5: command 0x041b tx timeout [ 79.102999] Bluetooth: hci6: command 0x041b tx timeout [ 80.830481] Bluetooth: hci1: command 0x040f tx timeout [ 80.832902] Bluetooth: hci0: command 0x040f tx timeout [ 80.894435] Bluetooth: hci2: command 0x040f tx timeout [ 80.958610] Bluetooth: hci4: command 0x040f tx timeout [ 80.962398] Bluetooth: hci3: command 0x040f tx timeout [ 80.963210] Bluetooth: hci7: command 0x040f tx timeout [ 81.150446] Bluetooth: hci6: command 0x040f tx timeout [ 81.151300] Bluetooth: hci5: command 0x040f tx timeout [ 82.879483] Bluetooth: hci0: command 0x0419 tx timeout [ 82.880048] Bluetooth: hci1: command 0x0419 tx timeout [ 82.942447] Bluetooth: hci2: command 0x0419 tx timeout [ 83.006448] Bluetooth: hci7: command 0x0419 tx timeout [ 83.007000] Bluetooth: hci3: command 0x0419 tx timeout [ 83.008677] Bluetooth: hci4: command 0x0419 tx timeout [ 83.198433] Bluetooth: hci5: command 0x0419 tx timeout [ 83.198935] Bluetooth: hci6: command 0x0419 tx timeout 20:22:44 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:22:44 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:22:45 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) [ 128.324144] loop2: detected capacity change from 0 to 264192 [ 128.353219] FAT-fs (loop2): Unrecognized mount option "euid>00000000000000060929" or missing value [ 128.431301] loop2: detected capacity change from 0 to 264192 [ 128.434860] FAT-fs (loop2): Unrecognized mount option "euid>00000000000000060929" or missing value 20:22:45 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:22:45 executing program 2: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)={0x80, {{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x4, @empty, 0x7}}]}, 0x110) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xcc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x610200, 0x101) r3 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000300)="76f7eadb70bdf60b990487a99ea7b8749b1f23e6db01ac8b861a85b1b142becfd071dc00fc", 0x25}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="d6f84dfae6f70eb82dc922f6343e3f16d1cdb447b1c7b688ec9c7175097c5341f7d22c6be713487f7ce1906c44147db0d58cd2b3f322b2bf365d6e4ce5b7538bc8b59189779d5cfe9f9d0574242d031a75d744347d4b650e633da6093ab80e0e49612026d85282e3dd444225eb9231223859ab1404636e1f17266ddffaa39e7a7905c3d1a1c7f078e5c9a4b92eae6aefac83a505d18f988d38b49beda40f41782ef2", 0xa2}, {&(0x7f0000000500)="dbee1cf2c1825061af43a614e127c5f534c4ace0be78d964ea29b2400072dd2196aecb00f79657156a9042901170f96f8e949ef0e8c905ed14794d90ce19a13358a37b0acdb32c5e7592d7f730d94d8c2cb03619a12aa4fd3017fde397dc57f9620d24e7b86b9eeb64b550153b477457467904ee1b0ea49e4c5f5eb01bf9b915da8c", 0x82}], 0x4, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x50}, 0x20008000) r4 = syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x3f, 0x6, &(0x7f0000000b00)=[{&(0x7f0000000740)="db85d302b1e1a2077301cf65aab59a8c2c14cfe08518dda7d102a55e6a240d24114b0b9441edf6918bded6be71f3e0da3243660cbd0ed970a7841dea76eee3f0627d73557a5a50d50201be197b08d6979be83fc4160fa8cbe9c3333fe96f43d6fb258d4161e8534f28dc5871deefa26595111eea503661839f7b00193c948e2da841f1c536d59e07b46f41d44cbf8236c74b03af37adb0388d114d558bd11f0ad600edeb94e53aa733dee82362acb4dc07e57badea4ce7a25e2cd339a31ab64bcbf41aa1f678", 0xc6, 0x3}, {&(0x7f0000000840)="f77e00be391cafe943184141dc45e58aa750741496db286982bb6c575c2f1312de4fab246390f86348b70e49e10ce5f067421fb3371beeca28d5089eb7edb1375cf5de191c7ca6", 0x47, 0x100}, {&(0x7f00000008c0)="17f9af0adcea5bb3390c0059913902ccb609c5789d13c126cb6593ee897d73c3e5170ede4db93d51f18b24d6b6e85b9080289cfe70c6d475a133a257e5de025ca0f469c9be2099702a130b3a09da5aadc969e675759f9204328a1a3fa0c12215981d50cf85bda18f5508f01b2cb3b5b529389e6e216fe4b49a577af6d16102579d20317a6d5fe4d6fda2e4fd39f10cce643609338940ee5d7206d155ffdfdfb9bac21e6d4a758c1ee3bb7636fd1cbb02a907cbc41985e8ba97ac5b2264e5a8bd7356f49295304c8937cf44f178f5e70f2ea5808c127a7305c17c1e797c43e77eb0c9b3617479cb3fd8a0fd884ecf28f394068f7f12", 0xf5}, {&(0x7f00000009c0), 0x0, 0x6}, {&(0x7f0000000a00)="752a2944578cd347efc4977089705fae817e9859ec0d969dc9c4c40b7f5ee9ca7e77b362913d068d730956ee81a45a3858ff639a6192d9bb26eb7ccf46f2460421d17278b618a8a7a4274a89b7f72d207d989ea6b24dd2e40ddf67447ebbee7b32800ae180fbc416f9165f3315f672", 0x6f, 0x6}, {&(0x7f0000000a80)="c5af7538172aa3981a9a1ce176ea3e046f597bb4eadd0b2e34bc1ab93276f37ec98ba83179db7b113b322fc0caa1d7b1c22eadae70bdce5b1f582f8c34c6c380675bf13616584f91d6b00cb6debbbe599f60cb6339326740a91e3f964468f93a705c553fcd80b92f39", 0x69, 0x80000000}], 0x80, &(0x7f0000000bc0)={[{@utf8}], [{@euid_gt={'euid>', 0xee01}}, {@obj_user}, {@uid_lt}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000c40)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000e40)={r0, 0x2, 0x3, 0xfffffffffffffffe}) getsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) fcntl$getflags(0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0/file0\x00'}) pwrite64(r1, &(0x7f0000000f40)="2b7546e234fb88806618464131ace58eb29f768922192d04519d4d73e36c3c8e9b655d93a7aacc34180ae3b6ec8b71a7c73f5ab7477eff97fd7a3b53a2a106890394828b26a4e5f8b0a8cf53cf", 0x4d, 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r6, {0x7ff, 0x400000}}, './file0/file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000001000)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x6, &(0x7f00000019c0)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x8, 0x5, r8, &(0x7f0000001400)="4047d29db1fc45168a1c4a75a4ea09826e755c46248a711874d331c79641d9de634a57b4bf8d191cb950bd597086bfcfabc458c6f46b3de15688b2836a83a6daafef4c46d49e3da8e2db5c54441f57abd4b200e630258cf6f0b719ac468a4ae2cf2d69c7bebd319261", 0x69, 0x3, 0x0, 0x1, r7}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f00000014c0)="55ea7d5b6d0534194bee89e36e3eac20159619e105f073eb97e3fcc70ae192602b30b2b0d3ca9878c4172ea3e67cc83c40257068de2de17be6bb9fcf8f649c214b264866d997c66f4f4b1c0a71bf04448cddbe156e982f27c79e0e21c6ae2121692dcf63400b428ebe6d1f9a10b480ae80874fd52dc1ae2d8ee8139e661cf2fa815bc9c540c815bc1188c3a47fb57d4f062c8541d89dbab309fe5b99d5e88939daeb84cd28eb2c08c3560ae4758915831c47a60af1d66a4b702f26b0ea8cbb2dd8ddd3355bbfb42572a0dcecd1c3bbc5", 0xd0, 0x28, 0x0, 0x1, r7}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0x49, r9, &(0x7f0000001600)="d13d2eab0b11bd6ac8249559176a51f1f3621ef1edd32db36dc6c9841fe5e41d7d8b6bc1c33e9e61dec530c29262f8797172e45cb9584b173ba151bd138119da8e9853d41bbc7de1444f467a5b99b52c2edd35f24b3e8daeaa026389705702bec73161b6752232bc4a2a35c6aca6d1c938809e38a2d7445d2e3ea5f0fc616f8c6eb513f1f93130b634d3df21ee4b37ccfdf65c1b569cabee3fee54740826a0dba6a79fa774bc28495049f77fc522f53e9c54df4e87fbebb7a0986344cbda109e2cb1e751c4741b47b546b1cd34026018e26042aab7", 0xd5, 0x0, 0x0, 0x3, r6}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x5, 0xc7fb, r1, &(0x7f0000001740)="2d7d11e0abf241e2f7bf144c72c3b1db3bd5314c5ab492eae5002779847f0c9ab43e6ccb381f558e9c3027c3a7e561d6451a45530f2b5a060ea1ac183179de6adb766dc91a137004c3712ae06b2cef9faa8a4a3a26648a7c388e71a235906d98d8a936512960b916b9113417580dd2027ce95468d11b9c5c8cd22422b839a294fdd79441d37418ec55036344be10975e1564d0f3e1c6ecf70b495f14784cb37e9a", 0xa1, 0x6aa5, 0x0, 0x3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x7, r5, &(0x7f0000001840)="adcdbf2f83bbe1a8a00ac0741762738839053d52917e8c708f656274fdba669ee7082da16ff07f327cf38aff1324db7867a6b071d04e1c31dad53dedd2bec7cf141ad446fcad7462d9d195d164e2bee390d80838", 0x54, 0xffffffffffffd112, 0x0, 0x1}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x6, 0x8f66, r2, &(0x7f0000001940)="446bfa8fc8c297dcead4c6795086437560450dc11c32d8fedd8f38a3d213302c50acaffd", 0x24, 0x5, 0x0, 0x2}]) [ 128.714340] loop2: detected capacity change from 0 to 264192 [ 128.736496] FAT-fs (loop2): Unrecognized mount option "euid>00000000000000060929" or missing value 20:22:45 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:22:45 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:22:46 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) [ 129.257242] audit: type=1400 audit(1663186966.284:7): avc: denied { open } for pid=3835 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.265977] audit: type=1400 audit(1663186966.293:8): avc: denied { kernel } for pid=3835 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.994302] loop6: detected capacity change from 0 to 1 [ 130.995829] nfs4: Unknown parameter '{{5}' 20:23:05 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:23:05 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x61) lseek(r0, 0x101, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x18040, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x853, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048085}, 0x8800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x7, 0x5, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x7, 0x1, 0xf40}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x77}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6b}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x78}}, 0x2400c884) r6 = dup2(r0, r1) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0x4e21, @loopback}, {0x306, @random="bc40768408b1"}, 0x1c, {0x2, 0x4e22, @rand_addr=0x64010102}, 'veth0_virt_wifi\x00'}) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000600)={0xd9, 0xcebe000, 0x4, 0x2, 0x9}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x44000) accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000800)={@private2, r8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000840)=[@window={0x3, 0xffe0, 0xfff}, @timestamp, @timestamp, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x7}, @sack_perm], 0x8) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x123081, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x81) 20:23:05 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:23:05 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:23:05 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:23:05 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:23:05 executing program 3: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x7ff, 0x58ee44c5, 0x1}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x311000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={r0, 0x400, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000840)={0x0, 0x211e}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c40)={r2, 0x38000000000, 0x81e7}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000001040)={0x1, 0x6, 0x2, 0xe3, 0x1, [{0x6, 0x6, 0x7, '\x00', 0x200}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000010c0)={r0, 0xab, 0x1}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r4 = openat$cgroup_subtree(r1, &(0x7f00000014c0), 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001500)={{r4}, {@void, @actul_num={@val=0x2d, 0x67, 0x4d}}}) r5 = openat(r1, &(0x7f0000001540)='./file0\x00', 0x200100, 0x10) openat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x40200, 0x110) fcntl$setownex(r1, 0xf, &(0x7f00000015c0)={0x1, 0xffffffffffffffff}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = syz_open_dev$usbmon(&(0x7f0000001600), 0x7, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000001640)) r8 = openat$cgroup_int(r5, &(0x7f0000001680)='cpu.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f00000016c0)={r3, 0x1, 0x6}) r9 = fork() fcntl$setownex(r6, 0xf, &(0x7f0000001ac0)={0x0, r9}) 20:23:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x20, 0x7, 0xff, 0x39, 0x0, 0x4, 0x20, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x800, 0x7, 0x5, 0x4, 0x1, 0x2, 0xfc, 0x0, 0x800, 0x0, 0x80000001}, 0x0, 0xb, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000300)={0xffffffffffffffe5, 0x2}) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) recvmsg$unix(r4, &(0x7f0000002440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2, &(0x7f0000002400)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x2002) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x88, 0x8, 0x5d, 0x4, 0x0, 0x3, 0x10, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x44000, 0x2, 0x20, 0x4, 0x40, 0x60, 0x8, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x3) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) [ 148.799827] ------------[ cut here ]------------ [ 148.799849] [ 148.799853] ====================================================== [ 148.799857] WARNING: possible circular locking dependency detected [ 148.799861] 6.0.0-rc5-next-20220914 #1 Not tainted [ 148.799868] ------------------------------------------------------ [ 148.799871] syz-executor.4/3989 is trying to acquire lock: [ 148.799878] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 148.799918] [ 148.799918] but task is already holding lock: [ 148.799921] ffff888008c3bc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 148.799950] [ 148.799950] which lock already depends on the new lock. [ 148.799950] [ 148.799953] [ 148.799953] the existing dependency chain (in reverse order) is: [ 148.799956] [ 148.799956] -> #3 (&ctx->lock){....}-{2:2}: [ 148.799971] _raw_spin_lock+0x2a/0x40 [ 148.799990] __perf_event_task_sched_out+0x53b/0x18d0 [ 148.800004] __schedule+0xedd/0x2470 [ 148.800015] schedule+0xda/0x1b0 [ 148.800025] exit_to_user_mode_prepare+0x114/0x1a0 [ 148.800048] syscall_exit_to_user_mode+0x19/0x40 [ 148.800068] do_syscall_64+0x48/0x90 [ 148.800083] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.800102] [ 148.800102] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 148.800117] _raw_spin_lock_nested+0x30/0x40 [ 148.800133] raw_spin_rq_lock_nested+0x1e/0x30 [ 148.800147] task_fork_fair+0x63/0x4d0 [ 148.800166] sched_cgroup_fork+0x3d0/0x540 [ 148.800181] copy_process+0x4183/0x6e20 [ 148.800192] kernel_clone+0xe7/0x890 [ 148.800202] user_mode_thread+0xad/0xf0 [ 148.800213] rest_init+0x24/0x250 [ 148.800232] arch_call_rest_init+0xf/0x14 [ 148.800244] start_kernel+0x4c1/0x4e6 [ 148.800255] secondary_startup_64_no_verify+0xe0/0xeb [ 148.800270] [ 148.800270] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 148.800285] _raw_spin_lock_irqsave+0x39/0x60 [ 148.800302] try_to_wake_up+0xab/0x1920 [ 148.800316] up+0x75/0xb0 [ 148.800329] __up_console_sem+0x6e/0x80 [ 148.800346] console_unlock+0x46a/0x590 [ 148.800367] con_install+0x14e/0x5d0 [ 148.800388] tty_init_dev.part.0+0xa0/0x610 [ 148.800401] tty_open+0xbc0/0x1370 [ 148.800413] chrdev_open+0x268/0x6e0 [ 148.800428] do_dentry_open+0x6ca/0x12b0 [ 148.800442] path_openat+0x19e1/0x2800 [ 148.800454] do_filp_open+0x1b6/0x410 [ 148.800467] do_sys_openat2+0x171/0x4c0 [ 148.800483] __x64_sys_openat+0x13f/0x1f0 [ 148.800499] do_syscall_64+0x3b/0x90 [ 148.800514] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.800533] [ 148.800533] -> #0 ((console_sem).lock){....}-{2:2}: [ 148.800548] __lock_acquire+0x2a02/0x5e70 [ 148.800566] lock_acquire+0x1a2/0x530 [ 148.800583] _raw_spin_lock_irqsave+0x39/0x60 [ 148.800600] down_trylock+0xe/0x70 [ 148.800614] __down_trylock_console_sem+0x3b/0xd0 [ 148.800632] vprintk_emit+0x16b/0x560 [ 148.800650] vprintk+0x84/0xa0 [ 148.800668] _printk+0xba/0xf1 [ 148.800688] report_bug.cold+0x72/0xab [ 148.800702] handle_bug+0x3c/0x70 [ 148.800716] exc_invalid_op+0x14/0x50 [ 148.800730] asm_exc_invalid_op+0x16/0x20 [ 148.800749] group_sched_out.part.0+0x2c7/0x460 [ 148.800760] ctx_sched_out+0x8f1/0xc10 [ 148.800770] __perf_event_task_sched_out+0x6d0/0x18d0 [ 148.800784] __schedule+0xedd/0x2470 [ 148.800794] schedule+0xda/0x1b0 [ 148.800805] exit_to_user_mode_prepare+0x114/0x1a0 [ 148.800826] syscall_exit_to_user_mode+0x19/0x40 [ 148.800845] do_syscall_64+0x48/0x90 [ 148.800859] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.800878] [ 148.800878] other info that might help us debug this: [ 148.800878] [ 148.800881] Chain exists of: [ 148.800881] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 148.800881] [ 148.800898] Possible unsafe locking scenario: [ 148.800898] [ 148.800900] CPU0 CPU1 [ 148.800903] ---- ---- [ 148.800905] lock(&ctx->lock); [ 148.800911] lock(&rq->__lock); [ 148.800918] lock(&ctx->lock); [ 148.800925] lock((console_sem).lock); [ 148.800931] [ 148.800931] *** DEADLOCK *** [ 148.800931] [ 148.800933] 2 locks held by syz-executor.4/3989: [ 148.800941] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 148.800969] #1: ffff888008c3bc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 148.800999] [ 148.800999] stack backtrace: [ 148.801002] CPU: 0 PID: 3989 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220914 #1 [ 148.801016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 148.801024] Call Trace: [ 148.801028] [ 148.801032] dump_stack_lvl+0x8b/0xb3 [ 148.801048] check_noncircular+0x263/0x2e0 [ 148.801067] ? format_decode+0x26c/0xb50 [ 148.801083] ? print_circular_bug+0x450/0x450 [ 148.801103] ? enable_ptr_key_workfn+0x20/0x20 [ 148.801119] ? format_decode+0x26c/0xb50 [ 148.801136] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 148.801156] __lock_acquire+0x2a02/0x5e70 [ 148.801180] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 148.801205] lock_acquire+0x1a2/0x530 [ 148.801224] ? down_trylock+0xe/0x70 [ 148.801240] ? rcu_read_unlock+0x40/0x40 [ 148.801263] ? vprintk+0x84/0xa0 [ 148.801283] _raw_spin_lock_irqsave+0x39/0x60 [ 148.801301] ? down_trylock+0xe/0x70 [ 148.801316] down_trylock+0xe/0x70 [ 148.801331] ? vprintk+0x84/0xa0 [ 148.801350] __down_trylock_console_sem+0x3b/0xd0 [ 148.801369] vprintk_emit+0x16b/0x560 [ 148.801390] vprintk+0x84/0xa0 [ 148.801410] _printk+0xba/0xf1 [ 148.801430] ? record_print_text.cold+0x16/0x16 [ 148.801455] ? report_bug.cold+0x66/0xab [ 148.801470] ? group_sched_out.part.0+0x2c7/0x460 [ 148.801483] report_bug.cold+0x72/0xab [ 148.801499] handle_bug+0x3c/0x70 [ 148.801515] exc_invalid_op+0x14/0x50 [ 148.801531] asm_exc_invalid_op+0x16/0x20 [ 148.801550] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 148.801565] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 148.801578] RSP: 0018:ffff8880417f7c48 EFLAGS: 00010006 [ 148.801588] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 148.801596] RDX: ffff88800fdeb580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 148.801604] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 148.801612] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888008c3bc00 [ 148.801621] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 148.801633] ? group_sched_out.part.0+0x2c7/0x460 [ 148.801647] ? group_sched_out.part.0+0x2c7/0x460 [ 148.801661] ctx_sched_out+0x8f1/0xc10 [ 148.801675] __perf_event_task_sched_out+0x6d0/0x18d0 [ 148.801692] ? lock_is_held_type+0xd7/0x130 [ 148.801712] ? __perf_cgroup_move+0x160/0x160 [ 148.801725] ? set_next_entity+0x304/0x550 [ 148.801745] ? update_curr+0x267/0x740 [ 148.801766] ? lock_is_held_type+0xd7/0x130 [ 148.801786] __schedule+0xedd/0x2470 [ 148.801801] ? io_schedule_timeout+0x150/0x150 [ 148.801815] ? rcu_read_lock_sched_held+0x3e/0x80 [ 148.801837] schedule+0xda/0x1b0 [ 148.801850] exit_to_user_mode_prepare+0x114/0x1a0 [ 148.801873] syscall_exit_to_user_mode+0x19/0x40 [ 148.801910] do_syscall_64+0x48/0x90 [ 148.801926] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.801945] RIP: 0033:0x7f77e76deb19 [ 148.801954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.801966] RSP: 002b:00007f77e4c54218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.801978] RAX: 0000000000000001 RBX: 00007f77e77f1f68 RCX: 00007f77e76deb19 [ 148.801986] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f77e77f1f6c [ 148.801994] RBP: 00007f77e77f1f60 R08: 000000000000000e R09: 0000000000000000 [ 148.802002] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f77e77f1f6c [ 148.802010] R13: 00007ffc3c1cf5ef R14: 00007f77e4c54300 R15: 0000000000022000 [ 148.802024] [ 148.862983] WARNING: CPU: 0 PID: 3989 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 148.863698] Modules linked in: [ 148.863951] CPU: 0 PID: 3989 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220914 #1 [ 148.864563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 148.865419] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 148.865846] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 148.867239] RSP: 0018:ffff8880417f7c48 EFLAGS: 00010006 [ 148.867637] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 148.868178] RDX: ffff88800fdeb580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 148.868721] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 148.869263] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888008c3bc00 [ 148.869797] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 148.870363] FS: 00007f77e4c54700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 148.870977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.871422] CR2: 000055555698d708 CR3: 000000000e0e2000 CR4: 0000000000350ef0 [ 148.871960] Call Trace: [ 148.872166] [ 148.872349] ctx_sched_out+0x8f1/0xc10 [ 148.872656] __perf_event_task_sched_out+0x6d0/0x18d0 [ 148.873051] ? lock_is_held_type+0xd7/0x130 [ 148.873382] ? __perf_cgroup_move+0x160/0x160 [ 148.873735] ? set_next_entity+0x304/0x550 [ 148.874076] ? update_curr+0x267/0x740 [ 148.874394] ? lock_is_held_type+0xd7/0x130 [ 148.874739] __schedule+0xedd/0x2470 [ 148.875035] ? io_schedule_timeout+0x150/0x150 [ 148.875397] ? rcu_read_lock_sched_held+0x3e/0x80 [ 148.875781] schedule+0xda/0x1b0 [ 148.876054] exit_to_user_mode_prepare+0x114/0x1a0 [ 148.876440] syscall_exit_to_user_mode+0x19/0x40 [ 148.876817] do_syscall_64+0x48/0x90 [ 148.877106] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.877510] RIP: 0033:0x7f77e76deb19 [ 148.877801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 148.879182] RSP: 002b:00007f77e4c54218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.879760] RAX: 0000000000000001 RBX: 00007f77e77f1f68 RCX: 00007f77e76deb19 [ 148.880308] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f77e77f1f6c [ 148.880839] RBP: 00007f77e77f1f60 R08: 000000000000000e R09: 0000000000000000 [ 148.881388] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f77e77f1f6c [ 148.881934] R13: 00007ffc3c1cf5ef R14: 00007f77e4c54300 R15: 0000000000022000 [ 148.882480] [ 148.882662] irq event stamp: 450 [ 148.882917] hardirqs last enabled at (449): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 148.883645] hardirqs last disabled at (450): [] __schedule+0x1225/0x2470 [ 148.884260] softirqs last enabled at (138): [] __irq_exit_rcu+0x11b/0x180 [ 148.884905] softirqs last disabled at (59): [] __irq_exit_rcu+0x11b/0x180 [ 148.885556] ---[ end trace 0000000000000000 ]--- 20:23:05 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x61) lseek(r0, 0x101, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x18040, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x853, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048085}, 0x8800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x7, 0x5, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x7, 0x1, 0xf40}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x77}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6b}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x78}}, 0x2400c884) r6 = dup2(r0, r1) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0x4e21, @loopback}, {0x306, @random="bc40768408b1"}, 0x1c, {0x2, 0x4e22, @rand_addr=0x64010102}, 'veth0_virt_wifi\x00'}) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000600)={0xd9, 0xcebe000, 0x4, 0x2, 0x9}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x44000) accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000800)={@private2, r8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000840)=[@window={0x3, 0xffe0, 0xfff}, @timestamp, @timestamp, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x7}, @sack_perm], 0x8) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x123081, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x81) 20:23:05 executing program 6: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x4645, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x50, r0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x13, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000000), 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x2400, 0x140) shutdown(r3, 0x2) 20:23:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000040)) sendfile(r4, r3, &(0x7f0000000080)=0x800000080000002, 0x5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) 20:23:05 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) [ 148.992717] loop2: detected capacity change from 0 to 40 20:23:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x61) lseek(r0, 0x101, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x18040, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x853, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048085}, 0x8800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x7, 0x5, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x7, 0x1, 0xf40}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x77}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6b}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x78}}, 0x2400c884) r6 = dup2(r0, r1) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0x4e21, @loopback}, {0x306, @random="bc40768408b1"}, 0x1c, {0x2, 0x4e22, @rand_addr=0x64010102}, 'veth0_virt_wifi\x00'}) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000600)={0xd9, 0xcebe000, 0x4, 0x2, 0x9}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x44000) accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000800)={@private2, r8}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000840)=[@window={0x3, 0xffe0, 0xfff}, @timestamp, @timestamp, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x7}, @sack_perm], 0x8) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x123081, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x81) 20:23:06 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) 20:23:06 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) [ 149.065344] syz-executor.2: attempt to access beyond end of device [ 149.065344] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 149.066299] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:23:06 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f00000003c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffe7f) [ 149.133373] hrtimer: interrupt took 17943 ns VM DIAGNOSIS: 20:23:06 Registers: info registers vcpu 0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff8880417f7698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000039 R11=0000000000000001 R12=0000000000000039 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f77e4c54700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555698d708 CR3=000000000e0e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f77e77c57c0 00007f77e77c57c8 YMM02=0000000000000000 0000000000000000 00007f77e77c57e0 00007f77e77c57c0 YMM03=0000000000000000 0000000000000000 00007f77e77c57c8 00007f77e77c57c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84263457 RDX=ffffed100d9c6f99 RSI=0000000000000004 RDI=ffff88806ce37cc0 RBP=ffff88806ce37cc0 RSP=ffff888032817a98 R8 =0000000000000000 R9 =ffff88806ce37cc3 R10=ffffed100d9c6f98 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c6f98 R14=0000000000000001 R15=1ffff11006502f54 RIP=ffffffff842634d4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555885400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f93700baf98 CR3=000000001b4e6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000