Warning: Permanently added '[localhost]:41842' (ECDSA) to the list of known hosts.
2022/09/30 20:14:06 fuzzer started
2022/09/30 20:14:06 dialing manager at localhost:40535
syzkaller login: [   43.996326] cgroup: Unknown subsys name 'net'
[   44.098422] cgroup: Unknown subsys name 'rlimit'
2022/09/30 20:14:20 syscalls: 2215
2022/09/30 20:14:20 code coverage: enabled
2022/09/30 20:14:20 comparison tracing: enabled
2022/09/30 20:14:20 extra coverage: enabled
2022/09/30 20:14:20 setuid sandbox: enabled
2022/09/30 20:14:20 namespace sandbox: enabled
2022/09/30 20:14:20 Android sandbox: enabled
2022/09/30 20:14:20 fault injection: enabled
2022/09/30 20:14:20 leak checking: enabled
2022/09/30 20:14:20 net packet injection: enabled
2022/09/30 20:14:20 net device setup: enabled
2022/09/30 20:14:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/30 20:14:20 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/30 20:14:20 USB emulation: enabled
2022/09/30 20:14:20 hci packet injection: enabled
2022/09/30 20:14:20 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929������������������������������������������)
2022/09/30 20:14:20 802.15.4 emulation: enabled
2022/09/30 20:14:20 fetching corpus: 50, signal 21828/23652 (executing program)
2022/09/30 20:14:20 fetching corpus: 100, signal 34017/37470 (executing program)
2022/09/30 20:14:20 fetching corpus: 150, signal 41243/46225 (executing program)
2022/09/30 20:14:21 fetching corpus: 200, signal 47503/53934 (executing program)
2022/09/30 20:14:21 fetching corpus: 250, signal 54135/61892 (executing program)
2022/09/30 20:14:21 fetching corpus: 300, signal 59962/68970 (executing program)
2022/09/30 20:14:21 fetching corpus: 350, signal 64161/74459 (executing program)
2022/09/30 20:14:21 fetching corpus: 400, signal 67891/79393 (executing program)
2022/09/30 20:14:21 fetching corpus: 450, signal 71095/83784 (executing program)
2022/09/30 20:14:21 fetching corpus: 500, signal 75111/88924 (executing program)
2022/09/30 20:14:22 fetching corpus: 550, signal 80054/94849 (executing program)
2022/09/30 20:14:22 fetching corpus: 600, signal 81971/97950 (executing program)
2022/09/30 20:14:22 fetching corpus: 650, signal 84447/101463 (executing program)
2022/09/30 20:14:22 fetching corpus: 700, signal 88255/106165 (executing program)
2022/09/30 20:14:22 fetching corpus: 750, signal 91311/110112 (executing program)
2022/09/30 20:14:22 fetching corpus: 800, signal 93543/113325 (executing program)
2022/09/30 20:14:22 fetching corpus: 850, signal 95682/116411 (executing program)
2022/09/30 20:14:22 fetching corpus: 900, signal 97747/119345 (executing program)
2022/09/30 20:14:23 fetching corpus: 950, signal 101410/123676 (executing program)
2022/09/30 20:14:23 fetching corpus: 1000, signal 103398/126507 (executing program)
2022/09/30 20:14:23 fetching corpus: 1050, signal 105270/129249 (executing program)
2022/09/30 20:14:23 fetching corpus: 1100, signal 106844/131686 (executing program)
2022/09/30 20:14:23 fetching corpus: 1150, signal 109550/134998 (executing program)
2022/09/30 20:14:23 fetching corpus: 1200, signal 112819/138734 (executing program)
2022/09/30 20:14:23 fetching corpus: 1250, signal 114499/141232 (executing program)
2022/09/30 20:14:23 fetching corpus: 1300, signal 115829/143364 (executing program)
2022/09/30 20:14:24 fetching corpus: 1350, signal 119690/147520 (executing program)
2022/09/30 20:14:24 fetching corpus: 1400, signal 123161/151246 (executing program)
2022/09/30 20:14:24 fetching corpus: 1450, signal 124462/153270 (executing program)
2022/09/30 20:14:24 fetching corpus: 1500, signal 126349/155742 (executing program)
2022/09/30 20:14:24 fetching corpus: 1550, signal 127843/157814 (executing program)
2022/09/30 20:14:24 fetching corpus: 1600, signal 130011/160399 (executing program)
2022/09/30 20:14:24 fetching corpus: 1650, signal 130867/162011 (executing program)
2022/09/30 20:14:24 fetching corpus: 1700, signal 132704/164290 (executing program)
2022/09/30 20:14:24 fetching corpus: 1750, signal 133750/166000 (executing program)
2022/09/30 20:14:25 fetching corpus: 1800, signal 134822/167677 (executing program)
2022/09/30 20:14:25 fetching corpus: 1850, signal 136329/169681 (executing program)
2022/09/30 20:14:25 fetching corpus: 1900, signal 137397/171315 (executing program)
2022/09/30 20:14:25 fetching corpus: 1950, signal 138671/173117 (executing program)
2022/09/30 20:14:25 fetching corpus: 2000, signal 140080/174948 (executing program)
2022/09/30 20:14:25 fetching corpus: 2050, signal 141327/176633 (executing program)
2022/09/30 20:14:25 fetching corpus: 2100, signal 142647/178385 (executing program)
2022/09/30 20:14:25 fetching corpus: 2150, signal 143440/179721 (executing program)
2022/09/30 20:14:25 fetching corpus: 2200, signal 144788/181469 (executing program)
2022/09/30 20:14:26 fetching corpus: 2250, signal 145890/182992 (executing program)
2022/09/30 20:14:26 fetching corpus: 2300, signal 147101/184524 (executing program)
2022/09/30 20:14:26 fetching corpus: 2350, signal 148166/186000 (executing program)
2022/09/30 20:14:26 fetching corpus: 2400, signal 150010/187889 (executing program)
2022/09/30 20:14:26 fetching corpus: 2450, signal 151825/189693 (executing program)
2022/09/30 20:14:26 fetching corpus: 2500, signal 152458/190863 (executing program)
2022/09/30 20:14:26 fetching corpus: 2550, signal 153403/192163 (executing program)
2022/09/30 20:14:26 fetching corpus: 2600, signal 155064/193946 (executing program)
2022/09/30 20:14:26 fetching corpus: 2650, signal 156017/195238 (executing program)
2022/09/30 20:14:27 fetching corpus: 2700, signal 156645/196338 (executing program)
2022/09/30 20:14:27 fetching corpus: 2750, signal 157865/197737 (executing program)
2022/09/30 20:14:27 fetching corpus: 2800, signal 158748/198965 (executing program)
2022/09/30 20:14:27 fetching corpus: 2850, signal 159600/200154 (executing program)
2022/09/30 20:14:27 fetching corpus: 2900, signal 160764/201479 (executing program)
2022/09/30 20:14:27 fetching corpus: 2950, signal 161468/202517 (executing program)
2022/09/30 20:14:27 fetching corpus: 3000, signal 162331/203625 (executing program)
2022/09/30 20:14:27 fetching corpus: 3050, signal 163316/204798 (executing program)
2022/09/30 20:14:27 fetching corpus: 3100, signal 164082/205917 (executing program)
2022/09/30 20:14:27 fetching corpus: 3150, signal 164893/206971 (executing program)
2022/09/30 20:14:28 fetching corpus: 3200, signal 166036/208169 (executing program)
2022/09/30 20:14:28 fetching corpus: 3250, signal 167097/209301 (executing program)
2022/09/30 20:14:28 fetching corpus: 3300, signal 167776/210266 (executing program)
2022/09/30 20:14:28 fetching corpus: 3350, signal 168420/211214 (executing program)
2022/09/30 20:14:28 fetching corpus: 3400, signal 169289/212204 (executing program)
2022/09/30 20:14:28 fetching corpus: 3450, signal 170182/213264 (executing program)
2022/09/30 20:14:28 fetching corpus: 3500, signal 170724/214123 (executing program)
2022/09/30 20:14:28 fetching corpus: 3550, signal 171585/215110 (executing program)
2022/09/30 20:14:28 fetching corpus: 3600, signal 172113/215947 (executing program)
2022/09/30 20:14:29 fetching corpus: 3650, signal 172744/216779 (executing program)
2022/09/30 20:14:29 fetching corpus: 3700, signal 173927/217767 (executing program)
2022/09/30 20:14:29 fetching corpus: 3750, signal 175040/218819 (executing program)
2022/09/30 20:14:29 fetching corpus: 3800, signal 175621/219696 (executing program)
2022/09/30 20:14:29 fetching corpus: 3850, signal 176326/220538 (executing program)
2022/09/30 20:14:29 fetching corpus: 3900, signal 176889/221328 (executing program)
2022/09/30 20:14:29 fetching corpus: 3950, signal 178026/222296 (executing program)
2022/09/30 20:14:29 fetching corpus: 4000, signal 178397/223007 (executing program)
2022/09/30 20:14:30 fetching corpus: 4050, signal 179390/223843 (executing program)
2022/09/30 20:14:30 fetching corpus: 4100, signal 180082/224611 (executing program)
2022/09/30 20:14:30 fetching corpus: 4150, signal 180797/225400 (executing program)
2022/09/30 20:14:30 fetching corpus: 4200, signal 181230/226071 (executing program)
2022/09/30 20:14:30 fetching corpus: 4250, signal 182051/226874 (executing program)
2022/09/30 20:14:30 fetching corpus: 4300, signal 182594/227567 (executing program)
2022/09/30 20:14:30 fetching corpus: 4350, signal 183405/228349 (executing program)
2022/09/30 20:14:30 fetching corpus: 4400, signal 184153/229053 (executing program)
2022/09/30 20:14:31 fetching corpus: 4450, signal 185193/229867 (executing program)
2022/09/30 20:14:31 fetching corpus: 4500, signal 185780/230493 (executing program)
2022/09/30 20:14:31 fetching corpus: 4550, signal 186404/231216 (executing program)
2022/09/30 20:14:31 fetching corpus: 4600, signal 186938/231838 (executing program)
2022/09/30 20:14:31 fetching corpus: 4650, signal 187466/232437 (executing program)
2022/09/30 20:14:31 fetching corpus: 4700, signal 188014/233113 (executing program)
2022/09/30 20:14:31 fetching corpus: 4750, signal 188726/233797 (executing program)
2022/09/30 20:14:31 fetching corpus: 4800, signal 189049/234338 (executing program)
2022/09/30 20:14:31 fetching corpus: 4850, signal 189730/234957 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/235599 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/236049 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/236520 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/236993 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/237495 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/237943 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/238392 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/238858 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/239316 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/239806 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/240284 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/240728 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/241215 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/241702 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/242126 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/242530 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/242974 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/243432 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/243890 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/244361 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/244796 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/245254 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/245711 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/246119 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/246263 (executing program)
2022/09/30 20:14:32 fetching corpus: 4874, signal 190746/246263 (executing program)
2022/09/30 20:14:34 starting 8 fuzzer processes
20:14:34 executing program 0:
r0 = socket$inet(0x2, 0x6, 0x4416)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x4}}, './file0\x00'})
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x6, @multicast}, 0x30, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 'syzkaller1\x00'})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x40)
accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10)
getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4)
clone3(&(0x7f0000000540)={0x200000000, &(0x7f0000000340), &(0x7f0000000380)=<r4=>0x0, &(0x7f00000003c0), {0x2c}, &(0x7f0000000400)=""/129, 0x81, &(0x7f00000004c0), &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xe1, 0x6, 0x16, 0x7, 0x0, 0x8, 0x70c8, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000280), 0xd}, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, 0x4}, r4, 0x6, r5, 0xa)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0)
fsetxattr$security_capability(r6, &(0x7f0000000640), &(0x7f0000000680)=@v3={0x3000000, [{0x77f, 0x4}, {0x9, 0x2}]}, 0x18, 0x1)
openat$cgroup_subtree(r6, &(0x7f00000006c0), 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000740)={0x60, 0x8})
r7 = socket$inet6(0xa, 0xa, 0x4)
r8 = syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x1000, 0x5, &(0x7f0000001a80)=[{&(0x7f0000000800)="c0b2f65275b0e0265bc71dff69188ba4624bf16185e7e55443268c8820fd1a097d96d3d0789491d352e1bb5d7996d70b4527ebbd32c99aef7366c12723ea0f8a768f8f2bcafc0f4a9db765daa0", 0x4d, 0xe1b}, {&(0x7f0000000880)="ebe98cd15ced9e76eb17e8221876b1e924bc81138e01e06aa8f0037408f7291fad9185bb37239932db1aab0a89cd09e66af5d1c53c27eadb25c01b84280812b51ebfa5e6129f615741e0eaf20547613ab9026988b2ddc6ca59a3edf3879a4becc837ceb9222e7c1af008dd956bc20f189076a26420f2558efefd5457cac59e866f172f0fbddbf4316d8d59cfcb19057ffeb3302ecaf0e1de9ca91a4e965de380dc0c9ca3", 0xa4, 0x8}, {&(0x7f0000000940)="0a38505f195a90ed5dfaf66c9c35169584000103399fc99955c7890e06c03d4dab6a2d86845eb0a0521cebdc61a67b5f65a71115f7dff88022b3157440612a86d636f5c5de60e9edf1b869948d5f3d530323a64ccc4810313621", 0x5a, 0x6}, {&(0x7f00000009c0)="004c409bd0d37f9e2021539f4f7eb1104fb3c52eeb73ba68dedec5308f72c225fa65520b1c60bb1929a2ee8b47067523152e020f6c2277148cdbb55c05a8fef16f02ca70c80f0c60b69c1d1e76dfdbd67e832053637b4902c4205a7862280a690d88a5611121056b39a85bc689e6e95a774c88405d5d6ee355199c101bc561719f51ed757fd6545eda0fd32396ba421857bf356ed710516a4de17851fe4a48eb5b", 0xa1, 0x5}, {&(0x7f0000000a80)="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", 0x1000, 0xde8}], 0x2504000, &(0x7f0000001b00)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xee01}}, {@nojoliet}, {@map_off}, {@gid={'gid', 0x3d, 0xee00}}, {@session={'session', 0x3d, 0x3}}], [{@seclabel}]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000001c40)={{r8}, 0x0, 0x6, @inherit={0x70, &(0x7f0000001bc0)={0x1, 0x5, 0x3, 0x5, {0x10, 0x3f, 0x101, 0x6, 0x6f7bc812}, [0x1, 0x1, 0x39cf, 0x7fff, 0x20]}}, @subvolid=0xfff})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000002c40)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, {0x4}}, './file0/file0\x00'})
getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000002c80)={@loopback, @local}, &(0x7f0000002cc0)=0xc)

20:14:34 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x88c0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3f71}, {0x6, 0x11, 0x4c74}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x992a}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f5, 0x0, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8090}, 0x90)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8c7333d600"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5f7dfb0e55"}, @NL80211_KEY_SEQ={0x9, 0x4, "da9e926527"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "778ef9fff8"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0xb01, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="99ac9c21aecc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f640dac3d9f1ff94a43f71f89848899d"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="daac6a206c6a776b"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="b7bc4c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x4000000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000000)
r5 = open_tree(r0, &(0x7f0000000a00)='./file0\x00', 0x801)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x8}}, './file0\x00'})
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0xb, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20060811}, 0x8004)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x53}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
r7 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x9, 0x191001)
sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xca}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4008004)

20:14:34 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x3}, {}, 0x1, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="86df88b8e5114cada4d86d1fd368d5f02287be996fff6f738bdd5a1795eeabb040e47362525bc9b8f7782953740226ef7774732a0360737a6afac1c9a845c37e8272bdfa1d6f41f92236f4188034dec6f3920464a2319e3e9a2010d0762ef1fa6a4c07c214437f6ef50be0d0789d12453a1125402d52462ee60bca7945bc24a07e2d639a00d1cfe36211cb1aabde009d773ccea13fad874e60", 0x99, 0x0, &(0x7f00000001c0)={0x2, 0xab, {0x0, 0xc, 0x10, "a9421999bd16e39bf0758aa19148b427", 0x8e, "34ace0b1272ea39f92a03b5dae8aca330b2e350c190191ba2f0312bdd38bd33c45a3c7d063f14016fc150239f868a20a58506c196f5d7b0f6ecc66771b671e2b7ec5f44d541c89ec1c389de3368463ad405bde1bbf2d800e4383930a4c9dacdd6ca9b8a817566b897950e1274c3215e8fe77253a1bbe4dcb61af65dcd8e33d8af94d778d59e23fc5e57c3826ca86"}, 0x55, "cbd4c93f1ea695ebe01f4ac5435ebc0a332d28da04bbda197af35fa3640c8e1948d5af3f9a20c6d65933a1b0e987ca9e1b0a2b26f9974539a054396846c51e22be424ef5976d04644b1e352155411f3622840f9fed"}, 0x10c})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0)
pwrite64(r2, &(0x7f00000003c0)="3fc25cb66e5e174f19f6045a3c0b7cf09765383d1600017d2a82fbaa73fc98d10974a407d174f74c8c4e92a84101da983a1a4fe1f9dc474e8d059628052c4a5fa753ad4cb0022edfc596c807f5bfd8822892605d95314556d61d76b5674986da2cdaccafcbadd3d16036eb51f66f02d0637b7485d67274eb827eb8da62a3db222484a0978c238d067dd0f7975eed781ea47a35d8db6167cb67602b471122b4543c00bf8dc9d7e7cdab60b3eca77f5819c93d44c2183f7487a99447394e5c359486944cb2b7d51eb226fe20edef214d602a6c3d006d65f4def1106f8d14566057bd39914cc1a2c26f0168c62df363", 0xee, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r3=>r1, {0xbebc}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r2)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xec, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0xc000)
openat$cgroup(r0, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0)
r5 = signalfd4(r1, &(0x7f0000000740)={[0xfffffffffffffff8]}, 0x8, 0x800)
r6 = syz_io_uring_setup(0xc4, &(0x7f0000000780)={0x0, 0xbac5, 0x1, 0x0, 0x1bd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000800)=<r7=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r7, 0x0, &(0x7f0000000880)=@IORING_OP_NOP={0x0, 0x6}, 0x7f)
syz_io_uring_setup(0x40b2, &(0x7f00000008c0)={0x0, 0xe603, 0x10, 0x2, 0xca}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000940), &(0x7f0000000980))
syz_io_uring_setup(0x1b5c, &(0x7f00000009c0)={0x0, 0xd6e3, 0x0, 0x0, 0x1bb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000a40)=<r8=>0x0, &(0x7f0000000a80)=<r9=>0x0)
syz_io_uring_submit(r7, r9, &(0x7f0000000ac0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x80000000)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b00)='sessionid\x00')
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10)
syz_io_uring_setup(0x5ff2, &(0x7f0000000c40)={0x0, 0xa24a, 0x73aa96a6d0e9f37f, 0x0, 0x3ca, 0x0, r10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000cc0), &(0x7f0000000d00)=<r11=>0x0)
syz_io_uring_submit(r8, r11, &(0x7f0000000d40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r5, 0x4, {0x0, r5}, 0x5, 0x6, 0x1, {0x0, 0x0, r6}}, 0xbb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x10, 0xffffffffffffffff, 0x0)

20:14:34 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0xff, 0xffffffff, 0x85b5, 0x3485f92f, 0x2, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0xb5, 0x1, 'client1\x00', 0xffffffff80000000, "b313ab9ce7cccf2d", "d20fd6d7e1ab1744e4d793eadff57b520477f7d1f17b67075ba46778d8fc04c6", 0x3, 0x4})
syncfs(0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000100)=0x2000000000000000)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x20040, 0x0)
mount_setattr(r0, &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000200)={0x2, 0x100000, 0x20000}, 0x20)
ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000240)={0x3, 0x6})
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r1}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x7}}, './file1\x00'})
openat(r3, &(0x7f0000000300)='./file1\x00', 0x0, 0x30)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000340))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/mem', 0x280, 0x158)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000003c0)={{0x2, 0x2}, 'port1\x00', 0x2, 0xa1c40, 0x3, 0x5, 0xfffffffc, 0x1000, 0x0, 0x0, 0x2, 0x1})
ppoll(&(0x7f0000000480)=[{r1, 0x400a}], 0x1, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0x2]}, 0x8)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0xffffffff, 0x1, {0x2, 0x1, 0x7f, 0x2, 0x7fffffff}, 0x80000000})
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'})
fchmod(r1, 0x2c)

20:14:34 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xff)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000002c0)={0x1, 0x8, 0x2, 0x40})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000340))
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000380))
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x360, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_IE={0x10f, 0x2a, [@supported_rates={0x1, 0x2, [{0x1b, 0x1}, {0x16}]}, @tim={0x5, 0xf5, {0x1f, 0x1a, 0x2, "bae5d55b5a43ce72965444e1329dc84818c4f1293d6f5b68756c4ae24bcbc20678b95b27e868d5b9e35280623823d43a54e3fa76c44ece74a76b554057fac6006dc605549c2371d8080c83ec16e96762adbc8dfe56c39ad2c1c10472728a8a5d99819c1d93df56ccddea7568cf56d7519e52421901057392f257c58eccecb4fb12c2df819647fcb20a1f30b6c8bb22a0b570e1a45d7dffa63fc0c9fddade4cc4a16613ce5631a453be1ef5ccc92af06b940ebf4d42b1db91f4333d5f017adb20e14a9e2ee0eeac747aea59c8ac37b8b3cedc61a60a9b5fa93795c4a19e7bf386c1e0551d1288210c7d224933c25ee79f45c9"}}, @channel_switch={0x25, 0x3, {0x0, 0x80}}, @gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xd4}]}, @NL80211_ATTR_IE={0x206, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @prep={0x83, 0x25, @ext={{}, 0x3, 0x3f, @device_a, 0x3, @broadcast, 0x6, 0x2, @broadcast, 0x7ff}}, @random={0x0, 0xeb, "3130e086f944310ba5d1099b2ff0aea28c977494686df639c73361b89170a5c5e350080545c4b51ed5d12e2373071eeb2e8a9d72f5bfde7dbf0fffdae0486333d9eb5c068e12739f09edbe229f65ac273941840df07324adb02d042ac8fb36abad5605a5ee9bb34441df92c78dce0f2d8774c0e8a0222e72a93474ae8666310ec70eea9b1972bf2248895ba3acaa57b41156637b80429cf2cce61dbff92f96293e1502cc4b83702abbeb1a1cec9c240e81d611c90f29bb5303ad52d0e66a05e8a407e5638867b0ee804c0ce22e6058cdd23ac2b5a3f4bba20759dd0f31c60777e063d56728e2f071fed69b"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb1, 0x9}}, @random={0x0, 0x8b, "08daeeedcf2f89c5f6c9a5fdbf77af2379588bee718a4bf170fe2ec9d94a9f93010f4c25aabbae15214bc67450281081e1dc4ae77e9bef86c0e86df0f257f80151f964e3d4560db2024e93c75bcf6a6e650a5b8428f401cf9812499090dd890d1413dac1b7c652f9467f18c7aa610d3ece9f781364aa61ef845451aa5e08f18449fbd3c7f09f6836825901"}, @mic={0x8c, 0x18, {0xddc, "2d409fb0c361", @long="57156c9b8ea09d8d1328e455c396485e"}}, @prep={0x83, 0x25, @ext={{}, 0x40, 0xfd, @device_b, 0x1, @broadcast, 0x639, 0x8001, @broadcast, 0x7fffffff}}, @rann={0x7e, 0x15, {{0x1, 0x4b}, 0x79, 0x8, @device_b, 0x1ff, 0x187d, 0x80000000}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000800))
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1c8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8a1f}, {0x6, 0x11, 0xf7eb}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x15}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x1b52}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffb56}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x3c7}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20040004}, 0xc084)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000b00)={0x200, 0x1, 0x3, 0x996f, 0x81, 0x59})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x5577a2ec75c9cf41}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004840)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
getgroups(0x8, &(0x7f0000000d80)=[<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee01, 0xee00, 0xee00])
newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
stat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x20000, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@uname={'uname', 0x3d, '!)#'}}, {@access_user}, {@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x54, 0x30, 0x32, 0x0, 0x6, 0x30, 0x31, 0x33], 0x2d, [0x62, 0x64, 0x38, 0x65], 0x2d, [0x35, 0x65, 0x38, 0x65], 0x2d, [0x33, 0x38, 0x38, 0x61], 0x2d, [0x33, 0x62, 0x31, 0x31, 0x35, 0x66, 0x36, 0x66]}}}, {@obj_type={'obj_type', 0x3d, '0000:00:10.0\x00'}}, {@euid_lt={'euid<', r5}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttyS3\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fowner_eq={'fowner', 0x3d, r6}}]}})

20:14:34 executing program 5:
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x9, 0x400, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x21, @multicast1, 0x4e20, 0x2, 'lc\x00', 0x0, 0xcc, 0x1b}, {@multicast1, 0x4e21, 0x2000, 0x7db0, 0x1, 0x3800}}, 0x44)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r0=>0x0, @local, @dev}, &(0x7f0000000100)=0xc)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000140))
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, r0}, 0x14)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000001c0)={0x0, "6ef3441ab630d764b711e3a2a39c5888"})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000011c0)={0x0, 0x3, 0x36, 0x8000})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001200)={<r1=>0xffffffffffffffff, 0x1000, 0x20, 0xfffffffffffffff8})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001300)={'sit0\x00', &(0x7f0000001280)={'syztnl0\x00', r2, 0x4, 0x9, 0x7, 0x3, 0x28, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d0, 0x8000, 0x60, 0x6}})
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000001340), 0x8002, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000013c0)={0x100000001, 0x81, 0x9, 0x0, 0x0, [{{r1}, 0x7}, {{r3}, 0xfa}, {{r4}, 0xf6e}, {{}, 0xfffffffffffffff7}, {{r1}, 0x6}, {{r5}, 0x80000000}, {{r6}, 0x6733}, {{r1}, 0xff}, {{r1}, 0x9}]})
socketpair(0x21, 0x3, 0x4, &(0x7f0000001500)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000015c0)={'ip6tnl0\x00', &(0x7f0000001540)={'syztnl2\x00', <r8=>r0, 0x2f, 0x40, 0x0, 0x5, 0x14, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x1, 0x7, 0x4, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'syztnl0\x00', r8, 0x2f, 0x81, 0x94, 0x3ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, @rand_addr=' \x01\x00', 0x8, 0x1, 0xe9a, 0x7}})
setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f00000016c0)={0x2, "e3562d"}, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001700)='./binderfs/custom1\x00', 0x1000, 0x0)

20:14:34 executing program 6:
r0 = clone3(&(0x7f00000013c0)={0x10900100, &(0x7f00000001c0), &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0, {0x25}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/237, &(0x7f0000001380)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x105002, 0x167}, 0x18)
r4 = clone3(&(0x7f0000001500)={0x20008000, &(0x7f0000000000), &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080), {0x2c}, &(0x7f00000000c0)=""/153, 0x99, &(0x7f0000000180)=""/45, &(0x7f0000001440)=[r0, 0xffffffffffffffff], 0x2, {r3}}, 0x58)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
readahead(r6, 0x401, 0x2)
syz_io_uring_setup(0x54, &(0x7f0000001580)={0x0, 0x627a, 0x10, 0x3, 0x37b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001600), &(0x7f0000001640))
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
r8 = epoll_create1(0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002940)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000002a40)=0xe8)
mount$9p_fd(0x0, &(0x7f0000001680)='./file1\x00', &(0x7f00000016c0), 0x2000, &(0x7f0000002a80)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_any}, {@cache_none}, {@fscache}, {@nodevmap}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, '\\-%!-'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fowner_gt={'fowner>', r9}}]}})
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x30, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40900}, 0x100)
syz_io_uring_setup(0x49cc, &(0x7f0000002c40)={0x0, 0xfa4e, 0x8, 0x1, 0x132, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002cc0), &(0x7f0000002d00))
r10 = dup(r6)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000002d40)={{0x3e, @local, 0x4e21, 0x2, 'none\x00', 0x0, 0x936, 0x74}, {@multicast1, 0x4e22, 0x4, 0x0, 0x1f, 0x6}}, 0x44)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '*}\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040)
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000003140)=<r12=>0x0)
r13 = clone3(&(0x7f0000003380)={0x80000, &(0x7f0000003180), &(0x7f00000031c0), &(0x7f0000003200), {0x1a}, &(0x7f0000003240)=""/160, 0xa0, &(0x7f0000003300)=""/44, &(0x7f0000003340)=[r1, r4, r5, r5, r1, r5, r4, r4, r5], 0x9, {r7}}, 0x58)
clone3(&(0x7f0000003440)={0x100000000, &(0x7f0000002ec0), &(0x7f0000002f00), &(0x7f0000002f40), {0x4}, &(0x7f0000002f80)=""/139, 0x8b, &(0x7f0000003040)=""/244, &(0x7f0000003400)=[r2, r0, r12, r13, r0, r0], 0x6, {r3}}, 0x58)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000034c0)={'wpan3\x00'})

[   71.868996] audit: type=1400 audit(1664568874.682:6): avc:  denied  { execmem } for  pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
20:14:34 executing program 7:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xd4}}, 0x4)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x150, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x433}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd4, 0xac, "ae96a573b43ec2ee5877c1cc3cdf9d096106374ba4b0a543d3aecd216e815c72bf6951c9e3efbac491105bcaa569b00abfdee3709743ba5a5fd4e80b74d8ea5bba6ac97f440dc4930daeadd041ee7b50a149b49053240002a14a880ebb93be6a0ec90f20aac1ec47b9539a2b826eabf3d5fa07d93fc58e0ae1f427c3e496346804ddb7c0eb26118bab0e204fe7d9f11cf046098eb82aa48fd6fb2890f19a7750389e70edb902725a6ca942f63ec4f9650da02ac826f833b6bcb26fcd1a907ce7298d42450df73b0c22cc195caabf3828"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3f, 0xbe, "49c7efa84c137117b8cc1c987ee6ea4f3ee0d9ffc2ea3b71d033fd91fff9f10b6c77b55dba13540730ae7fcacb599599a1f051efb0641372990366"}]}, 0x150}, 0x1, 0x0, 0x0, 0x24000044}, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000980)=0x80, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x8, 0x80, 0x7, 0x32, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0xa57, 0x5}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000ac0)={'erspan0\x00', <r4=>0x0, 0x80, 0x7, 0x8, 0x3ff, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x27, 0xb4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @rand_addr=0x64010100, @broadcast]}, @end, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0x8, [{@remote, 0x1}, {@remote, 0x6}]}, @generic={0x7, 0x3, "a8"}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0x100, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0xc050)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000d00)={'sit0\x00', <r5=>r4, 0x2f, 0x81, 0xff, 0x7017, 0x40, @mcast1, @empty, 0x7f30, 0x8, 0x10001, 0x36345926}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000ec0)={'erspan0\x00', &(0x7f0000000dc0)={'tunl0\x00', <r6=>0x0, 0x20, 0x79c0, 0xc5, 0xa, {{0x38, 0x4, 0x3, 0x5, 0xe0, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x86, 0x5, "ddde08"}, @timestamp={0x44, 0x14, 0xab, 0x0, 0x8, [0x1ff, 0x6, 0x200, 0x7]}, @timestamp={0x44, 0x10, 0x32, 0x0, 0x4, [0x4, 0x80, 0x1ff]}, @timestamp={0x44, 0x1c, 0xd0, 0x0, 0x9, [0x9, 0xad56, 0x1, 0x1, 0x36d9, 0xffff]}, @generic={0x44, 0xe, "ae41f5cb82e86686418b7b7e"}, @timestamp_addr={0x44, 0x24, 0x2f, 0x1, 0x8, [{@local, 0xae0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f}, {@remote, 0x8}, {@private=0xa010102, 0xffff}]}, @timestamp_prespec={0x44, 0x4c, 0x1a, 0x3, 0x3, [{@loopback, 0x3}, {@rand_addr=0x64010102, 0x7}, {@broadcast, 0x44c}, {@rand_addr=0x64010101, 0x18176}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x7}, 0x1}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x754}]}]}}}}})
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000f00)={@broadcast, @dev}, &(0x7f0000000f40)=0xc)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000f80), &(0x7f0000000fc0)=0x30)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001000)={r5, 0x1, 0x6}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'syztnl1\x00', <r7=>r5, 0x4, 0x3, 0x8, 0x4, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x10, 0x77a2, 0x200}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001240)={'ip6tnl0\x00', &(0x7f00000011c0)={'ip6_vti0\x00', <r8=>r7, 0x29, 0xa2, 0x7f, 0x3ff, 0x44, @local, @mcast1, 0x7830, 0x7, 0x0, 0x1}})
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x40, 0x0)
getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000012c0)={0x0, @local, @broadcast}, &(0x7f0000001300)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001a00)={'tunl0\x00', &(0x7f0000001900)={'syztnl0\x00', <r10=>r3, 0x10, 0x80, 0x9, 0x80000001, {{0x35, 0x4, 0x3, 0x1f, 0xd4, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x34, 0xa1, 0x1, 0xa, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x401}, {@rand_addr=0x64010101, 0x401}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xd02}, {@multicast2}, {@broadcast, 0x7}]}, @lsrr={0x83, 0x13, 0xcd, [@multicast2, @loopback, @multicast2, @loopback]}, @lsrr={0x83, 0xb, 0x99, [@multicast1, @multicast1]}, @lsrr={0x83, 0x17, 0x62, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @ssrr={0x89, 0x1f, 0x27, [@dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x8, "cec719d4b20f"}, {0x1, 0xc, "64874096b9c176544137"}]}, @timestamp_prespec={0x44, 0x1c, 0x57, 0x3, 0x8, [{@broadcast, 0xff}, {@multicast2, 0xfff}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7}]}]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000001b40)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001c00)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000001d00)=0xe8)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001fc0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x1a8, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaae8408362b8e7ad}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x880}, 0x1)

[   73.200965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.203201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.204934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.205552] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.210013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.211028] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.212020] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.213586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.215090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.216052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.219581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.221029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.222372] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.224084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.225337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.226451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.228068] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   73.229247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.231053] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   73.232153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.233575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.242183] Bluetooth: hci0: HCI_REQ-0x0c1a
[   73.247887] Bluetooth: hci2: HCI_REQ-0x0c1a
[   73.256286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.258078] Bluetooth: hci1: HCI_REQ-0x0c1a
[   73.258863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   73.260544] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.267182] Bluetooth: hci3: HCI_REQ-0x0c1a
[   73.311662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.324066] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.325434] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.338614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.347346] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   73.349844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   73.351708] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   73.353560] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.355124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   73.356561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   73.357904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   73.359160] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   73.370280] Bluetooth: hci4: HCI_REQ-0x0c1a
[   73.377597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   73.381492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   73.383207] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   73.384694] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   73.385918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   73.387106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   73.393311] Bluetooth: hci7: HCI_REQ-0x0c1a
[   73.403878] Bluetooth: hci5: HCI_REQ-0x0c1a
[   75.252922] Bluetooth: hci6: Opcode 0x c03 failed: -110
[   75.254203] Bluetooth: hci0: command 0x0409 tx timeout
[   75.317104] Bluetooth: hci3: command 0x0409 tx timeout
[   75.317859] Bluetooth: hci1: command 0x0409 tx timeout
[   75.318383] Bluetooth: hci2: command 0x0409 tx timeout
[   75.380941] Bluetooth: hci4: command 0x0409 tx timeout
[   75.444873] Bluetooth: hci5: command 0x0409 tx timeout
[   75.445518] Bluetooth: hci7: command 0x0409 tx timeout
[   77.301371] Bluetooth: hci0: command 0x041b tx timeout
[   77.364881] Bluetooth: hci2: command 0x041b tx timeout
[   77.365399] Bluetooth: hci1: command 0x041b tx timeout
[   77.365925] Bluetooth: hci3: command 0x041b tx timeout
[   77.428829] Bluetooth: hci4: command 0x041b tx timeout
[   77.492865] Bluetooth: hci7: command 0x041b tx timeout
[   77.493281] Bluetooth: hci5: command 0x041b tx timeout
[   78.299371] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   78.311073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   78.314051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   78.321082] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   78.324906] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   78.326532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   78.331615] Bluetooth: hci6: HCI_REQ-0x0c1a
[   79.348894] Bluetooth: hci0: command 0x040f tx timeout
[   79.412864] Bluetooth: hci3: command 0x040f tx timeout
[   79.413444] Bluetooth: hci1: command 0x040f tx timeout
[   79.413937] Bluetooth: hci2: command 0x040f tx timeout
[   79.476803] Bluetooth: hci4: command 0x040f tx timeout
[   79.540887] Bluetooth: hci5: command 0x040f tx timeout
[   79.541303] Bluetooth: hci7: command 0x040f tx timeout
[   80.372910] Bluetooth: hci6: command 0x0409 tx timeout
[   81.396853] Bluetooth: hci0: command 0x0419 tx timeout
[   81.460930] Bluetooth: hci2: command 0x0419 tx timeout
[   81.461423] Bluetooth: hci1: command 0x0419 tx timeout
[   81.461944] Bluetooth: hci3: command 0x0419 tx timeout
[   81.524881] Bluetooth: hci4: command 0x0419 tx timeout
[   81.588823] Bluetooth: hci7: command 0x0419 tx timeout
[   81.589248] Bluetooth: hci5: command 0x0419 tx timeout
[   82.420825] Bluetooth: hci6: command 0x041b tx timeout
[   84.469206] Bluetooth: hci6: command 0x040f tx timeout
[   86.516866] Bluetooth: hci6: command 0x0419 tx timeout
20:15:24 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @link_local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

[  122.154311] device syz_tun entered promiscuous mode
[  122.171169] device syz_tun left promiscuous mode
20:15:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @link_local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

[  122.316413] device syz_tun entered promiscuous mode
[  122.340144] device syz_tun left promiscuous mode
20:15:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @link_local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

[  122.444838] device syz_tun entered promiscuous mode
[  122.474091] device syz_tun left promiscuous mode
20:15:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @link_local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

[  122.580254] device syz_tun entered promiscuous mode
[  122.602671] device syz_tun left promiscuous mode
20:15:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)

[  122.711917] device syz_tun entered promiscuous mode
[  122.732528] device syz_tun left promiscuous mode
20:15:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
close_range(r0, 0xffffffffffffffff, 0x0)

[  122.840718] device syz_tun entered promiscuous mode
[  122.862315] device syz_tun left promiscuous mode
20:15:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
socket$packet(0x11, 0x3, 0x300)
close_range(r0, 0xffffffffffffffff, 0x0)

[  122.969739] device syz_tun entered promiscuous mode
[  122.986432] device syz_tun left promiscuous mode
20:15:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

[  123.079928] device syz_tun entered promiscuous mode
[  123.093131] device syz_tun left promiscuous mode
[  126.848685] audit: type=1400 audit(1664568929.662:7): avc:  denied  { create } for  pid=3950 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1
[  126.855693] audit: type=1400 audit(1664568929.669:8): avc:  denied  { open } for  pid=3950 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  126.917280] loop0: detected capacity change from 0 to 14
[  127.108506] loop0: detected capacity change from 0 to 14
20:15:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

20:15:46 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xff)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000002c0)={0x1, 0x8, 0x2, 0x40})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000340))
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000380))
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x360, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_IE={0x10f, 0x2a, [@supported_rates={0x1, 0x2, [{0x1b, 0x1}, {0x16}]}, @tim={0x5, 0xf5, {0x1f, 0x1a, 0x2, "bae5d55b5a43ce72965444e1329dc84818c4f1293d6f5b68756c4ae24bcbc20678b95b27e868d5b9e35280623823d43a54e3fa76c44ece74a76b554057fac6006dc605549c2371d8080c83ec16e96762adbc8dfe56c39ad2c1c10472728a8a5d99819c1d93df56ccddea7568cf56d7519e52421901057392f257c58eccecb4fb12c2df819647fcb20a1f30b6c8bb22a0b570e1a45d7dffa63fc0c9fddade4cc4a16613ce5631a453be1ef5ccc92af06b940ebf4d42b1db91f4333d5f017adb20e14a9e2ee0eeac747aea59c8ac37b8b3cedc61a60a9b5fa93795c4a19e7bf386c1e0551d1288210c7d224933c25ee79f45c9"}}, @channel_switch={0x25, 0x3, {0x0, 0x80}}, @gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xd4}]}, @NL80211_ATTR_IE={0x206, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @prep={0x83, 0x25, @ext={{}, 0x3, 0x3f, @device_a, 0x3, @broadcast, 0x6, 0x2, @broadcast, 0x7ff}}, @random={0x0, 0xeb, "3130e086f944310ba5d1099b2ff0aea28c977494686df639c73361b89170a5c5e350080545c4b51ed5d12e2373071eeb2e8a9d72f5bfde7dbf0fffdae0486333d9eb5c068e12739f09edbe229f65ac273941840df07324adb02d042ac8fb36abad5605a5ee9bb34441df92c78dce0f2d8774c0e8a0222e72a93474ae8666310ec70eea9b1972bf2248895ba3acaa57b41156637b80429cf2cce61dbff92f96293e1502cc4b83702abbeb1a1cec9c240e81d611c90f29bb5303ad52d0e66a05e8a407e5638867b0ee804c0ce22e6058cdd23ac2b5a3f4bba20759dd0f31c60777e063d56728e2f071fed69b"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb1, 0x9}}, @random={0x0, 0x8b, "08daeeedcf2f89c5f6c9a5fdbf77af2379588bee718a4bf170fe2ec9d94a9f93010f4c25aabbae15214bc67450281081e1dc4ae77e9bef86c0e86df0f257f80151f964e3d4560db2024e93c75bcf6a6e650a5b8428f401cf9812499090dd890d1413dac1b7c652f9467f18c7aa610d3ece9f781364aa61ef845451aa5e08f18449fbd3c7f09f6836825901"}, @mic={0x8c, 0x18, {0xddc, "2d409fb0c361", @long="57156c9b8ea09d8d1328e455c396485e"}}, @prep={0x83, 0x25, @ext={{}, 0x40, 0xfd, @device_b, 0x1, @broadcast, 0x639, 0x8001, @broadcast, 0x7fffffff}}, @rann={0x7e, 0x15, {{0x1, 0x4b}, 0x79, 0x8, @device_b, 0x1ff, 0x187d, 0x80000000}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000800))
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1c8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8a1f}, {0x6, 0x11, 0xf7eb}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x15}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x1b52}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffb56}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x3c7}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20040004}, 0xc084)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000b00)={0x200, 0x1, 0x3, 0x996f, 0x81, 0x59})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x5577a2ec75c9cf41}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004840)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
getgroups(0x8, &(0x7f0000000d80)=[<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee01, 0xee00, 0xee00])
newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
stat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x20000, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@uname={'uname', 0x3d, '!)#'}}, {@access_user}, {@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x54, 0x30, 0x32, 0x0, 0x6, 0x30, 0x31, 0x33], 0x2d, [0x62, 0x64, 0x38, 0x65], 0x2d, [0x35, 0x65, 0x38, 0x65], 0x2d, [0x33, 0x38, 0x38, 0x61], 0x2d, [0x33, 0x62, 0x31, 0x31, 0x35, 0x66, 0x36, 0x66]}}}, {@obj_type={'obj_type', 0x3d, '0000:00:10.0\x00'}}, {@euid_lt={'euid<', r5}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttyS3\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fowner_eq={'fowner', 0x3d, r6}}]}})

20:15:46 executing program 3:
clock_gettime(0x0, &(0x7f00000012c0))
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001300))
syz_mount_image$ext4(&(0x7f0000008700)='ext2\x00', &(0x7f0000008740)='./file0\x00', 0x0, 0x1, &(0x7f0000008840)=[{&(0x7f0000008780)='Y', 0x1}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='journal_ioprio=0x0000000000000000,fowner<', @ANYRESDEC=0x0, @ANYBLOB="8e6902b1575524b206fede503923ce9ae3a5174614b27001bf033b41c6eea511f0a43496b4f4d5c5f42fb38786362ca74522fb9ccb88c70224a7149ff4bb054dec5ca21c7acf3ed41536e47a7ae1e1e707decfea11abc5a3662d344af7ae25d9ff538bf1226c738ba7132f362ca1f46e578077085f03cc05cefb7bf1ed38a8a54cc95fb8d636b72f1eb755e35c"])
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000008900), 0x0, 0x0)
clock_gettime(0x0, 0x0)
futex(0x0, 0x1, 0x2, 0x0, &(0x7f0000008bc0)=0x1, 0x0)
ioprio_set$pid(0x0, 0x0, 0x4000)
openat(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000008d40), 0x101382, 0x0)

20:15:46 executing program 6:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mount$cgroup(0x0, &(0x7f0000001400)='./file1\x00', &(0x7f0000001440), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e616d653d00198a0000000000000000000000c736a59fdf0ec31297f1bf33c708069a7171970f48e0bc2880025200e3d5d0bd2fb63068cdf774c0ab9684a7c6127ad503022885a4e40bae748d4aed982104815c3342da0b82570632bf35a99b47ad4bb062b4e15a1a3025482c00"/121])

20:15:46 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0xffff, 0x4)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @random="dbb635da6bd3"}, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
close_range(r0, 0xffffffffffffffff, 0x0)

20:15:46 executing program 7:
syz_emit_ethernet(0x20, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @random="1700ff711757", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@x25={0x805, {0x0, 0xff, 0xf3, "99511b40298af0edcd4468"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x5, 0xbe3, 0xa11, 0x1e8]})
syz_emit_ethernet(0xef, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x0, 0x13, 0xe1, 0x66, 0x0, 0x1, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x32, 0x3, [{0x5, 0xa, "8be78fb76388f976"}, {0x0, 0x3, "84"}, {0x3, 0x12, "8276deecfce4fe2de258917d99a862ab"}, {0x2, 0x9, "762fd1688eb971"}, {0x0, 0x4, "814b"}]}, @lsrr={0x83, 0x23, 0x8, [@private=0xa010102, @multicast1, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @local]}, @end, @lsrr={0x83, 0x7, 0xc4, [@private=0xa010100]}, @timestamp={0x44, 0x14, 0xe4, 0x0, 0x6, [0x1c, 0x0, 0x400, 0x600]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0x8, "46a507046b98"}, {0x5, 0x9, "7219ecab44c48e"}, {0x6, 0x6, "a9ceb3a3"}, {0x2, 0x5, "b0b486"}, {0x7, 0xf, "1baf5563e710a995f6688fb5ff"}, {0x1, 0x5, "df56cc"}, {0x5, 0x2}, {0x6, 0x2}]}]}}, @payload_direct={{{{0x21, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x2, 0x3, 0x0, 0x5, 0x3, 0x4e23, 0x4e20}, 0x1, 0x2}}, [0x0]}}}}}, &(0x7f0000000180)={0x1, 0x4, [0x10f, 0xe32, 0x678, 0xa1f]})

20:15:46 executing program 5:
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={0x0, 0x1, 0xffffffffffffffff, 0x6})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x10001, 0xffff, 0x3, 0x3, 0x4, [{0xffffffffffffffc1, 0x67, 0x3f, '\x00', 0x120c}, {0xfffffffffffffffe, 0x8, 0x439e}, {0xfffffffffffffbff, 0xfffffffffffffb69, 0x0, '\x00', 0x103}, {0x8, 0x4, 0x1, '\x00', 0x4}]})
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = accept4(r4, &(0x7f0000000340)=@pptp, &(0x7f0000000400)=0x80, 0x80000)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000440)={'wg0\x00'})
getsockopt$inet_int(r4, 0x0, 0xc, 0x0, &(0x7f0000003580))
sendfile(r4, r1, 0x0, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000300)={0x1, 0x2})
mq_timedreceive(r3, &(0x7f00000003c0)=""/27, 0x1b, 0xffff, &(0x7f0000000040)={0x0, 0x989680})
fallocate(r3, 0x10, 0x8, 0x1)
fcntl$dupfd(r0, 0x406, r4)
socket$unix(0x1, 0x1, 0x0)
io_setup(0x95, &(0x7f0000000000))

[  143.744478] ext2: Unknown parameter 'fowner<00000000000000000000�i�WU$���P9#�F�p
�;A���4������/���6'
[  143.751974] device syz_tun entered promiscuous mode
[  143.755625] cgroup: Bad value for 'name'
[  143.761874] audit: type=1400 audit(1664568946.575:9): avc:  denied  { kernel } for  pid=4009 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  143.772271] device syz_tun entered promiscuous mode
[  143.782510] device syz_tun left promiscuous mode
[  143.784357] ------------[ cut here ]------------
[  143.784390] 
[  143.784395] ======================================================
[  143.784401] WARNING: possible circular locking dependency detected
[  143.784408] 6.0.0-rc7-next-20220929 #1 Not tainted
[  143.784420] ------------------------------------------------------
[  143.784426] syz-executor.5/4016 is trying to acquire lock:
[  143.784437] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  143.784506] 
[  143.784506] but task is already holding lock:
[  143.784512] ffff88800eedec20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  143.784560] 
[  143.784560] which lock already depends on the new lock.
[  143.784560] 
[  143.784565] 
[  143.784565] the existing dependency chain (in reverse order) is:
[  143.784571] 
[  143.784571] -> #3 (&ctx->lock){....}-{2:2}:
[  143.784597]        _raw_spin_lock+0x2a/0x40
[  143.784617]        __perf_event_task_sched_out+0x53b/0x18d0
[  143.784638]        __schedule+0xedd/0x2470
[  143.784664]        preempt_schedule_common+0x45/0xc0
[  143.784691]        __cond_resched+0x17/0x30
[  143.784717]        __mutex_lock+0xa3/0x14d0
[  143.784745]        __do_sys_perf_event_open+0x1eec/0x32c0
[  143.784766]        do_syscall_64+0x3b/0x90
[  143.784798]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.784822] 
[  143.784822] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  143.784847]        _raw_spin_lock_nested+0x30/0x40
[  143.784867]        raw_spin_rq_lock_nested+0x1e/0x30
[  143.784891]        task_fork_fair+0x63/0x4d0
[  143.784922]        sched_cgroup_fork+0x3d0/0x540
[  143.784948]        copy_process+0x4183/0x6e20
[  143.784967]        kernel_clone+0xe7/0x890
[  143.784985]        user_mode_thread+0xad/0xf0
[  143.785004]        rest_init+0x24/0x250
[  143.785026]        arch_call_rest_init+0xf/0x14
[  143.785056]        start_kernel+0x4c6/0x4eb
[  143.785083]        secondary_startup_64_no_verify+0xe0/0xeb
[  143.785108] 
[  143.785108] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  143.785133]        _raw_spin_lock_irqsave+0x39/0x60
[  143.785153]        try_to_wake_up+0xab/0x1930
[  143.785187]        up+0x75/0xb0
[  143.785213]        __up_console_sem+0x6e/0x80
[  143.785242]        console_unlock+0x46a/0x590
[  143.785272]        vprintk_emit+0x1bd/0x560
[  143.785302]        vprintk+0x84/0xa0
[  143.785331]        _printk+0xba/0xf1
[  143.785352]        kauditd_hold_skb.cold+0x3f/0x4e
[  143.785383]        kauditd_send_queue+0x233/0x290
[  143.785411]        kauditd_thread+0x5f9/0x9c0
[  143.785437]        kthread+0x2ed/0x3a0
[  143.785464]        ret_from_fork+0x22/0x30
[  143.785486] 
[  143.785486] -> #0 ((console_sem).lock){....}-{2:2}:
[  143.785512]        __lock_acquire+0x2a02/0x5e70
[  143.785543]        lock_acquire+0x1a2/0x530
[  143.785572]        _raw_spin_lock_irqsave+0x39/0x60
[  143.785592]        down_trylock+0xe/0x70
[  143.785619]        __down_trylock_console_sem+0x3b/0xd0
[  143.785649]        vprintk_emit+0x16b/0x560
[  143.785679]        vprintk+0x84/0xa0
[  143.785708]        _printk+0xba/0xf1
[  143.785727]        report_bug.cold+0x72/0xab
[  143.785757]        handle_bug+0x3c/0x70
[  143.785788]        exc_invalid_op+0x14/0x50
[  143.785819]        asm_exc_invalid_op+0x16/0x20
[  143.785841]        group_sched_out.part.0+0x2c7/0x460
[  143.785874]        ctx_sched_out+0x8f1/0xc10
[  143.785905]        __perf_event_task_sched_out+0x6d0/0x18d0
[  143.785925]        __schedule+0xedd/0x2470
[  143.785951]        preempt_schedule_common+0x45/0xc0
[  143.785978]        __cond_resched+0x17/0x30
[  143.786004]        __mutex_lock+0xa3/0x14d0
[  143.786031]        __do_sys_perf_event_open+0x1eec/0x32c0
[  143.786052]        do_syscall_64+0x3b/0x90
[  143.786083]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.786107] 
[  143.786107] other info that might help us debug this:
[  143.786107] 
[  143.786112] Chain exists of:
[  143.786112]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  143.786112] 
[  143.786139]  Possible unsafe locking scenario:
[  143.786139] 
[  143.786144]        CPU0                    CPU1
[  143.786148]        ----                    ----
[  143.786152]   lock(&ctx->lock);
[  143.786163]                                lock(&rq->__lock);
[  143.786175]                                lock(&ctx->lock);
[  143.786186]   lock((console_sem).lock);
[  143.786197] 
[  143.786197]  *** DEADLOCK ***
[  143.786197] 
[  143.786201] 2 locks held by syz-executor.5/4016:
[  143.786213]  #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  143.786268]  #1: ffff88800eedec20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  143.786318] 
[  143.786318] stack backtrace:
[  143.786322] CPU: 1 PID: 4016 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220929 #1
[  143.786346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  143.786360] Call Trace:
[  143.786366]  <TASK>
[  143.786372]  dump_stack_lvl+0x8b/0xb3
[  143.786407]  check_noncircular+0x263/0x2e0
[  143.786438]  ? format_decode+0x26c/0xb50
[  143.786468]  ? print_circular_bug+0x450/0x450
[  143.786499]  ? enable_ptr_key_workfn+0x20/0x20
[  143.786530]  ? lock_release+0x547/0x750
[  143.786561]  ? format_decode+0x26c/0xb50
[  143.786593]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  143.786626]  __lock_acquire+0x2a02/0x5e70
[  143.786666]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  143.786708]  lock_acquire+0x1a2/0x530
[  143.786739]  ? down_trylock+0xe/0x70
[  143.786771]  ? lock_release+0x750/0x750
[  143.786809]  ? vprintk+0x84/0xa0
[  143.786842]  _raw_spin_lock_irqsave+0x39/0x60
[  143.786863]  ? down_trylock+0xe/0x70
[  143.786893]  down_trylock+0xe/0x70
[  143.786922]  ? vprintk+0x84/0xa0
[  143.786954]  __down_trylock_console_sem+0x3b/0xd0
[  143.786986]  vprintk_emit+0x16b/0x560
[  143.787021]  vprintk+0x84/0xa0
[  143.787054]  _printk+0xba/0xf1
[  143.787075]  ? record_print_text.cold+0x16/0x16
[  143.787104]  ? report_bug.cold+0x66/0xab
[  143.787138]  ? group_sched_out.part.0+0x2c7/0x460
[  143.787172]  report_bug.cold+0x72/0xab
[  143.787207]  handle_bug+0x3c/0x70
[  143.787239]  exc_invalid_op+0x14/0x50
[  143.787273]  asm_exc_invalid_op+0x16/0x20
[  143.787297] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  143.787334] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  143.787355] RSP: 0018:ffff888040bef978 EFLAGS: 00010006
[  143.787372] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  143.787386] RDX: ffff888040729ac0 RSI: ffffffff81565e67 RDI: 0000000000000005
[  143.787401] RBP: ffff888040008000 R08: 0000000000000005 R09: 0000000000000001
[  143.787414] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800eedec00
[  143.787429] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[  143.787449]  ? group_sched_out.part.0+0x2c7/0x460
[  143.787486]  ? group_sched_out.part.0+0x2c7/0x460
[  143.787523]  ctx_sched_out+0x8f1/0xc10
[  143.787560]  __perf_event_task_sched_out+0x6d0/0x18d0
[  143.787586]  ? lock_is_held_type+0xd7/0x130
[  143.787612]  ? __perf_cgroup_move+0x160/0x160
[  143.787632]  ? set_next_entity+0x304/0x550
[  143.787665]  ? update_curr+0x267/0x740
[  143.787699]  ? lock_is_held_type+0xd7/0x130
[  143.787725]  __schedule+0xedd/0x2470
[  143.787757]  ? io_schedule_timeout+0x150/0x150
[  143.787785]  ? find_held_lock+0x2c/0x110
[  143.787815]  ? lock_is_held_type+0xd7/0x130
[  143.787840]  ? __cond_resched+0x17/0x30
[  143.787868]  preempt_schedule_common+0x45/0xc0
[  143.787899]  __cond_resched+0x17/0x30
[  143.787926]  __mutex_lock+0xa3/0x14d0
[  143.787957]  ? lock_is_held_type+0xd7/0x130
[  143.787981]  ? __do_sys_perf_event_open+0x1eec/0x32c0
[  143.788006]  ? mutex_lock_io_nested+0x1310/0x1310
[  143.788037]  ? lock_release+0x3b2/0x750
[  143.788069]  ? __up_read+0x192/0x730
[  143.788097]  ? up_write+0x520/0x520
[  143.788124]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  143.788150]  __do_sys_perf_event_open+0x1eec/0x32c0
[  143.788180]  ? perf_compat_ioctl+0x130/0x130
[  143.788201]  ? xfd_validate_state+0x59/0x180
[  143.788242]  ? syscall_enter_from_user_mode+0x1d/0x50
[  143.788268]  ? syscall_enter_from_user_mode+0x1d/0x50
[  143.788297]  do_syscall_64+0x3b/0x90
[  143.788330]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.788355] RIP: 0033:0x7ff9a84fbb19
[  143.788370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.788391] RSP: 002b:00007ff9a5a71188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  143.788411] RAX: ffffffffffffffda RBX: 00007ff9a860ef60 RCX: 00007ff9a84fbb19
[  143.788426] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080
[  143.788440] RBP: 00007ff9a8555f6d R08: 0000000000000000 R09: 0000000000000000
[  143.788453] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  143.788467] R13: 00007fffc0ee1b3f R14: 00007ff9a5a71300 R15: 0000000000022000
[  143.788491]  </TASK>
[  143.906894] WARNING: CPU: 1 PID: 4016 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  143.908151] Modules linked in:
[  143.908604] CPU: 1 PID: 4016 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220929 #1
[  143.909715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  143.911208] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  143.911958] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  143.914380] RSP: 0018:ffff888040bef978 EFLAGS: 00010006
[  143.915087] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  143.916042] RDX: ffff888040729ac0 RSI: ffffffff81565e67 RDI: 0000000000000005
[  143.916991] RBP: ffff888040008000 R08: 0000000000000005 R09: 0000000000000001
[  143.917974] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800eedec00
[  143.918925] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[  143.919885] FS:  00007ff9a5a71700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  143.920953] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.921746] CR2: 00007fbd0427d530 CR3: 0000000040414000 CR4: 0000000000350ee0
[  143.922692] Call Trace:
[  143.923044]  <TASK>
[  143.923360]  ctx_sched_out+0x8f1/0xc10
[  143.923914]  __perf_event_task_sched_out+0x6d0/0x18d0
[  143.924605]  ? lock_is_held_type+0xd7/0x130
[  143.925204]  ? __perf_cgroup_move+0x160/0x160
[  143.925831]  ? set_next_entity+0x304/0x550
[  143.926421]  ? update_curr+0x267/0x740
[  143.926949]  ? lock_is_held_type+0xd7/0x130
[  143.927535]  __schedule+0xedd/0x2470
[  143.928047]  ? io_schedule_timeout+0x150/0x150
[  143.928677]  ? find_held_lock+0x2c/0x110
[  143.929239]  ? lock_is_held_type+0xd7/0x130
[  143.929825]  ? __cond_resched+0x17/0x30
[  143.930374]  preempt_schedule_common+0x45/0xc0
[  143.931002]  __cond_resched+0x17/0x30
[  143.931536]  __mutex_lock+0xa3/0x14d0
[  143.932067]  ? lock_is_held_type+0xd7/0x130
[  143.932658]  ? __do_sys_perf_event_open+0x1eec/0x32c0
[  143.933384]  ? mutex_lock_io_nested+0x1310/0x1310
[  143.934037]  ? lock_release+0x3b2/0x750
[  143.934597]  ? __up_read+0x192/0x730
[  143.935101]  ? up_write+0x520/0x520
[  143.935618]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  143.936291]  __do_sys_perf_event_open+0x1eec/0x32c0
[  143.936971]  ? perf_compat_ioctl+0x130/0x130
[  143.937588]  ? xfd_validate_state+0x59/0x180
[  143.938196]  ? syscall_enter_from_user_mode+0x1d/0x50
[  143.938882]  ? syscall_enter_from_user_mode+0x1d/0x50
[  143.939589]  do_syscall_64+0x3b/0x90
[  143.940114]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.940807] RIP: 0033:0x7ff9a84fbb19
[  143.941331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.943716] RSP: 002b:00007ff9a5a71188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  143.944719] RAX: ffffffffffffffda RBX: 00007ff9a860ef60 RCX: 00007ff9a84fbb19
[  143.945677] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080
[  143.946619] RBP: 00007ff9a8555f6d R08: 0000000000000000 R09: 0000000000000000
[  143.947557] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  143.948528] R13: 00007fffc0ee1b3f R14: 00007ff9a5a71300 R15: 0000000000022000
[  143.949531]  </TASK>
[  143.949844] irq event stamp: 624
[  143.950291] hardirqs last  enabled at (623): [<ffffffff84271cc8>] _raw_spin_unlock_irqrestore+0x28/0x60
[  143.951526] hardirqs last disabled at (624): [<ffffffff8425a985>] __schedule+0x1225/0x2470
[  143.952606] softirqs last  enabled at (618): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  143.953765] softirqs last disabled at (613): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  143.954886] ---[ end trace 0000000000000000 ]---
20:15:46 executing program 6:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x349102, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="08000400000000002e2f66696c653000"])
r2 = openat$random(0xffffffffffffff9c, &(0x7f00000009c0), 0x8200, 0x0)
r3 = openat$cgroup(r1, &(0x7f0000000a00)='syz1\x00', 0x200002, 0x0)
sendfile(r2, r3, &(0x7f0000000a40)=0xcc9, 0x10000)
r4 = perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x3f, 0x54, 0x7, 0x35, 0x0, 0x0, 0x800, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x9, 0x0, 0x400, 0x0, 0xe899}, 0x0, 0xa, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x0, 0x69, 0x4, 0x71, 0x0, 0xfff, 0x100, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x4, 0xfffffffffffffff9}, 0x0, 0x6, 0x0, 0x5, 0x80000001, 0x3ff, 0xd7c6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, r4, 0x9)
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x2)
ioctl$CDROMMULTISESSION(r0, 0x5310, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000a80))
openat(r5, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000040)=@manufact={0x4, 0x3, 0x800, "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"})

20:15:46 executing program 7:
syz_emit_ethernet(0x20, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @random="1700ff711757", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@x25={0x805, {0x0, 0xff, 0xf3, "99511b40298af0edcd4468"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x5, 0xbe3, 0xa11, 0x1e8]})
syz_emit_ethernet(0xef, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x0, 0x13, 0xe1, 0x66, 0x0, 0x1, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x32, 0x3, [{0x5, 0xa, "8be78fb76388f976"}, {0x0, 0x3, "84"}, {0x3, 0x12, "8276deecfce4fe2de258917d99a862ab"}, {0x2, 0x9, "762fd1688eb971"}, {0x0, 0x4, "814b"}]}, @lsrr={0x83, 0x23, 0x8, [@private=0xa010102, @multicast1, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @local]}, @end, @lsrr={0x83, 0x7, 0xc4, [@private=0xa010100]}, @timestamp={0x44, 0x14, 0xe4, 0x0, 0x6, [0x1c, 0x0, 0x400, 0x600]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0x8, "46a507046b98"}, {0x5, 0x9, "7219ecab44c48e"}, {0x6, 0x6, "a9ceb3a3"}, {0x2, 0x5, "b0b486"}, {0x7, 0xf, "1baf5563e710a995f6688fb5ff"}, {0x1, 0x5, "df56cc"}, {0x5, 0x2}, {0x6, 0x2}]}]}}, @payload_direct={{{{0x21, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x2, 0x3, 0x0, 0x5, 0x3, 0x4e23, 0x4e20}, 0x1, 0x2}}, [0x0]}}}}}, &(0x7f0000000180)={0x1, 0x4, [0x10f, 0xe32, 0x678, 0xa1f]})

20:15:46 executing program 6:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}})
fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, <r3=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r4=>0x0}, &(0x7f0000000140)=0xc)
r5 = syz_open_procfs(r4, &(0x7f00000001c0)='net/if_inet6\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1010c2, 0x0)
r7 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000001)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000180)=[r7, r2]}, 0x2)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x10000027f)
pipe(&(0x7f00000000c0))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={<r9=>0x0}, &(0x7f0000000340)=0xc)
syz_open_procfs(r9, &(0x7f00000001c0)='net/if_inet6\x00')
open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x1001)
kcmp$KCMP_EPOLL_TFD(r3, r9, 0x7, r7, &(0x7f00000003c0)={r5, r2, 0x40000e6})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@local, @loopback}, &(0x7f0000000380)=0xc)
r10 = dup2(r1, r0)
close_range(r10, 0xffffffffffffffff, 0x0)

[  144.034382] hrtimer: interrupt took 29315 ns
20:15:46 executing program 7:
syz_emit_ethernet(0x20, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @random="1700ff711757", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@x25={0x805, {0x0, 0xff, 0xf3, "99511b40298af0edcd4468"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x5, 0xbe3, 0xa11, 0x1e8]})
syz_emit_ethernet(0xef, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x0, 0x13, 0xe1, 0x66, 0x0, 0x1, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x32, 0x3, [{0x5, 0xa, "8be78fb76388f976"}, {0x0, 0x3, "84"}, {0x3, 0x12, "8276deecfce4fe2de258917d99a862ab"}, {0x2, 0x9, "762fd1688eb971"}, {0x0, 0x4, "814b"}]}, @lsrr={0x83, 0x23, 0x8, [@private=0xa010102, @multicast1, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @local]}, @end, @lsrr={0x83, 0x7, 0xc4, [@private=0xa010100]}, @timestamp={0x44, 0x14, 0xe4, 0x0, 0x6, [0x1c, 0x0, 0x400, 0x600]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0x8, "46a507046b98"}, {0x5, 0x9, "7219ecab44c48e"}, {0x6, 0x6, "a9ceb3a3"}, {0x2, 0x5, "b0b486"}, {0x7, 0xf, "1baf5563e710a995f6688fb5ff"}, {0x1, 0x5, "df56cc"}, {0x5, 0x2}, {0x6, 0x2}]}]}}, @payload_direct={{{{0x21, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x2, 0x3, 0x0, 0x5, 0x3, 0x4e23, 0x4e20}, 0x1, 0x2}}, [0x0]}}}}}, &(0x7f0000000180)={0x1, 0x4, [0x10f, 0xe32, 0x678, 0xa1f]})

20:15:46 executing program 7:
syz_emit_ethernet(0x20, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @random="1700ff711757", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@x25={0x805, {0x0, 0xff, 0xf3, "99511b40298af0edcd4468"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x5, 0xbe3, 0xa11, 0x1e8]})
syz_emit_ethernet(0xef, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x0, 0x13, 0xe1, 0x66, 0x0, 0x1, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x32, 0x3, [{0x5, 0xa, "8be78fb76388f976"}, {0x0, 0x3, "84"}, {0x3, 0x12, "8276deecfce4fe2de258917d99a862ab"}, {0x2, 0x9, "762fd1688eb971"}, {0x0, 0x4, "814b"}]}, @lsrr={0x83, 0x23, 0x8, [@private=0xa010102, @multicast1, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @local]}, @end, @lsrr={0x83, 0x7, 0xc4, [@private=0xa010100]}, @timestamp={0x44, 0x14, 0xe4, 0x0, 0x6, [0x1c, 0x0, 0x400, 0x600]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0x8, "46a507046b98"}, {0x5, 0x9, "7219ecab44c48e"}, {0x6, 0x6, "a9ceb3a3"}, {0x2, 0x5, "b0b486"}, {0x7, 0xf, "1baf5563e710a995f6688fb5ff"}, {0x1, 0x5, "df56cc"}, {0x5, 0x2}, {0x6, 0x2}]}]}}, @payload_direct={{{{0x21, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x2, 0x3, 0x0, 0x5, 0x3, 0x4e23, 0x4e20}, 0x1, 0x2}}, [0x0]}}}}}, &(0x7f0000000180)={0x1, 0x4, [0x10f, 0xe32, 0x678, 0xa1f]})

20:15:46 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xff)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000002c0)={0x1, 0x8, 0x2, 0x40})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000340))
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000380))
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x360, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_IE={0x10f, 0x2a, [@supported_rates={0x1, 0x2, [{0x1b, 0x1}, {0x16}]}, @tim={0x5, 0xf5, {0x1f, 0x1a, 0x2, "bae5d55b5a43ce72965444e1329dc84818c4f1293d6f5b68756c4ae24bcbc20678b95b27e868d5b9e35280623823d43a54e3fa76c44ece74a76b554057fac6006dc605549c2371d8080c83ec16e96762adbc8dfe56c39ad2c1c10472728a8a5d99819c1d93df56ccddea7568cf56d7519e52421901057392f257c58eccecb4fb12c2df819647fcb20a1f30b6c8bb22a0b570e1a45d7dffa63fc0c9fddade4cc4a16613ce5631a453be1ef5ccc92af06b940ebf4d42b1db91f4333d5f017adb20e14a9e2ee0eeac747aea59c8ac37b8b3cedc61a60a9b5fa93795c4a19e7bf386c1e0551d1288210c7d224933c25ee79f45c9"}}, @channel_switch={0x25, 0x3, {0x0, 0x80}}, @gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xd4}]}, @NL80211_ATTR_IE={0x206, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @prep={0x83, 0x25, @ext={{}, 0x3, 0x3f, @device_a, 0x3, @broadcast, 0x6, 0x2, @broadcast, 0x7ff}}, @random={0x0, 0xeb, "3130e086f944310ba5d1099b2ff0aea28c977494686df639c73361b89170a5c5e350080545c4b51ed5d12e2373071eeb2e8a9d72f5bfde7dbf0fffdae0486333d9eb5c068e12739f09edbe229f65ac273941840df07324adb02d042ac8fb36abad5605a5ee9bb34441df92c78dce0f2d8774c0e8a0222e72a93474ae8666310ec70eea9b1972bf2248895ba3acaa57b41156637b80429cf2cce61dbff92f96293e1502cc4b83702abbeb1a1cec9c240e81d611c90f29bb5303ad52d0e66a05e8a407e5638867b0ee804c0ce22e6058cdd23ac2b5a3f4bba20759dd0f31c60777e063d56728e2f071fed69b"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb1, 0x9}}, @random={0x0, 0x8b, "08daeeedcf2f89c5f6c9a5fdbf77af2379588bee718a4bf170fe2ec9d94a9f93010f4c25aabbae15214bc67450281081e1dc4ae77e9bef86c0e86df0f257f80151f964e3d4560db2024e93c75bcf6a6e650a5b8428f401cf9812499090dd890d1413dac1b7c652f9467f18c7aa610d3ece9f781364aa61ef845451aa5e08f18449fbd3c7f09f6836825901"}, @mic={0x8c, 0x18, {0xddc, "2d409fb0c361", @long="57156c9b8ea09d8d1328e455c396485e"}}, @prep={0x83, 0x25, @ext={{}, 0x40, 0xfd, @device_b, 0x1, @broadcast, 0x639, 0x8001, @broadcast, 0x7fffffff}}, @rann={0x7e, 0x15, {{0x1, 0x4b}, 0x79, 0x8, @device_b, 0x1ff, 0x187d, 0x80000000}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000800))
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1c8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8a1f}, {0x6, 0x11, 0xf7eb}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x15}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x1b52}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffb56}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x3c7}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20040004}, 0xc084)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000b00)={0x200, 0x1, 0x3, 0x996f, 0x81, 0x59})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x5577a2ec75c9cf41}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004840)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
getgroups(0x8, &(0x7f0000000d80)=[<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee01, 0xee00, 0xee00])
newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2000)
stat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x20000, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@uname={'uname', 0x3d, '!)#'}}, {@access_user}, {@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x54, 0x30, 0x32, 0x0, 0x6, 0x30, 0x31, 0x33], 0x2d, [0x62, 0x64, 0x38, 0x65], 0x2d, [0x35, 0x65, 0x38, 0x65], 0x2d, [0x33, 0x38, 0x38, 0x61], 0x2d, [0x33, 0x62, 0x31, 0x31, 0x35, 0x66, 0x36, 0x66]}}}, {@obj_type={'obj_type', 0x3d, '0000:00:10.0\x00'}}, {@euid_lt={'euid<', r5}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttyS3\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fowner_eq={'fowner', 0x3d, r6}}]}})

[  144.170640] device syz_tun left promiscuous mode
20:15:47 executing program 7:
syz_emit_ethernet(0x20, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @random="1700ff711757", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@x25={0x805, {0x0, 0xff, 0xf3, "99511b40298af0edcd4468"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x5, 0xbe3, 0xa11, 0x1e8]})

20:15:47 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x4, 0x9, 0x8, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1400, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x6100, 0x1, 0x0, 0x3, 0xff, 0x9, 0xc1c, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00')
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

20:15:47 executing program 6:
r0 = syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x102)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1bd7, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000200))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/anycast6\x00')
pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff)
r6 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x400040)
dup3(r6, r5, 0x80000)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000340)=r5, 0x1)
syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x0)
io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0)

[  144.301212] ext2: Unknown parameter 'fowner<00000000000000000000�i�WU$���P9#�F�p
�;A���4������/���6'

VM DIAGNOSIS:
20:15:46  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff817a9cd8 RDX=1ffffd40001e1d01
RSI=0000000000000008 RDI=ffffea0000f0e808 RBP=ffffea0000f0e800 RSP=ffff888015e87618
R8 =0000000000000000 R9 =ffffea0000f0e807 R10=fffff940001e1d00 R11=0000000000000001
R12=0000000000000000 R13=ffff88800d3e9750 R14=dffffc0000000000 R15=ffffea0000f0e800
RIP=ffffffff816e43b7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd0425ce70 CR3=000000003afca000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff888040bef3c0
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000074 R11=0000000000000001
R12=0000000000000074 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0
RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff9a5a71700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd0427d530 CR3=0000000040414000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000