Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:28531' (ECDSA) to the list of known hosts. 2022/10/01 06:34:32 fuzzer started 2022/10/01 06:34:32 dialing manager at localhost:35095 syzkaller login: [ 35.381337] cgroup: Unknown subsys name 'net' [ 35.459743] cgroup: Unknown subsys name 'rlimit' 2022/10/01 06:34:49 syscalls: 2215 2022/10/01 06:34:49 code coverage: enabled 2022/10/01 06:34:49 comparison tracing: enabled 2022/10/01 06:34:49 extra coverage: enabled 2022/10/01 06:34:49 setuid sandbox: enabled 2022/10/01 06:34:49 namespace sandbox: enabled 2022/10/01 06:34:49 Android sandbox: enabled 2022/10/01 06:34:49 fault injection: enabled 2022/10/01 06:34:49 leak checking: enabled 2022/10/01 06:34:49 net packet injection: enabled 2022/10/01 06:34:49 net device setup: enabled 2022/10/01 06:34:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 06:34:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 06:34:49 USB emulation: enabled 2022/10/01 06:34:49 hci packet injection: enabled 2022/10/01 06:34:49 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 06:34:49 802.15.4 emulation: enabled 2022/10/01 06:34:49 fetching corpus: 50, signal 25861/27609 (executing program) 2022/10/01 06:34:49 fetching corpus: 100, signal 36057/39343 (executing program) 2022/10/01 06:34:49 fetching corpus: 150, signal 45283/49946 (executing program) 2022/10/01 06:34:49 fetching corpus: 200, signal 52783/58745 (executing program) 2022/10/01 06:34:49 fetching corpus: 250, signal 59145/66280 (executing program) 2022/10/01 06:34:49 fetching corpus: 300, signal 63580/71931 (executing program) 2022/10/01 06:34:49 fetching corpus: 350, signal 68652/78062 (executing program) 2022/10/01 06:34:50 fetching corpus: 400, signal 73414/83800 (executing program) 2022/10/01 06:34:50 fetching corpus: 450, signal 75824/87319 (executing program) 2022/10/01 06:34:50 fetching corpus: 500, signal 78160/90740 (executing program) 2022/10/01 06:34:50 fetching corpus: 550, signal 81273/94824 (executing program) 2022/10/01 06:34:50 fetching corpus: 600, signal 85178/99507 (executing program) 2022/10/01 06:34:50 fetching corpus: 650, signal 88796/103844 (executing program) 2022/10/01 06:34:50 fetching corpus: 700, signal 90907/106805 (executing program) 2022/10/01 06:34:50 fetching corpus: 750, signal 92938/109661 (executing program) 2022/10/01 06:34:50 fetching corpus: 800, signal 96564/113879 (executing program) 2022/10/01 06:34:51 fetching corpus: 850, signal 98152/116281 (executing program) 2022/10/01 06:34:51 fetching corpus: 900, signal 100128/118999 (executing program) 2022/10/01 06:34:51 fetching corpus: 950, signal 101381/121035 (executing program) 2022/10/01 06:34:51 fetching corpus: 1000, signal 104002/124185 (executing program) 2022/10/01 06:34:51 fetching corpus: 1050, signal 106742/127367 (executing program) 2022/10/01 06:34:51 fetching corpus: 1100, signal 107958/129289 (executing program) 2022/10/01 06:34:51 fetching corpus: 1150, signal 109743/131596 (executing program) 2022/10/01 06:34:51 fetching corpus: 1200, signal 111763/134090 (executing program) 2022/10/01 06:34:51 fetching corpus: 1250, signal 113030/136030 (executing program) 2022/10/01 06:34:52 fetching corpus: 1300, signal 114698/138253 (executing program) 2022/10/01 06:34:52 fetching corpus: 1350, signal 116774/140716 (executing program) 2022/10/01 06:34:52 fetching corpus: 1400, signal 119393/143553 (executing program) 2022/10/01 06:34:52 fetching corpus: 1450, signal 122453/146614 (executing program) 2022/10/01 06:34:52 fetching corpus: 1500, signal 125257/149424 (executing program) 2022/10/01 06:34:52 fetching corpus: 1550, signal 126613/151219 (executing program) 2022/10/01 06:34:52 fetching corpus: 1600, signal 127512/152660 (executing program) 2022/10/01 06:34:52 fetching corpus: 1650, signal 128654/154301 (executing program) 2022/10/01 06:34:53 fetching corpus: 1700, signal 129703/155782 (executing program) 2022/10/01 06:34:53 fetching corpus: 1750, signal 131791/157945 (executing program) 2022/10/01 06:34:53 fetching corpus: 1800, signal 133273/159653 (executing program) 2022/10/01 06:34:53 fetching corpus: 1850, signal 134133/160932 (executing program) 2022/10/01 06:34:53 fetching corpus: 1900, signal 135675/162692 (executing program) 2022/10/01 06:34:53 fetching corpus: 1950, signal 136933/164223 (executing program) 2022/10/01 06:34:53 fetching corpus: 2000, signal 137709/165435 (executing program) 2022/10/01 06:34:53 fetching corpus: 2050, signal 138707/166746 (executing program) 2022/10/01 06:34:53 fetching corpus: 2100, signal 139863/168126 (executing program) 2022/10/01 06:34:54 fetching corpus: 2150, signal 141981/170038 (executing program) 2022/10/01 06:34:54 fetching corpus: 2200, signal 142886/171208 (executing program) 2022/10/01 06:34:54 fetching corpus: 2250, signal 145791/173496 (executing program) 2022/10/01 06:34:54 fetching corpus: 2300, signal 146755/174666 (executing program) 2022/10/01 06:34:54 fetching corpus: 2350, signal 147762/175832 (executing program) 2022/10/01 06:34:54 fetching corpus: 2400, signal 148579/176874 (executing program) 2022/10/01 06:34:54 fetching corpus: 2450, signal 149192/177824 (executing program) 2022/10/01 06:34:54 fetching corpus: 2500, signal 149995/178806 (executing program) 2022/10/01 06:34:54 fetching corpus: 2550, signal 151436/180115 (executing program) 2022/10/01 06:34:55 fetching corpus: 2600, signal 153207/181566 (executing program) 2022/10/01 06:34:55 fetching corpus: 2650, signal 155091/183073 (executing program) 2022/10/01 06:34:55 fetching corpus: 2700, signal 156158/184129 (executing program) 2022/10/01 06:34:55 fetching corpus: 2750, signal 157087/185156 (executing program) 2022/10/01 06:34:55 fetching corpus: 2800, signal 158642/186372 (executing program) 2022/10/01 06:34:55 fetching corpus: 2850, signal 159048/187044 (executing program) 2022/10/01 06:34:55 fetching corpus: 2900, signal 160148/188043 (executing program) 2022/10/01 06:34:55 fetching corpus: 2950, signal 160642/188773 (executing program) 2022/10/01 06:34:56 fetching corpus: 3000, signal 161614/189776 (executing program) 2022/10/01 06:34:56 fetching corpus: 3050, signal 162318/190605 (executing program) 2022/10/01 06:34:56 fetching corpus: 3100, signal 163237/191541 (executing program) 2022/10/01 06:34:56 fetching corpus: 3150, signal 163867/192253 (executing program) 2022/10/01 06:34:56 fetching corpus: 3200, signal 164486/192967 (executing program) 2022/10/01 06:34:56 fetching corpus: 3250, signal 165654/193833 (executing program) 2022/10/01 06:34:56 fetching corpus: 3300, signal 166533/194571 (executing program) 2022/10/01 06:34:56 fetching corpus: 3350, signal 167467/195317 (executing program) 2022/10/01 06:34:57 fetching corpus: 3400, signal 168855/196240 (executing program) 2022/10/01 06:34:57 fetching corpus: 3450, signal 169966/196977 (executing program) 2022/10/01 06:34:57 fetching corpus: 3500, signal 170810/197618 (executing program) 2022/10/01 06:34:57 fetching corpus: 3550, signal 171983/198393 (executing program) 2022/10/01 06:34:57 fetching corpus: 3600, signal 172358/198878 (executing program) 2022/10/01 06:34:57 fetching corpus: 3650, signal 173583/199613 (executing program) 2022/10/01 06:34:57 fetching corpus: 3700, signal 174545/200248 (executing program) 2022/10/01 06:34:57 fetching corpus: 3750, signal 175894/200946 (executing program) 2022/10/01 06:34:57 fetching corpus: 3800, signal 177155/201613 (executing program) 2022/10/01 06:34:58 fetching corpus: 3850, signal 177744/202059 (executing program) 2022/10/01 06:34:58 fetching corpus: 3900, signal 178357/202535 (executing program) 2022/10/01 06:34:58 fetching corpus: 3950, signal 179872/203181 (executing program) 2022/10/01 06:34:58 fetching corpus: 4000, signal 180535/203697 (executing program) 2022/10/01 06:34:58 fetching corpus: 4050, signal 181646/204230 (executing program) 2022/10/01 06:34:58 fetching corpus: 4100, signal 182296/204621 (executing program) 2022/10/01 06:34:58 fetching corpus: 4150, signal 183008/205036 (executing program) 2022/10/01 06:34:58 fetching corpus: 4200, signal 184235/205621 (executing program) 2022/10/01 06:34:59 fetching corpus: 4250, signal 184830/206030 (executing program) 2022/10/01 06:34:59 fetching corpus: 4300, signal 185511/206406 (executing program) 2022/10/01 06:34:59 fetching corpus: 4350, signal 186518/206793 (executing program) 2022/10/01 06:34:59 fetching corpus: 4400, signal 187311/207141 (executing program) 2022/10/01 06:34:59 fetching corpus: 4450, signal 187722/207412 (executing program) 2022/10/01 06:34:59 fetching corpus: 4500, signal 188605/207724 (executing program) 2022/10/01 06:34:59 fetching corpus: 4550, signal 189261/208049 (executing program) 2022/10/01 06:34:59 fetching corpus: 4600, signal 189897/208309 (executing program) 2022/10/01 06:35:00 fetching corpus: 4650, signal 190396/208581 (executing program) 2022/10/01 06:35:00 fetching corpus: 4700, signal 191341/208872 (executing program) 2022/10/01 06:35:00 fetching corpus: 4750, signal 191895/209121 (executing program) 2022/10/01 06:35:00 fetching corpus: 4800, signal 193086/209368 (executing program) 2022/10/01 06:35:00 fetching corpus: 4850, signal 193689/209622 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/209840 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/209995 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/210156 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/210311 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/210472 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/210601 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/210603 (executing program) 2022/10/01 06:35:00 fetching corpus: 4870, signal 194679/210603 (executing program) 2022/10/01 06:35:03 starting 8 fuzzer processes 06:35:03 executing program 0: write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x81, 0x2, 0x1, 0x10000, 0x20, 0x3f, 0xe587, 0x800, 0x5}}, 0x43) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x428, 0x3f4, 0x300, 0x70bd2a, 0x25dfdbfb, {0x1, 0x0, 0x36, [0x7, 0x3, 0x6, 0x1, 0x508434b1, 0x8d7, 0x8, 0x7f, 0x2, 0x0, 0x16df, 0x0, 0x2, 0x8, 0x0, 0x0, 0x101, 0x7, 0x6, 0x1, 0x8109, 0x3, 0x7218, 0x200, 0xfff, 0x9, 0x2, 0x3, 0x5, 0xfffffff8, 0x11800, 0x1f, 0x60, 0xb6, 0xffffff01, 0x1, 0x5fa, 0x7, 0x8328, 0x1, 0x4, 0x1ff, 0x7, 0x8e3, 0xfffff000, 0x0, 0x1, 0x400, 0x1, 0x1000, 0xe80, 0x3f, 0x80, 0x0, 0x1, 0xffffffcf, 0x5, 0x62, 0x1, 0x0, 0x80, 0x6bd5, 0x9], [0x1ff, 0x6, 0xfffffff9, 0x7, 0x8, 0x7fff, 0x20, 0x7fff, 0x6, 0x3, 0x40, 0x80000, 0x80000000, 0xaf87, 0xec, 0x80, 0xd04, 0x3, 0x0, 0x2, 0x6f97, 0x0, 0x3, 0x1, 0x665c, 0x8000, 0x200, 0x1, 0x1000, 0x5, 0x0, 0x2, 0x7f, 0xd61000, 0x6d5, 0x1, 0x6, 0x6, 0x4, 0x7ff, 0x7d8699b3, 0x3, 0x8, 0x80000001, 0x1c, 0x1, 0x2, 0x3cad, 0x3, 0x68f, 0x6, 0x5, 0x1, 0x7, 0x1ff, 0x0, 0x10001, 0x7, 0x7, 0x3, 0x7, 0x1, 0x2d], [0x5, 0x25, 0x8, 0x9, 0x81, 0x7fffffff, 0x9abf, 0xd4f, 0x5, 0xffffffa5, 0x9, 0x1, 0x4, 0x9, 0x3, 0x8, 0x8, 0x0, 0x80000001, 0x9, 0x4, 0xfffff70f, 0x3, 0xfffffffd, 0x7, 0x20, 0x401, 0x8, 0x8, 0x7, 0x0, 0x574c4b0, 0x8, 0x0, 0x7fffffff, 0x3ff, 0x6, 0x1, 0x80000001, 0xfffffffb, 0x0, 0x80000001, 0x8, 0x2, 0x5, 0xfffffff9, 0x0, 0xc23, 0x2, 0x3ff, 0x7fff, 0x9272, 0x9, 0x98, 0x1f, 0x5, 0xe65, 0xc34, 0x2, 0x0, 0x63, 0xffffffff, 0xcb], [0x400000, 0x7, 0x7, 0x6, 0x8, 0x6, 0x9, 0x2, 0x47, 0x80, 0x4, 0x8, 0x3, 0x100, 0x40, 0x7ff, 0xfffffff8, 0x8, 0x3ff, 0x3, 0x5, 0x8, 0x4, 0x8, 0x8, 0x3, 0x40, 0x80, 0x8, 0x3, 0xffffffff, 0x0, 0x9a5, 0x7, 0x1, 0x6, 0x9, 0x5, 0x0, 0x0, 0x4, 0x5, 0x1, 0x0, 0x7, 0x0, 0x4, 0x2, 0x15, 0x9, 0x5a7c5738, 0x800, 0x7, 0x0, 0x2, 0x1, 0x7, 0x0, 0x2, 0x4, 0x400, 0x47ba, 0x6, 0x5], 0x7, ['#)\'\x00', ']%\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000801}, 0x4c800) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f00000005c0)=0x1c) fstatfs(r0, &(0x7f0000000600)=""/75) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000680)={'ipvs\x00'}, &(0x7f00000006c0)=0x1e) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000700)) getsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000740)=""/21, &(0x7f0000000780)=0x15) r2 = syz_open_dev$vcsu(&(0x7f00000007c0), 0xcf, 0x42080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x80, 0x56b7, 0x61, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x7, 0xbf30, 0xfffffe01}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c814}, 0x2c008094) write$binfmt_aout(r2, &(0x7f00000009c0)={{0x10b, 0xc5, 0xa8, 0xe0, 0x3c, 0x54a6, 0x13f, 0x80000001}, "552e61ffb31ea1f41101dfba3f20cdd14613396b13a27b6e05fd19c44da79a2c2dad3a032e22c803163e701999339ee2b681366b0a66cf0fd6d68375a0753122b1bf4a00fcd5943fd2d429be1d27428f1a359f95ec3bc20c816aad313b57e82d36cd04d14b73929adf962ddd7e804fa06728a280e49524fada4f4104aab9de4d1e9b51126c125c2df71def1be98cf90267b0078daa70e17dfb5d00b1798fd5ba8893fb3b31607546a34d538e856855c5c0d95b6d07d7c7a3b4ea00fc75086ebb34980656e4b5671cda255747f4dfc554edf448", ['\x00']}, 0x1f3) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x44444}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 06:35:03 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x148) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) fallocate(r0, 0x0, 0x8, 0x1853) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r0, 0x1ff, 0x80000}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="00015bfd00e2b1705c1ae950ed4e9f04a3bf815ec9b204eed6ba749c6190ddbffe8e45453e8f5de2afa9300841c93d2b8b8527882a8c6855e779794975020ce260254e", 0x43}, {&(0x7f0000000140)="da65ec89b668626469087e4cb5edfe65e86ab0f9a3ee545f2dee87406a52ab36c62074a9d89ca3d9fd784d94597d9104ac0197c9f85fd45488b09a09d9b3dc86b6fc7d93d728c1d79f93738bf77c455197298735a04d076737c3b8e0ac", 0x5d}, {&(0x7f00000001c0)="cee089955e5f84b0a861481204367ce3a621237f326857265d54c3e6cabf3ca353700b77936c7033", 0x28}], 0x3, 0x9, 0x2) sendmsg$AUDIT_USER(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x3ed, 0x100, 0x70bd29, 0x25dfdbfc, "f3e105fa2075d8030a639a73c5439ea833a0e7489d84b96a6fd05a6bad6b047a66c3a3ad664b8e39b04d52975bfca8bfd02de7b221ccc970bfe19c775bea9b09fd0da7a53efacfb2552574d0662eedca25eafc0e436f75b7ea4260c940d6e906e0e3ac2b1f5450874e0e0793fd6d7e680e474b43ebd3f9df700c271bac49ec46f241630fa56f29fcee791f5ad1eca03c8f2190bfa8d4c122e78cd5e1ef745a7fdc39e2d4a0d23863b2220a7c4c23ab", ["", "", "", "", "", "", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x48c00, 0x0) connect(r0, &(0x7f0000000400)=@hci={0x1f, 0x4, 0x2}, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000004c0)={{0x0, 0x6}, 0x100, './file0/file0\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x180, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x75da, 0x58}}}}, [@NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SRF={0x128, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "4f330aa13a31f55084190587afb8661a8604249ca208fa0f1886eaaf47dbfe10e73e9d4bdc1f1eed50b188f3e7fd1c4fa9ef4ce63185757cd927f7c4c02ff526f312b10bb050507af403f3b263fa8ceb11cdbb4285d83ddd71519d639999c8c747937be76831e95b28de9cfe3ab15b2bc04c2c1b98a706049ffe35759bc086ebd9a91e00e66ffdb8c6456afa7c564ba015d2586453f360cec9d63259234408c1c42fd0627be39721629e8312d982f7ed7b6d6919f18606ad4d3b12ec7ef276344a4899a5c571383e2d3b75fefd780cef33fb8948b808fa12441955cadb9ad1f84b455532eb0caee1a10f56d27c3d175795fa7b9897befcc42038af1d072a92"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) write$binfmt_misc(r1, &(0x7f0000000840)={'syz0', "5dc49f04371b0da18d631646fb256a46338dd8f318a40129671bbaa1959b7d335be922e56cf617798f2a4faa2d83c59d9ef0c1e918f5c3e8e121bc08e56fa7cda7cebd6f084407cfa7979957b1d6e477734e8f1362da640c058ec0df90316dc9b0ad3863f53db35f4258404a1080bbf4f64add0b6d9ba1a2cdc190790101c48096a7c96b2588213bfab9c3bc1294a04bcc8e5b09f291959e4b1ad52843912dfbc6621e0f752ff3407f3d38dff9c84b97726c867706555d8280c76844338392f5c36d546ceb5b7e513b0740a4eb622d7b91e5957b48e1989aeb65aa7de874ce768a88c676033aab26e09980b3008c85be63c75887596a9b6e1d34221c6a8b932485400001c9c61a73f95c89702ad257f99a0d7d051fbd20313d2f6c115614ab54f67b69d60400e39f75443bd88fe64d062642e63e3416e5635fc1b0c52607aabd625e20b7100c0875f392710c83d9739a800bc9495b1912c3112d6fd635222782da0ce758dba96edff46dc0a93ab8100ac7eb5e948fb58adf7adbff474eb07ff069920a64f64745c0a3b3308d31c8462f7b13fe140c3a5b7a9f4dac248adc6bd3a5efd264cab6c16601c7fe6c4aa630b10e9fe516fdf09d5c5a71c33f8d46045e84f05ffdac509ef7284538a18260be07f3c1e5615c1f56089af30f3bb62f7b82466c7f67749327edccd671595e8984254807c6ddcd993526bf78587c7720c434db6bf2eb807a56bd6713007d3f8b4db91bf5d966f1f3bef2bd96676dbba1cb416651ab00902441339849472cf5a78dfb7e7cab4bb5f8954d5c1572e2458b3e928b86a94c6acb0b189b1aed15aaae08ed62700b979e79632acd6e6bbf4b77edd15f1f0f016568ba9f2628746bfca0695a0fb3fffffddcd3d5fbae0e5545b8ec6bf4e9d0cb8aa62e190aca852dca144d1de12b7c225aba2f27e15fbc16fdd895edfe388206591409031139a55efa6f54de213403353e2ec3c6f4c1a68e9eb76fe05e4603da54b050e0b59abbd3c0483afba861fbcc984df36bb8b8be3aa246e155afbd2d0ae97d5a51c15eaf22d0577b4711a27671f80a327307a1ffb5ea8c854a8867163b0cc1d9b464f8585145c2b836a061e3f841ddfdd784d0573400d18011267061c5c17045f9fafd3b52cfe91d5d26fbccf3e129be2c9843c730a1c41e178445f3af85601f76e7dcc8736eca4aa259e40e02b60539294dbd3758a13ed28e2d6271d45db8ec5d8756df9691a37188dfdc242ebf8599f8cf9339ca7fa8f460d578890300e07b481a36869d3b92be12aedb2805e1700a8edbba8fac3575d2b07b01e28d2f623022b9536c3ff0717315f8c782dd206bd71b30810fdb8122f12eeb088cdfdeac0eb734b56be147aec237cbbdda928fde90cbbbb4e20a833f39a48db3c6f213de0e961fe846f002e9765d68add23a4545f8fa9e6e8339ff3c2a2037e3064028b970343a060e495b1a3d93ea6d7e142caa1e33252737e6974a203c27ff5e8f49dfd4251dbd71d995bfd974d20cd1bde41878e0ed0a39f1824a6b63caa663418709168b03099c26ba25e9661e4a22c048ba87deef3f59409333ff250d4cd08e7d0dc3a03c4d3a76e3eef7ee8407c963c71caba9f3eec49b385ce4d7d98adcb55200b8324217bf2f720ca373dc81c43efc952ed75d8d19cc297a254a99572792d0ec88a5a9c8d0395a3e62342186988106928dfe912512b7b6dd43d23408c8e746da0bfe44a5ec0c7bea7d01e2ea0889bcb1820a65420ab09a3319b6219c886539bef89a9541e2ad1ed15c1ad00ad620ad4206eff5dbff44c998d67495ebb42b4e4e480a3344cc7ea9531b4c543a19456fec8065f6e094ac00cafb9cd9ed48d2c47d8ad3cee1fbf82ed245c99e23cbf7dd3c4b8cdedcf7142076148831ff16bb3b3f69393e9d2d0a49fd917d0640185b4bba7c1e2c02bf87b23f6f72cd35862f82226febd647919e034c6a9f87f144116c7be5487193813b4864001e5ee5cc8ad30c16a6a72e40938455ba0bd3a67ebede112c5075094760f3902327b8cf314a9f1b0b16b425008797731c7f2ea859de980a15d563e02171772dcc8f97935bf639f2f0145571bca35a276522ae5937886ce0d3db917d706cb46f4a537a6bee096a38fa9d41ece046435846c79249a269d5434dd45424ed1822f182d81bb3970583dd65bf43621aefb53cadcf3b17c9d596266a798c431f4da09a820654e11af8f27da3b41a61c2db5ac302c759b480d7b155484688b1eb7e376777d37c6415ded6ecd36a7524cdfafd96d47d3603395b00343a08a8c1d62c46741dc8600c804115bbeeb6243b4b1aa2f0d35adf4c49b3d9a05695130e2d28e92388919fe5818df141a00205e26d17fa21d8d22a30a3b1a34bec03b0e120c2ddf0b884b136e705c7f59c2f5a12300286ddf74272da907a0527fafa560d6594ba969929cbff37d7ec5bab51239e57045f6f1b509760f62213e59ce302190cf4003efe3fad8b0e8a88241215f250ade27957e327d53eaaea9e990f572a5ab90ac069a3df1fb9dc73555de9f69c255e48568425a35eb4349d9810dbf6e55519d0cdf90fe2d804fe0fb0a224ae1e794f9a381e9c64f15d6bd6aa758709f724125c0f747a2363e219b996a9efdd876b5e0a50948247dd5384c221dcdcc94674689692d40a6968eb2f88aa493f6e4c7440808061c072037a52ef2d9520e497b9e74ce59d8dad47271e0e30647325760e075cfb2eed26b56bdd5fca3cce7edffdf78d8e0ea90ad241ecdff10c852ba0ddeb6ac06e6dbfc4ca9132c04414c9321999e341f64fc477f90a129c7413d142e7ac68e02536201b0f11a352d1a31ce5a5d99f685f8e793664ebc92f298b441243ac9049ba4ad1e52b4aec9bb575881f3ab1a0739c7f9bf706894a06aaafc47c2be1507ddce8d1887998747d6b334cd6bd96d6752214bd36baab6e9088243067a1f973f8331bbe3b0f8c6bef837db52c8ee5040a837116d0e066d50ea412c8f5d76b56b5553c0c6c064beefce37d4402758380fbd36c9dfb745807a0869b1f2b60641ed340a3468131c0c6ae15c2cbb16bc2e01a026815541d72456dd14a3a465995420fe764e661c7ffd06379aafbd6618d3ec472016a8bcb4ab34b9da744a3acf7f424628ce00e0c9ded132b142ded770a32dedd37cecb440ca7eeaffa39047d333bd315502f11c1ace4b3f20926e07010958c68b7d6069d9d02e5f3d4a8ff52bcd3c04132b9aad9168f151c2d3c2533058981023efc07cc3112e237e4cf9a4f3c387e6adff27688808e7200a505d1e2bf9ce71706b3d1bf5084cf28bd57eb2dc2f6469073ab1e2cdcbe532d6c26497495f9b2f672c9494a99158f02997006d9715e5cedab47557bcb056e1efb3d23afe22cbf58355bc54979a14ce6d91a6961bdd9052076cb522f12f0177b7c807444313117e2237c4b7f407068d3c3e0440106faffb6675973bff31cbaf5da415f58b6a4b7890ac8c97a80957952563166346cddd346badebd0f8d6b8f2766edb80b4289c82ecbf4cb3d954736529961a22df78a939f503a481e34393d0e9392f2ecc919d860c2975630cfdd4826188034e7cd0bc37a8f6c41e3fc673fb372b3a5f6df4ae26a4c05fb96b8079b9b47cd19119dc6f8eec103c699fef256f60117e933337e2ece2f56eb809b1d0385d1e7ec7d4b9fc11e3722c3e262a3557344a2fcc4cc2b56d40aaa100af60ce7df717e69f504dfb4fcc857f5943735ca058ab8aab87ae5fbdc88a34ddec6d1b01ee2786804ff6009a72abdd55dbef60d8033afd8003832fc19dead85fd9ea3783cace4226eb8296433a15e8bd8eb30f3e689f06f2906107e70cd373ad99501c0cdbed019cbaf6bf9f49577ce14697d78f79759a7eab567b13fe4b55315172ef12b46914d1d2916ca6c754c268c03435df81d4bcc640e128dfcb4a457ba63a20b8749daec872fd8003d47235f56003256f222eee2c125927ec5e41a378b974805e6f7155f9deb04ac6e4a5b119883cc33b0c8354524437ca32fbc8d48d241eca1512f05941c6f06937efd401798644e100dacb158fc13d80779f43ebf60e548962a1b43f5b9988d6d888eb48326990c28151b96b26f7f85e1f2f8d02326a6196dafd52408e7f0f84fdacefe2bce6d38d25523b35b27a1e777105bfb7c25e28e1ecad71edd9bf67ec370c5fcda62bcf1d0e562f558b7676a20d6fceba925ed7b328d568fc9e18862fd29b822b305df041fbc0ae17ffbf76ec32f505bc047b6b663521101ba64c3ba88270a37e466062ea96eacbbd57f4f41f9ede8c1cc67fc6c1620d8624dd25f0dc9f45627644bd71e97e6c8a932a22be7610a06109ee0eb7985ad2489234e9ff8d938a4a12ac5f6276f6bd3b021a226b33378631699a6e0b91fcd116b633dafd71bf46904ac7c0c7efb34e322f15d35476755165470e675ac75288de0992508d75297e53622bcc824fc08ddc13ad5047bf7b98e894a3c2e34a770e235a74f357774a3f6bf692218fc0f6ec6be583b651fc77e31b97fc7eb70bda43d1031a6c66305ae321ededfc83701636dd4e3a9c64c53cd1ad506d16ea4d14164cceb5d971b67e82ef17fe05ab780bc45004844c6833e86cc050179d68f22023472e67f5b0116eeec25b97f3ec3379601ea01f296c0d366d58f3583097e6a5653ce298ea9b3749a4c7499b797f0529f11488b53e3dd7e962c9001f94c98eb55b6e275e20e25dbf782d525085d64711c06cb73d9b55138beedf7b741f3e853b6fc21ce4ab9f020a8c589a29cea3db13d18decf714f3cd3d098c1bf0f1f1705450ed0aa21363685af7976aa7019cc9f97176fa2bfb7869c37b11cc1b904cd0bf41e3d5e25d9b0e942159f21cd0961e570a62859eaccd9a730303e92aa0fb94d3f735adbc742f89ec4bf4852e416fb7d6955950d457fcedcf9ecf17fc3275f611ca6628e7b3633d5e1819efb9fdd97b9ecd8163c6ae3780e60b9521825f9c76755e14ee8393c155e0c85f8d46eb1a8e546b68f9a8766d21172e9694a9b0d5c8d0fb5df85f7715a309963aff1f175da64cd4bab8691f9c98a7085f5998733c97da82fda2914b5e00736b9df95e1fd6c54f53736dd6d50d2542b52431ddbbec1b6821ec12f36933e7842f5d25ebd709d56ff72d2a11d8cb2dd096a92f09f09015e899f66b02f7f193129f8fd0c962db6fdceef4173d60898408cc0175695ea9e79c3213bbe42b790be40d8dbe2b8e17339dea43fe085d90c294d58ae460286282ff6db096508c1e7ce1135dcbb9f290bee316265b8110faa4eb518302fc7918b240a4aefba151cd265c1300fae48e823683fdee13792f62eed636acbdb2ad484089c21806671e2571b04202274312109352d133a8a4d5803948fc604bfc0df6f4c2257e73660ea6b814391c84813d20ec0fae398894b43c4274a6e6a806096461bc89a37091dad60b2b86204d5f43fb386c3a9781eef98f467d33cba596b71206e88681db6396e67c041500bc25b9ef658b86d1fb4c6f667a44ed22b55683cdbf3a9ce9b614ad1004d297d044a878f5ba16fd12bb9930dfdaf5eb9faf6592e190cb4b0642381fbe38fc361e620b4fa5bbb808e94147393f04eab38901cd5a1342a3500738a9976fab5eed6fb4b313f386548d4ab7ab54495b867d2f5ecdab62e50fd020c87ee47955ac72bc2a0499430233b7aedae729cb80917def2c8b215f318867c3d061043e07002028c99e48bb9f4aec47a6b324b89884c43b3cd83eb6f49a988ee02cc46f6c854d818e9d5bc5cd9a2b8642db62fc7656e3510"}, 0x1004) r3 = open_tree(r1, &(0x7f0000001880)='./file0\x00', 0x0) write$P9_RREADLINK(r3, &(0x7f00000018c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xac, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8c8c0fc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x400}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000084) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001a80)={{r3}, "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"}) dup2(r2, r1) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000002a80)={0x87, @empty, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0xfffffffd, 0x101}, 0x2c) r4 = syz_mount_image$nfs4(&(0x7f0000002b40), &(0x7f0000002b80)='./file1\x00', 0x8, 0x1, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)="f476501c70ea3754b96e4520c1bfd9bbb8c77b673bbae7d47f6c43a33d8824a397ed4fef2ca424026129a236f5ad27116481e5bd929309f5db4a56b09931a311b0d13d1421419ab7095c9753de87513e253d9a3ba0f074f13fee229d16be5a615fda33f99457da0f7abcb357ad69d0cb026ae57b0ac953ca0b1cbd63646caf0c382aac4609412c9fec154363734cc03f2e88de59c77406377463992ac5399b35fd50c8816b0c819d2815e002ce0605228209a9dd8b3f1cb58ea39c5bd471f512293614cd7f42f31d427b84ced2906104bef29c4afb6525b789fb", 0xda, 0x2}], 0x81000, &(0x7f0000002d00)={[{'syz0'}, {}, {':%,#'}, {'firstname\x00'}, {'netdevsim\x00'}, {'*\\'}, {'0000:00:10.0\x00'}, {'.(]@'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x21}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_gt}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000002ac0)='\x00', &(0x7f0000002b00)='./file0/file0\x00', r4) 06:35:03 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x10000) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3f, 0x0, 0x1f, 0x0, 0x7, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb8c6, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x40, 0x2, 0x2, 0x5, 0x10000, 0x0, 0x3f, 0x0, 0x400, 0x0, 0x800}, 0x0, 0x4, r0, 0x1) pwritev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="f28318c5d082bd405be91088068f47ed8dc7eb093a47a5e9bfe9158de836827a68fe867830609ed25ad3eda7309d40651c7b993d31fe85fdf147ad2d8e6f93301677804a9f03ec14d87bc4df39b52f754f5c08c06e5551c147930a29112d45002ad4bb16a234fccb8bbeddb904176a9ed030d6190f9206459077c71dfd4e3901f258132f5675881ad0617a116452897159023c8ba9a57b46d50824ffba638074daede5d75bf65aabe3f0cc7f949b543911131d03a43a362c9a1e4c6f8bc68d3741a6f6489d72378f6cd7d1f725aea7346b1363ec5bf896a28678130ee4c0f929258028fdc2afe87624fca45c", 0xec}, {&(0x7f0000000200)="b9eec6df2eb78c227fe90e1728eb4c72a2c07596fab6c60e909684cd8c82d9d062fe71130ef5d9954d0c9958e5853e775b6397914fde15a4da1349a29e6df1248ecd80654d68d8d4658922c0410d", 0x4e}, {&(0x7f0000000280)="c0d186cf466c3feb4ce8043602436086c9cf811a8c0bcd2ddf6b4e6619b45cf8051fc1238b08ad2f73d17e694e32060b931602076dc197ce1773eecc62ca9df63e0bc4271fcae8fbe00c9673928cef4b833c38b42e947f2c5a9992f56d2962ba6ee1d3781462dfeaa85e8e7ed48693250c9025a87d082e3adc0b217c622f297ffd9debc5cb19cebbaa8aa7d03b9ef16f659d39d3dd2ea093489a9b92a9f7f7ab2a40d9ecc343322a18d532a1a2c265d148190d3d06a0db1c47a800003738f5cd8750177b4c3c07a6413314c83cd749f3f4c6e41fa4bb6152599a5924ecda", 0xde}, {&(0x7f0000000380)="92782dce60208d7f8a758790fbd2ff7347e4caee902d806cdcf934e024a8b9d287d6498d68c92bac28d0e1590ea57f2e7f210f4d9db7", 0x36}, {&(0x7f00000003c0)="1a3de640305209e195529d494c2916eff355f561a1eabff028fb6b30f26c18885e669fd0ac6e0a198e33670c93f2a1051b1e6aa32fba72d748f625a5c7da428d3a24e225bd06c30487d8b81ba958a71e79cbab9c9eb11777a142ce6524277db287a0ab1987bdfac8a6c8dd79d3baf8bac42594cccdf9b0d4b6fb58d25f5f3371a7a41f75a0e4c879cd8f48664870f5c2abffe4326950ae66cc83913e8907333dd5ec0423373fbe2ef06833614cbe0d1328949b8b7207e1a554bbb68369a2c48ea39f8fca0f8b99eb0f8191db4bce2a2b927ed2940f04539a7fd3266402a705939859488925f8809c45a679d707527d1139f95f2fde9780b2b58dd5b0e7", 0xfd}, {&(0x7f00000004c0)="51bc2dcbb066f5c57ad8d55c2d4e3acf8a9d16b6a32ec41cef8a2b329758c36ed478936dbd0481504007100f0b05b5ba27cc58c45e7aee6f67f70b3b711d15624628eed181f08cf9a68f62659014c347c33c6843ac86d5451e13e3864888c3f685937f0795a4d0d89a2d4a7c9497f8fc1cd5d2b1251ad4fdcf14897548eb2de78727f032c20b0574fbd6c541cd3f6bc9e53a310fc12320012dfb24c892a30a87b8192947edd83182dfe0e571293266c2bca973984943cfe4d76e70629b29c92e908ac4c4", 0xc4}, {&(0x7f00000005c0)="cd6b20d5853e142d6b5edf3e813a7528d3beedaf316f9469c5bd3b76c94039442c874217588f1b7d37353b1cad5b6e118dd94c4755f44efa7d11703254fc65e8972e02cadd5728e74e8d8d9377bfa42dd9e41e9437af87e994f37678b0f6dac13c4abdea4bc017e338f66574666c304c661b2f973e9078e2aeef07f1007e3001c4b9f55fd5671e45e643a0369351af6fad08f42c1a1c9311dd84aa7c9995b5676b97bb5d", 0xa4}, {&(0x7f0000000680)="78b64b7af521f25495f9d4065d3ce8ad1f5762bca67f202f34633037201d67eaf14806f1ca20ec34e34e6a207c8d1b10cda5eec760ee168428a7d9e617ce203ac2845363b6c7f8054fd3c4ae450a98a7e4ed6268c3fa55430b76adb4e844", 0x5e}], 0x8, 0x1, 0x4) close_range(r1, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x27, 0x401, 0x20, @private0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x700, 0x8, 0x5}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000840)={0xee, 0x7e66e6, 0xae0, 0x10000, 0x3}) perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x6, 0x6, 0x9, 0x6, 0x0, 0x6b8, 0xc48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x41, 0x2, @perf_config_ext={0x7, 0x7}, 0x4019, 0x4, 0x0, 0x5, 0x100000001, 0x5, 0x80, 0x0, 0x7, 0x0, 0xb2}, 0x0, 0xffffffffffffffff, r0, 0x2) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fallocate(r0, 0x40, 0x8000, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x12002, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000940), &(0x7f0000000980)={0x0, 0xfb, 0x37, 0x0, 0x3, "56ef215e313f73e5b6e261071f352d36", "51b7b3e77dbf9228eca233ab2859ab8ddda16c8417046830c3585c7339505d4d35cd"}, 0x37, 0x0) renameat(r3, &(0x7f00000009c0)='./file0\x00', r3, &(0x7f0000000a00)='./file0\x00') r4 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x1, 0x80) write$P9_RGETLOCK(r4, &(0x7f0000000a80)={0x20, 0x37, 0x1, {0x2, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\xff\xff'}}, 0x20) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000ac0)=0x10001) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1, 0x2, 0x1, 0x0, 0x0, 0x800, 0xa820, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000b00)}, 0x1010, 0x0, 0x8, 0x2, 0x1, 0x800, 0x8001, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0x7, r3, 0x8) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000bc0)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x8}, 0x8}}, 0x18) syz_io_uring_setup(0x2830, &(0x7f0000000c00)={0x0, 0xfeb7, 0x730338fbc3aa244b, 0x2, 0x331}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000c80), &(0x7f0000000cc0)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000d00)={'filter\x00', 0x4}, 0x68) 06:35:03 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0xe}, 0x18) bind$packet(r0, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0xbc, 0x7, 0x40, @empty, @empty, 0x700, 0x700, 0x6b24, 0xe70}}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x1c, r1, 0x1, 0x81, 0x6, @broadcast}, 0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f00000003c0)={0x15}) r4 = openat$incfs(r0, &(0x7f0000000700)='.pending_reads\x00', 0x600100, 0x1c1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x84}, 0x20008001) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r5 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x80, 0x9, 0x0, 0x7, 0x3f, 0x0, 0x8ed, 0x20, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000900), 0x7}, 0x52060, 0x6, 0x0, 0x8, 0x7, 0x4d, 0x16, 0x0, 0x2, 0x0, 0x7584e060}, r3, 0xffffffffffffffff, r3, 0x6) r6 = pidfd_getfd(r0, r5, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000009c0)={0x4, 0x3, 0x6, 0x9, 0x7, [{0x0, 0x4, 0x1, '\x00', 0x1880}, {0x80000001, 0xfffffffffffffaa6, 0xffffffffffffff81, '\x00', 0x2204}, {0x100, 0x5, 0x4, '\x00', 0x1802}, {0x5, 0x4000, 0xfff}, {0x3, 0x9, 0x101, '\x00', 0x104}, {0x2, 0x10000, 0x87d7, '\x00', 0x1384}, {0x7fff, 0x8, 0x7}]}) recvmmsg$unix(r4, &(0x7f0000001080)=[{{&(0x7f0000000b80), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c00)=""/27, 0x1b}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/56, 0x38}, {&(0x7f0000000d80)=""/232, 0xe8}, {&(0x7f0000000e80)=""/177, 0xb1}, {&(0x7f0000000f40)=""/33, 0x21}], 0x6, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}], 0x1, 0x2, &(0x7f00000010c0)={0x77359400}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000001100)={0x1, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty]}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000001140)={0x3, 0x3, 0x80000000, 0x3}) ioctl$FICLONE(r5, 0x40049409, r3) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 06:35:03 executing program 4: ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000001200)={0x3, &(0x7f0000001180)=[{0x5, 0x6c, &(0x7f0000000000)="ee934871080abad424cebd4fa827afc3e3a7546c3d0e8667ab0fa9d48eb13f717f01f94c82d9722b698a577ef4e8c78a1ebc171c92265959680eedce1b83bc5c49a42ba3c42ead78c4728f1f28acc3fe5abb5bdc4117ec32f219a0e3012b8967afd835944bd5820bcdc376d2"}, {0x81, 0xce, &(0x7f0000000080)="34828911405130c1aff28cecb322548f1346cec77a96752849105270bce61275cc95f7510ac628b5ae52f877167bc14a5f3f6e56301d9c7bf9d48c72a82765b43553ffcf3c1d6d44764dc62ad22c3e838405f0e09f1b1f10abb9c97654a470960872b377d7c2f66807fe3b76e8a37d5e7f9d8dd336f8b05c0ed76627dcf857edd4ff93b2c518d166c980023465287ca4b699754d070ae03105557df4b8c460e535c30ea8ce3d95a0828eb8ad866850d7add0512d5e9b089bb2a1cca6cc27e57f1e7dad72fad7c87f81eaf96637bc", 0x1}, {0xfffff801, 0x1000, &(0x7f0000000180)="010db92825172856ff0b04daedfd6c279658d32e630db98cd90dce1ed01a16a6841383741d7ff2c9c38fbe684e01dc558f72fee8f1672d958924bf8fc8cc9f590c9b0a8fd15e9a7c8208bbbd964818aba28648fa6661f962ac0122c01b061340aec774dd5202a60f23124b30014acf23286e021dc5e7e2aa6ec00749ed3a43d9dfa0b2e1ab4830af4866071e5b0e44915ce8008039e1a8d3409a6fae7cfc1b52319c85dcfba37436a26e3183651d028a7471ec33a12083475ebf113cdde4e64f7070bb02b53c91c7f8126105a6d031f4837ccc402720dfde951e17f931a04b4e7d3aca73dfe81e863897019204c02d8d2106f331347a6ff7cda6130b3f3a8fddcb40ef50cc3c63bd62c8abd3c298900911557af637ac7fd366a9df938b2d6feb2890a55508d5382316308cc20698a534639c2f159b77d85bd8b15ddaeb0a5d26f9bb15c3169ee0f1071844e83b8bcafa1467784ba7bd918c9522ecbce820afc784d81b93d0e86cc62623d47e7290948be12681a48d5337fcf2d1321a6484d4e164799ec3ccb774ce5d9014975d33080a547515da2abb9aa06b2e797deaf006959b2311b62f8bd920e9bc5cb90ebc6b72834e3900d5d02fe6dfcad3e5b8b91cd1c791de31aaeee6ae198bfe94c0e2d4c7ef8c8fccae6e05071c9c83f80d1983a8cb45733547265b55c6389c7678cf2d1e8476eb2682b74f466331efee670454e05339d85afbb47da45df523b8c1d9afdce5d620205521b957752628900986a639d74eeb1a79c5642d59cff9b7415b7e9c4ac3984008a9a2dff03d150ce08445172f3a64af9785713e93951654fddb4255a4427c9751ae31eb4d32b42cb561f5cb07ce909d63cf1490989afcdaba5447462057077ea0897446d4f441a4988836199e649b9f23801dfb8bb139801b41d9635363618f2bf94cfdf31d1fdd63fc8c15a55e05e739c4381da926eb10c5029ca81ce41d771728ee86210c7c77bf21fc1a39f72b8c027be053f92afad53088dd4440caaea4188c98546e21d5eccf03bcb468a16d3a14de1e4e6e23bade0651abe090cbc6ac16f0f99cf035e7197394215fbb0952e6caf6eef1b495b5540c6a8ec851406d797a7ffcdb646e32009ca828204ca1d8d55de7e9b16ad72ccf613a7a2ab6a38f123b58a3fa4c71c82b578caafcd7143778292730db77f1d01acc0e12661e226c982a067d3ee5a7a1568e8cb90d95939248d3b46b94b3f80677c4466b062182c5c749e3a37b39772e88072a4070d6c5ad0f54d9ac8b7760b6483c3ebd99b5ce7a3616fbdcf6ace88b258b7967d31e6926782d0beb531637055b692ef6a17d1da9ada5ca51cd4095e3d43075ca20803777ed5f84ef14a9f58aef0754adde40bb9cb9e03a77d2242b455f5a056942bede8e7b5b8c5af5e483b8321fd80d102a7e7b98f6af7f897ce7a1a5cf0ce74603a282f638f011e2594ceff5d5de06a5adf50928b7fadccdbc887b6d0e283c565a30711767612d15676203f2e2717017acdb6d864463ee054dedcf3ae9e5e2457029d8d73897ae6a32e9e841fa85ab2e72c23bb930786d930c66df381e20ee65a0f67c684da7abdb34085f63303e699ee3b6b3e86a8c0ce1badc890ffd6b7f42550c9c3e8dae10fc4a332f6fe486c78b346f06b5b9f6b89cc98d6d97cc8256edd4197e11bc883a708bc23d8901cece0b159b0078275ff73986cb64bbbd5efafe6f0dba0d7cb95bea683c6f9e2978bbea7887b51877d4cac309ea9a23783e6e4b42dc5abf3afd3503845eac60a03369bda51f6eb975a78a4d1204601c2facedb36e3065b55d2ecd28b068f766a86bb4032a2019991e277632efd6c3af16d2f8409cd9810ca3974dd6f8b65dacf6eb6d7c2008d48aa400b69b373c4ed2f69f25d9b91a16826562b15d2908ccd68b94c5731136d6efc832339e9f19025bd51ce46737c5a905af1e6a2229c1bbeba2ade940a50e70f7e74a830f496609fb0c585eb640bc8b11cf533e76b9e7abea49779536e6e51fd89731a85c6e125f87fc8e829f9f6ce830dde9d22f8e9aa739a5dee8740f40b2a8183ac71f172d19cc16badb639ea7e3d42c93f3aa318c42290128651b8034d503f01f35946297c577c869e892b025970af123604124bf32d66135d7231abd1271bb17f4e1eb108437da07078726cc989cc560fba185175fc94a254d6ad018dd0a7faefc0dbe943d27db728c353aa20e791d0e3c202879c5cb03c3b039fb399361461b6a72013d15b7b1602e2c5aaf833017fef59a1ff06f6eab04af4f5735b20c32e4ec2e44caad9be272dbc815932c0fdfd9148deb8f0ed83adcc2925c41ed61ff8ceb26aaa42fc914de0343701625d858145feb724d59ec6d7c700b92ae42d074bd598c63892195cf2bbc065fbfbc586f459bda4556545a0ca8bcf562db2518a84a7dde966ed2c55a9444896b8ca80050c315fb287690490a7f59bf1a528f4e603874ae87ba9b3f95816bbb281d7263b1011c80c89107a9fd90f41d01b7db5000aac029ce9157ff58b823ac3d98cfcff9f68780a429998505a8131d222744bffbbc9a816cead31d284424bd788a255ac4da99644a2e32669f975d05bdf0bb854de8d2450ac29c3d09710ff31555f9ce5f7b1eeed1ad9eb6eb1a1dd34cc968f9d7a14c089f7f0c9f1b98b71d7fbdea0f3aff0c9c973c315607967606e92e2d4b36560c0363af3e25aa321d5f6cde4d91f84d63e3dd085025b5825a244c45a0c9d80eb09727c020508b92552925a830a733261b8394305fac29959ece3c35af848aa3e43bf448b12977f00ff4ba0ce1d537136ca6a0515a747244d4e997db838f4ad3d35f6231729ca26936997ba6635fa29faf2e9532a5e5b62bb752a147f50a945a5e8b93281803387f2f9489eae7b93ad2da4ec476cbfcde412d32ecf041e709c0159eadbdf5af3fe10cb1c506fb7152ef67cb0eae13d4468e60a5f14e8e167afa6ffbfc0fa5fbd088290e2b54faaca9ae2af6053d99fe73e1952ab028c7b4e5535d0afe55e578bdf3a244a0e4652e5ad343d220ff4957c5690387355dc769be360ccb30d4630dc994ccb0a8f8a84a5a7276347d287a42e85a6c1898ff4093ac63c06421f3c00186e3afb5d3d075b7c8cda9cf87972fcb543ae2ad5ed7b5628b1f545f4d42cb411f045db46269458e5e9f30cfca0220eb0639836c35a86de0622239174acf1a6e5276874500bdb3dca4aabf45adbc1edf191274c947be76d81dfb2b13b7b6c87510733117125d9f654f2f34a4e1e78224abf574926faf029004b7b170bc963b269122ca98bf95f092ab1fbb3e153d06ff2f99a0260455555caac79dee86aaeea856b14988c264b14017967a388c03b9a28bc4a62bc607a5fb5769d7f9885c3df1b6968dd3c280f7c0aa6cd3023398daea21d110c56be4a360ebf455b0bcf31c719ce9267b125bb78c43579b56f9633b03a4269989a1637df6332cb781f7196683b4f84e826e91cea00fcb519112bfa9ac1ca4b7fb7e3cc94d5915d6484e93364b640b58626a49e6ef6298bcec9b7f98d3d8960a47e28fb57be46aa3937f0928cb1e2398ef4b8339662ec50617209bf5d0f1ad9ad48aa1878ceb5441e606cd0ca9726e3c99727866a9fe387ebf431763f10aaf426d4dc1e22908336b29ec9310f915bbe92f9e508439a3715e51c1160bae6a650c627442253b667f7e1e7088d9a86865321ccc68b4f7fb59f533212c8fa5d40e04ead0b86e469a75210d60a506f222bb593015adc0dfce31b89c6f53591b33e3c97ac304670180c00b81bf29471acc2d83d5cc6756f55052bf635fcfc862fffc8e17caa1713187b35297669e5e0b8cce35c4dd9b1027a45d22bdbe9118d9654a22ffaa3546b3f36cd650e6f738679fbee857dfe36a23219de7f64897ebfbb467938dbf32b2a5256f63edc0ff8c6167a446b33f8bda0fed5a9f20bbf94b11268a3c31ef8b17e6c9ee29270ae09d7cb3a0626da40059505a9523c87e359960e4551c9b7127dbf1c95297cc020f5883f66863a4d7924f40c83803352c0d7f173298281fd70b31e75cdd88a921dc855d24f2aa0d20281fc9e525c42bda8e68f2bbdc2e7ada4340d1f3276cade9e9a1a018052616486f1dbd76cf1903f4e2cab2e7974dc9e0183ec4977fa17532ab79ea3efe7c8810b49613203cff21bec62876b36d54872a21c300bdee41460d4d781e144985517c7ce189c701ebdf9b2041eacf33f9fbcb839667917b57ab19fc82ce6ff21de57fa2f5f120c76e09e8c1e25938af84543c82445517764da4e9640987e5dae3a6e976bff6fcc1c65d50fc033188012ee717bd810d3ba5dc973a227d0009740caac2bd2c26b21a7f3be7b38db9206b9ce1a96e4eb36530de725cb581fd6c3cb786e458163d8a863f334b9be2311901b046338c0d34ab6bcb823e54d89d3bcb8874a2107160ac63f4a84417ac770bbfc635afa7b40b1e270ccaf9e638da61f876a0f340ed3e0972e7afc44ddbac4f5a7373d72b9926f1e1f8069605dbdf6ed0c6eb1a6552e135f6d1638b3d5ae3504b60f1cb35effc939f5a6fa9986f91dce68921efde19bf59b22163729cf24c2d1934550aeac27cffe90f4b84a11263a529630fa98c6364994918c6fe7218b6b2386de1e9e7a376b22c482e3330dcae87bb8450bb927895a8d7daac74b1c7088474f2ad475ba846a94e582cfcaf0790ffbec60c8328e4256b5e629a2852fbe24a2c73b7e008712093886b66331f1b2c7808c37bc514916f504d26260a47b1356500ca77b997fd3cacee730033d7fd4ad660b5efd10d9bfb8f4a8c877c8a65fe2877fc7700b9f73a4ed68bfe89e29360186d2d6a3608f80ea041ef8a0093471c307d94e7c8ce32b691a13fe9be1dd0d115b3fe4a06276c625ef5162513151c0e7897ef9ef74b4cafbfbe9ff33f119b7ed5fb59801aeaffd52157ca34fe118b2b6e0b6164642faf0ce6c5600b4d143d0b52532f7cc528a8394b19ec032d4e54f9faf3f24327e750fbe43abe4a72775d57b42fc17d957ffbc4b2b14d07f55ba68f1cdc43af717f923583ea1ee7faedd0dc5109c66e2928e47048942df34c3d9ad7c3f9b9918f199075a1c2097c97ab216bd56711f259d6fa92e702925427157953dcfc5dfffe096aa9e69ef20f8b13ce971048a6b4ee788df9fe724cc4fc3708854b0448ccad531ad7a16be1c6a9fa8a6f723522be352cdfa955ce1173b2169bb4cbb44fd7d885bb5e3e7eb44c408190b359e704793fdf0bbd3dd0d58a84a14ee9d3c5f932d6135c17cd2a775579ebb358d9000b92af69abf812b366e40beb89a63e9c300828cef61dfc2d22c41b36ecec24e5ac54a5526eb97fcd74245828c18c66c5c707a85e4e991a441f8309092ec3cac1df0ca97ac986f1b59e4a88cc5bada214208cb2857c8e630d20f79f65ed8376a5fd328d8a3fece8a44e9084ec39fef5855ed059eca5e45957dfb2955fa13f002709631ef27e29bfb98908eeaf61d3a44248fbd9fd4cacbe3030c58403c4000f614d1992779e1381c04b66c1521c520b03f5ed0f96bf3748579f487403c708441210cbf59278863604060918a5ddd49be6ec02c7a64c7331c1344592cd4214bc8f2f14eb6af40cab65a4bf93f1b7f5b4245fbd103c1cb7acb1d0086282ec244988b5cb3f720feb615ab2f4dfdfeadccfd6780b4ba6a4face9eb1efc69f4ca1146b07671020dd965fecb8225762531c6ab8cc7422d709ff5abeb7334128fad63f650fcd2f14c0ad8f316933992617a75ab960d658f529884491a9dd5c234b31a8fc953a", 0x1}]}) r0 = syz_mount_image$msdos(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x9, 0x1, &(0x7f0000001380)=[{&(0x7f00000012c0)="51250223f90125f1fd465b0d00ea589c33f36b314b6fee62647e03fb804c06150265bfde7bd4c1ff5d0c3826202b93e0dc5210be9925ad22fe9fa84553922f6e5cd1721f16f40607cc764beb850edb8a02fda3a0e58507194840809db53910b23cacd846d9c1383375c3155c5b0c211f111a8e2e1e5614dbaa9e752fd36288c83d5ad94e369e361a2af875cc", 0x8c, 0x7}], 0x100008, &(0x7f00000013c0)={[{@dots}, {@nodots}, {@fat=@quiet}, {@fat=@umask}, {@fat=@check_normal}], [{@fowner_gt={'fowner>', 0xee00}}, {@fsname={'fsname', 0x3d, '!]'}}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}]}) fdatasync(r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000001480), &(0x7f00000014c0)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f0000001500)=""/109, &(0x7f0000001580)=0x6d) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000015c0)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x6, @remote}, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'geneve0\x00'}) fallocate(r0, 0x73, 0x36e, 0x5) r3 = syz_io_uring_complete(0x0) accept$inet(r3, &(0x7f0000001640)={0x2, 0x0, @initdev}, &(0x7f0000001680)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x114, 0x0, 0x2, 0x301, 0x0, 0x0, {0x9, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000001ac0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b40), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001c40)='wg2\x00', 0x4) r6 = syz_open_dev$vcsu(&(0x7f0000001c80), 0x0, 0x60000) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6d}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x80, {0xdf48, 0x4, 0x8, 0x8}}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x6, 0x0, {0x80, 0x1fe0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x55, 0x2}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 06:35:03 executing program 5: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}}, 0x20004080) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x21}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4cc, 0x2f}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "041ce57b"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc850}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4) r4 = accept$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000600)={0x0, 0x3f, 0x0, [0x1, 0x6, 0x9, 0x3, 0xea], [0x0, 0x400, 0x53a, 0x5, 0x5a9f8671, 0x0, 0x33, 0x7ff, 0x2, 0x10000, 0x8, 0x2, 0x8, 0x800, 0x3, 0x100000001, 0x4, 0x200, 0xba, 0x5, 0x5, 0x0, 0x1, 0x0, 0x300000000, 0x100, 0x1, 0x1, 0x1ff, 0x3, 0x100000001, 0xfffffffffffffffc, 0x5, 0x9e, 0x400, 0x7ff, 0x9, 0x1000, 0x2, 0x9, 0x7fff, 0xfa0, 0x7, 0x1, 0x9, 0x1, 0x2, 0x9, 0x9, 0x9, 0x6, 0x2, 0x2, 0x9, 0x6, 0xfbf, 0xfff, 0x2, 0x8, 0x4, 0x7f, 0x4142b47e, 0x80, 0x5, 0x7, 0xe028, 0x3ec, 0x3, 0x84, 0x2, 0x7, 0x1, 0x401, 0x3f, 0x2, 0x553, 0x3, 0xb3, 0x1, 0x5, 0x5, 0xa3, 0x7, 0x7, 0x8001, 0x1, 0x9, 0x3f, 0x8001, 0x800, 0x2, 0x5, 0x4, 0x80, 0x80000000, 0x1, 0x3f, 0x1, 0x5, 0x4, 0x20, 0x10001, 0x2fb, 0x8001, 0x8, 0x7, 0xfffffffffffffff9, 0x1, 0x10001, 0x7, 0x7, 0x4, 0xfffffffffffffffe, 0x8, 0x6, 0x9, 0x3ff, 0x59, 0x0, 0x4, 0x9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000a40)={r5, 0x9, 0x0, [0x3270, 0x75e7, 0x6, 0x1e1, 0x5], [0xfc00000000000000, 0x401, 0x9, 0x562, 0x5, 0x1, 0x2a8, 0x320, 0xd7, 0x8, 0x0, 0xa71, 0x2, 0x15, 0xca, 0x20, 0x2, 0xf0, 0x9, 0x4, 0x5, 0x4, 0x7fff, 0x7, 0xfffffffffffffffc, 0x80000000, 0xa059, 0x1, 0x7fffffff, 0x96, 0x1000, 0x800, 0x7fffffff, 0x7fff, 0x4, 0x80000000, 0xfffffffffffffff8, 0x1, 0x4, 0x100000000, 0x4, 0x2, 0xfe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x7, 0x10000, 0xfffffffffffff001, 0x5, 0xeb, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3f, 0x9, 0x1, 0x0, 0x2, 0x9b73, 0x1, 0x6, 0xf48, 0x9, 0x822, 0x1, 0xddad, 0x0, 0x1, 0x6, 0x8, 0x1f, 0x2b3, 0x3ff, 0x3f, 0x6c853042, 0x3, 0x200, 0x8, 0x4, 0x9f6, 0x8, 0x3, 0xffffffff80000000, 0x7, 0x2, 0x9, 0x8, 0x9, 0x0, 0x8000, 0x82, 0x3794000000000, 0xff, 0x7fffffff, 0x101, 0x9, 0x2, 0x100, 0x4, 0x6, 0x9b21, 0x2, 0x5, 0x7, 0xffffffff, 0x400, 0x0, 0xa43, 0x7ead, 0x5c9f, 0x0, 0xffff, 0x0, 0x800, 0x3, 0x8]}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20044021) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000fc0)={0x3}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001180)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000001400)={&(0x7f00000011c0), 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x104, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ed00, 0x53}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2f69de715f7a3343d8889a1f22a0ec5692712e4e999e292"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "723a898ba4ddb7a9f6993d240bfe3cb7700decf3f6b98d8e"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x11}, 0x1) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002300)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000022c0)={&(0x7f0000001b80)={0x72c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc6c}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8001, 0x3}, {0x3ff, 0x9, 0x7, 0x1ff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa607}}}]}}]}, 0x72c}, 0x1, 0x0, 0x0, 0x1}, 0x40) [ 65.381347] audit: type=1400 audit(1664606103.148:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:35:03 executing program 6: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x2, [@remote, @local]}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)={0x1, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @local, @remote, @broadcast]}) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x145041, 0x18) r2 = signalfd(r0, &(0x7f0000000340)={[0x5]}, 0x8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @adiantum, 0x2, @desc1}) clone3(&(0x7f0000000640)={0x11000, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), {0x24}, &(0x7f0000000480)=""/245, 0xf5, &(0x7f0000000580)=""/92, &(0x7f0000000600)=[0x0], 0x1, {r1}}, 0x58) readahead(r3, 0xfffffffffffffffc, 0xffff) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x204000, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000740)=""/185, 0xb9) lremovexattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=@known='user.incfs.id\x00') pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000880)="7b47e0acaf8d5953345057f512ecc6aabe656ee2279874d4388a50f9b9bde6b73a80816bff4130e3336e81dc192459d2a83b58ec02f691bd03f116760526a5f037", 0x41}, {&(0x7f0000000900)="eb0cfda1e8dbac9b3f591f1b5ebeb64b776741ccb448ed5b2d934a9558bbd54793b42985c8a07d1e29db6738a5a8b4ee45e120791363da37ae56a53d7a40bb88f7e1ea0f0945676fb2554cde1ad5895b8fac88a2e3aa619acc052b33bf279144bf6cffa77773ee2dec4de28a30e6be5e21a9a7dee4fe60a6f46d848ff28db18340a25dd56b7c183a97a1c37333029a0c7e8566b69c77accb3a64ff3e5c80253b9feae85bc1b08eec21ea14b5f59f3adb04dc07", 0xb3}, {&(0x7f00000009c0)="0e5b62c5003b9feb6cd4706df8fcc137228cb628b2dc23acc6246a7965d4b8099b0131553d1ee01b71212e47a63a704c60be1418b31c6c9b183b93ddefc46ba0112c98af6915d86d28d1524c6dd01ffff00e85a0631de7bb15e5ced2f62e2729d0456d12bddad14aeae040399dab887ef9327a5aabfef69fac9d754fa32537d5484a10b10cd8cbd0ea1da85b926487", 0x8f}], 0x3, 0x7, 0x400000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000ac0)={0x0, 0x3, r4, 0xf, 0x80000}) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x402, 0x0, 0x5}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xdc, r6, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'lo\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "13391895569da22171e54f546c109f60f2a47de16a3fa62f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "48bd76c30a0485098aa5c1695cb8b410f017aa3d0cb76de0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40801}, 0x2000004) 06:35:03 executing program 7: bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x20400000}, 0xc) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) fallocate(0xffffffffffffffff, 0x40, 0x401, 0x800000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="51950766cd04ed36c17e49fbdd68b192252b29bc57fbdf42a30537437b7e3d947fc1d59a1d9f981bcebf35b8786bd0a0bed6ff4ee03113f588ca7bae35c044438df2428b379c608aa2e71ffb0c820e8dd62cd746ae6db6a29bc634d1c0a35794ad57985e31d571fe764fae08203f1ca9cc2983641aede9148fa509969be503662bb257b29dc021caa322e89721f4d333d2becb526571148ec5a3bacf0eed92e57bac1cce28a94f5109ca270ac276d792eaa687a6f33be3bdd7df0f7d1aab2a57db66d47d2e1084c59465445ac79336fa3b4ffa388f55759ecd7dc82295fe55131271b3642e97967e8df2e97c", 0xec, 0x8080, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2000, 0x9) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x448040, 0x198) r2 = openat(r1, &(0x7f0000000300)='./file0/file0\x00', 0x48140, 0x14) r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0xffff, 0x4883) openat(r3, &(0x7f0000000380)='./file0\x00', 0x40001, 0x40) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2], 0x1, 0x0, 0x0, {0x0, r4}}, 0x400) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000480)={0x1, 0x4}) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'U+', 0x7ff}, 0x16, 0x1) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xed) getdents(r1, &(0x7f0000000580)=""/59, 0x3b) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x19b5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4010) [ 66.640941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.642711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.645441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.646793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.648286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.649393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.653296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.654410] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.657041] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.658233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.660046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.661439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.667050] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.669454] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.714554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.720067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.722530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.728053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.730704] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.732165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.752069] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.767631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.777486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.779551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.781984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.785231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.786829] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.788656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.789953] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.794892] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.798128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.799740] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.801100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.802260] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.821053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.822563] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.823917] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.842876] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.843973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.859056] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.860422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.877337] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.904347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.934136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.936654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.949039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.955067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.958632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.973248] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.724883] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 68.725320] Bluetooth: hci1: command 0x0409 tx timeout [ 68.726579] Bluetooth: hci0: command 0x0409 tx timeout [ 68.852818] Bluetooth: hci2: command 0x0409 tx timeout [ 68.853582] Bluetooth: hci5: command 0x0409 tx timeout [ 68.917879] Bluetooth: hci7: command 0x0409 tx timeout [ 68.918535] Bluetooth: hci6: command 0x0409 tx timeout [ 68.981859] Bluetooth: hci4: command 0x0409 tx timeout [ 70.772861] Bluetooth: hci1: command 0x041b tx timeout [ 70.774125] Bluetooth: hci0: command 0x041b tx timeout [ 70.900833] Bluetooth: hci5: command 0x041b tx timeout [ 70.901415] Bluetooth: hci2: command 0x041b tx timeout [ 70.965857] Bluetooth: hci6: command 0x041b tx timeout [ 70.966299] Bluetooth: hci7: command 0x041b tx timeout [ 71.028867] Bluetooth: hci4: command 0x041b tx timeout [ 72.820843] Bluetooth: hci0: command 0x040f tx timeout [ 72.820865] Bluetooth: hci1: command 0x040f tx timeout [ 72.949850] Bluetooth: hci2: command 0x040f tx timeout [ 72.949908] Bluetooth: hci5: command 0x040f tx timeout [ 73.014465] Bluetooth: hci7: command 0x040f tx timeout [ 73.014485] Bluetooth: hci6: command 0x040f tx timeout [ 73.077805] Bluetooth: hci4: command 0x040f tx timeout [ 73.524855] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 74.868853] Bluetooth: hci1: command 0x0419 tx timeout [ 74.869823] Bluetooth: hci0: command 0x0419 tx timeout [ 74.996835] Bluetooth: hci2: command 0x0419 tx timeout [ 74.998066] Bluetooth: hci5: command 0x0419 tx timeout [ 75.060826] Bluetooth: hci7: command 0x0419 tx timeout [ 75.061863] Bluetooth: hci6: command 0x0419 tx timeout [ 75.124861] Bluetooth: hci4: command 0x0419 tx timeout [ 76.088954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.090355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.093175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.095491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.097286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.098264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.143703] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.196916] Bluetooth: hci3: command 0x0409 tx timeout [ 80.244895] Bluetooth: hci3: command 0x041b tx timeout [ 82.292962] Bluetooth: hci3: command 0x040f tx timeout [ 84.341836] Bluetooth: hci3: command 0x0419 tx timeout 06:35:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000008200000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x9, 0x60}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 0x9, 0x3, 0x7ff}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xd7}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) [ 121.059199] audit: type=1400 audit(1664606158.825:7): avc: denied { open } for pid=3823 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.060958] audit: type=1400 audit(1664606158.825:8): avc: denied { kernel } for pid=3823 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.074717] ------------[ cut here ]------------ [ 121.074737] [ 121.074740] ====================================================== [ 121.074747] WARNING: possible circular locking dependency detected [ 121.074751] 6.0.0-rc7-next-20220930 #1 Not tainted [ 121.074758] ------------------------------------------------------ [ 121.074761] syz-executor.4/3824 is trying to acquire lock: [ 121.074768] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 121.074810] [ 121.074810] but task is already holding lock: [ 121.074813] ffff88800d32d820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.074841] [ 121.074841] which lock already depends on the new lock. [ 121.074841] [ 121.074844] [ 121.074844] the existing dependency chain (in reverse order) is: [ 121.074847] [ 121.074847] -> #3 (&ctx->lock){....}-{2:2}: [ 121.074862] _raw_spin_lock+0x2a/0x40 [ 121.074874] __perf_event_task_sched_out+0x53b/0x18d0 [ 121.074886] __schedule+0xedd/0x2470 [ 121.074900] schedule+0xda/0x1b0 [ 121.074915] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.074928] syscall_exit_to_user_mode+0x19/0x40 [ 121.074942] do_syscall_64+0x48/0x90 [ 121.074960] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.074974] [ 121.074974] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 121.074988] _raw_spin_lock_nested+0x30/0x40 [ 121.074999] raw_spin_rq_lock_nested+0x1e/0x30 [ 121.075013] task_fork_fair+0x63/0x4d0 [ 121.075031] sched_cgroup_fork+0x3d0/0x540 [ 121.075046] copy_process+0x4183/0x6e20 [ 121.075057] kernel_clone+0xe7/0x890 [ 121.075067] user_mode_thread+0xad/0xf0 [ 121.075078] rest_init+0x24/0x250 [ 121.075090] arch_call_rest_init+0xf/0x14 [ 121.075109] start_kernel+0x4c6/0x4eb [ 121.075125] secondary_startup_64_no_verify+0xe0/0xeb [ 121.075140] [ 121.075140] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 121.075154] _raw_spin_lock_irqsave+0x39/0x60 [ 121.075166] try_to_wake_up+0xab/0x1930 [ 121.075180] up+0x75/0xb0 [ 121.075195] __up_console_sem+0x6e/0x80 [ 121.075212] console_unlock+0x46a/0x590 [ 121.075229] do_con_write+0xc05/0x1d50 [ 121.075240] con_write+0x21/0x40 [ 121.075250] n_tty_write+0x4d4/0xfe0 [ 121.075262] file_tty_write.constprop.0+0x455/0x8a0 [ 121.075274] vfs_write+0x9c3/0xd90 [ 121.075292] ksys_write+0x127/0x250 [ 121.075308] do_syscall_64+0x3b/0x90 [ 121.075326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.075340] [ 121.075340] -> #0 ((console_sem).lock){....}-{2:2}: [ 121.075354] __lock_acquire+0x2a02/0x5e70 [ 121.075372] lock_acquire+0x1a2/0x530 [ 121.075389] _raw_spin_lock_irqsave+0x39/0x60 [ 121.075400] down_trylock+0xe/0x70 [ 121.075416] __down_trylock_console_sem+0x3b/0xd0 [ 121.075434] vprintk_emit+0x16b/0x560 [ 121.075451] vprintk+0x84/0xa0 [ 121.075468] _printk+0xba/0xf1 [ 121.075480] report_bug.cold+0x72/0xab [ 121.075497] handle_bug+0x3c/0x70 [ 121.075515] exc_invalid_op+0x14/0x50 [ 121.075533] asm_exc_invalid_op+0x16/0x20 [ 121.075545] group_sched_out.part.0+0x2c7/0x460 [ 121.075564] ctx_sched_out+0x8f1/0xc10 [ 121.075582] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.075594] __schedule+0xedd/0x2470 [ 121.075608] schedule+0xda/0x1b0 [ 121.075623] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.075634] syscall_exit_to_user_mode+0x19/0x40 [ 121.075648] do_syscall_64+0x48/0x90 [ 121.075665] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.075679] [ 121.075679] other info that might help us debug this: [ 121.075679] [ 121.075682] Chain exists of: [ 121.075682] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 121.075682] [ 121.075715] Possible unsafe locking scenario: [ 121.075715] [ 121.075717] CPU0 CPU1 [ 121.075720] ---- ---- [ 121.075722] lock(&ctx->lock); [ 121.075728] lock(&rq->__lock); [ 121.075735] lock(&ctx->lock); [ 121.075741] lock((console_sem).lock); [ 121.075748] [ 121.075748] *** DEADLOCK *** [ 121.075748] [ 121.075749] 2 locks held by syz-executor.4/3824: [ 121.075757] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 121.075791] #1: ffff88800d32d820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.075819] [ 121.075819] stack backtrace: [ 121.075822] CPU: 1 PID: 3824 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 121.075836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.075844] Call Trace: [ 121.075847] [ 121.075852] dump_stack_lvl+0x8b/0xb3 [ 121.075872] check_noncircular+0x263/0x2e0 [ 121.075889] ? format_decode+0x26c/0xb50 [ 121.075907] ? print_circular_bug+0x450/0x450 [ 121.075925] ? simple_strtoul+0x30/0x30 [ 121.075942] ? format_decode+0x26c/0xb50 [ 121.075961] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 121.075980] __lock_acquire+0x2a02/0x5e70 [ 121.076003] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.076027] lock_acquire+0x1a2/0x530 [ 121.076045] ? down_trylock+0xe/0x70 [ 121.076063] ? lock_release+0x750/0x750 [ 121.076085] ? vprintk+0x84/0xa0 [ 121.076105] _raw_spin_lock_irqsave+0x39/0x60 [ 121.076117] ? down_trylock+0xe/0x70 [ 121.076134] down_trylock+0xe/0x70 [ 121.076151] ? vprintk+0x84/0xa0 [ 121.076169] __down_trylock_console_sem+0x3b/0xd0 [ 121.076188] vprintk_emit+0x16b/0x560 [ 121.076208] vprintk+0x84/0xa0 [ 121.076227] _printk+0xba/0xf1 [ 121.076239] ? record_print_text.cold+0x16/0x16 [ 121.076256] ? report_bug.cold+0x66/0xab [ 121.076276] ? group_sched_out.part.0+0x2c7/0x460 [ 121.076295] report_bug.cold+0x72/0xab [ 121.076315] handle_bug+0x3c/0x70 [ 121.076334] exc_invalid_op+0x14/0x50 [ 121.076354] asm_exc_invalid_op+0x16/0x20 [ 121.076367] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.076390] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.076402] RSP: 0018:ffff8880403bfc48 EFLAGS: 00010006 [ 121.076412] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.076420] RDX: ffff888018b90000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 121.076428] RBP: ffff888040260000 R08: 0000000000000005 R09: 0000000000000001 [ 121.076436] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d32d800 [ 121.076444] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 121.076455] ? group_sched_out.part.0+0x2c7/0x460 [ 121.076477] ? group_sched_out.part.0+0x2c7/0x460 [ 121.076498] ctx_sched_out+0x8f1/0xc10 [ 121.076519] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.076534] ? lock_is_held_type+0xd7/0x130 [ 121.076549] ? __perf_cgroup_move+0x160/0x160 [ 121.076561] ? set_next_entity+0x304/0x550 [ 121.076580] ? update_curr+0x267/0x740 [ 121.076599] ? lock_is_held_type+0xd7/0x130 [ 121.076614] __schedule+0xedd/0x2470 [ 121.076633] ? io_schedule_timeout+0x150/0x150 [ 121.076651] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.076673] schedule+0xda/0x1b0 [ 121.076689] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.076702] syscall_exit_to_user_mode+0x19/0x40 [ 121.076717] do_syscall_64+0x48/0x90 [ 121.076736] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.076750] RIP: 0033:0x7f62481d6b19 [ 121.076759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.076771] RSP: 002b:00007f624574c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.076782] RAX: 0000000000000001 RBX: 00007f62482e9f68 RCX: 00007f62481d6b19 [ 121.076790] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f62482e9f6c [ 121.076798] RBP: 00007f62482e9f60 R08: 000000000000000e R09: 0000000000000000 [ 121.076806] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f62482e9f6c [ 121.076813] R13: 00007ffd8b196a3f R14: 00007f624574c300 R15: 0000000000022000 [ 121.076827] [ 121.137231] WARNING: CPU: 1 PID: 3824 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.137961] Modules linked in: [ 121.138219] CPU: 1 PID: 3824 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 121.138837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.139702] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.140119] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.141466] RSP: 0018:ffff8880403bfc48 EFLAGS: 00010006 [ 121.141877] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.142416] RDX: ffff888018b90000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 121.142967] RBP: ffff888040260000 R08: 0000000000000005 R09: 0000000000000001 [ 121.143514] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d32d800 [ 121.144076] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 121.144629] FS: 00007f624574c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 121.145248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.145702] CR2: 00007fe1d469d000 CR3: 0000000033268000 CR4: 0000000000350ee0 [ 121.146243] Call Trace: [ 121.146447] [ 121.146627] ctx_sched_out+0x8f1/0xc10 [ 121.146942] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.147348] ? lock_is_held_type+0xd7/0x130 [ 121.147701] ? __perf_cgroup_move+0x160/0x160 [ 121.148065] ? set_next_entity+0x304/0x550 [ 121.148394] ? update_curr+0x267/0x740 [ 121.148701] ? lock_is_held_type+0xd7/0x130 [ 121.149039] __schedule+0xedd/0x2470 [ 121.149341] ? io_schedule_timeout+0x150/0x150 [ 121.149709] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.150093] schedule+0xda/0x1b0 [ 121.150361] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.150737] syscall_exit_to_user_mode+0x19/0x40 [ 121.151114] do_syscall_64+0x48/0x90 [ 121.151413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.151818] RIP: 0033:0x7f62481d6b19 [ 121.152109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.153489] RSP: 002b:00007f624574c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.154072] RAX: 0000000000000001 RBX: 00007f62482e9f68 RCX: 00007f62481d6b19 [ 121.154609] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f62482e9f6c [ 121.155162] RBP: 00007f62482e9f60 R08: 000000000000000e R09: 0000000000000000 [ 121.155722] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f62482e9f6c [ 121.156278] R13: 00007ffd8b196a3f R14: 00007f624574c300 R15: 0000000000022000 [ 121.156827] [ 121.157016] irq event stamp: 860 [ 121.157275] hardirqs last enabled at (859): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 121.157981] hardirqs last disabled at (860): [] __schedule+0x1225/0x2470 [ 121.158614] softirqs last enabled at (718): [] __irq_exit_rcu+0x11b/0x180 [ 121.159261] softirqs last disabled at (713): [] __irq_exit_rcu+0x11b/0x180 [ 121.159917] ---[ end trace 0000000000000000 ]--- 06:35:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121242, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 121.428477] audit: type=1400 audit(1664606159.195:9): avc: denied { write } for pid=3823 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 06:35:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121242, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 06:35:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121242, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 06:35:59 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000008200000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x9, 0x60}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 0x9, 0x3, 0x7ff}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xd7}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) 06:35:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121242, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 06:35:59 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000008200000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'wrr\x00', 0x1, 0x9, 0x60}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 0x9, 0x3, 0x7ff}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xd7}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) 06:35:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121242, 0x0) VM DIAGNOSIS: 06:35:59 Registers: info registers vcpu 0 RAX=ffffffff81785562 RBX=ffffffff85bbc3e8 RCX=ffffffff8178555d RDX=0000000000000000 RSI=ffffffff85edfd54 RDI=ffffffff85bbc3d0 RBP=ffffffff85bbc3e8 RSP=ffff88801bd874a0 R8 =ffffffff85edfd54 R9 =ffffffff85edfdee R10=ffffed10037b0eba R11=000000000003603d R12=ffffffff85bbc3e4 R13=ffffffff85bbc3d0 R14=ffffffff85bbc3e4 R15=dffffc0000000000 RIP=ffffffff81119b8f RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcf76c63540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564f8e5004c8 CR3=000000001d6b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0070656474666f73 2e73656c75646f6d YMM01=0000000000000000 0000000000000000 0070656474666f73 2e73656c75646f6d YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000ff00000000ff YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880403bf690 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000a R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f624574c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe1d469d000 CR3=0000000033268000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f62482bd7c0 00007f62482bd7c8 YMM02=0000000000000000 0000000000000000 00007f62482bd7e0 00007f62482bd7c0 YMM03=0000000000000000 0000000000000000 00007f62482bd7c8 00007f62482bd7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000