Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:58815' (ECDSA) to the list of known hosts. 2022/10/03 09:18:37 fuzzer started 2022/10/03 09:18:37 dialing manager at localhost:35095 syzkaller login: [ 39.116968] cgroup: Unknown subsys name 'net' [ 39.220908] cgroup: Unknown subsys name 'rlimit' 2022/10/03 09:18:52 syscalls: 2215 2022/10/03 09:18:52 code coverage: enabled 2022/10/03 09:18:52 comparison tracing: enabled 2022/10/03 09:18:52 extra coverage: enabled 2022/10/03 09:18:52 setuid sandbox: enabled 2022/10/03 09:18:52 namespace sandbox: enabled 2022/10/03 09:18:52 Android sandbox: enabled 2022/10/03 09:18:52 fault injection: enabled 2022/10/03 09:18:52 leak checking: enabled 2022/10/03 09:18:52 net packet injection: enabled 2022/10/03 09:18:52 net device setup: enabled 2022/10/03 09:18:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 09:18:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 09:18:52 USB emulation: enabled 2022/10/03 09:18:52 hci packet injection: enabled 2022/10/03 09:18:52 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 09:18:52 802.15.4 emulation: enabled 2022/10/03 09:18:52 fetching corpus: 50, signal 19775/21641 (executing program) 2022/10/03 09:18:52 fetching corpus: 100, signal 35889/39349 (executing program) 2022/10/03 09:18:52 fetching corpus: 150, signal 48806/53806 (executing program) 2022/10/03 09:18:52 fetching corpus: 200, signal 55542/62035 (executing program) 2022/10/03 09:18:52 fetching corpus: 250, signal 64805/72602 (executing program) 2022/10/03 09:18:53 fetching corpus: 300, signal 70344/79470 (executing program) 2022/10/03 09:18:53 fetching corpus: 350, signal 73198/83765 (executing program) 2022/10/03 09:18:53 fetching corpus: 400, signal 75420/87418 (executing program) 2022/10/03 09:18:53 fetching corpus: 450, signal 78050/91366 (executing program) 2022/10/03 09:18:53 fetching corpus: 500, signal 81950/96453 (executing program) 2022/10/03 09:18:53 fetching corpus: 550, signal 85967/101641 (executing program) 2022/10/03 09:18:53 fetching corpus: 600, signal 87921/104902 (executing program) 2022/10/03 09:18:53 fetching corpus: 650, signal 90400/108594 (executing program) 2022/10/03 09:18:53 fetching corpus: 700, signal 93798/113103 (executing program) 2022/10/03 09:18:54 fetching corpus: 750, signal 95603/116121 (executing program) 2022/10/03 09:18:54 fetching corpus: 800, signal 96924/118659 (executing program) 2022/10/03 09:18:54 fetching corpus: 850, signal 99377/122182 (executing program) 2022/10/03 09:18:54 fetching corpus: 900, signal 102141/125946 (executing program) 2022/10/03 09:18:54 fetching corpus: 950, signal 104531/129363 (executing program) 2022/10/03 09:18:54 fetching corpus: 1000, signal 106894/132769 (executing program) 2022/10/03 09:18:54 fetching corpus: 1050, signal 110575/137253 (executing program) 2022/10/03 09:18:54 fetching corpus: 1100, signal 111967/139713 (executing program) 2022/10/03 09:18:54 fetching corpus: 1150, signal 113726/142432 (executing program) 2022/10/03 09:18:55 fetching corpus: 1200, signal 114895/144661 (executing program) 2022/10/03 09:18:55 fetching corpus: 1250, signal 116011/146823 (executing program) 2022/10/03 09:18:55 fetching corpus: 1300, signal 117593/149360 (executing program) 2022/10/03 09:18:55 fetching corpus: 1350, signal 120188/152784 (executing program) 2022/10/03 09:18:55 fetching corpus: 1400, signal 123001/156237 (executing program) 2022/10/03 09:18:55 fetching corpus: 1450, signal 125577/159486 (executing program) 2022/10/03 09:18:55 fetching corpus: 1500, signal 127629/162249 (executing program) 2022/10/03 09:18:56 fetching corpus: 1550, signal 128926/164458 (executing program) 2022/10/03 09:18:56 fetching corpus: 1600, signal 131346/167465 (executing program) 2022/10/03 09:18:56 fetching corpus: 1650, signal 131995/169120 (executing program) 2022/10/03 09:18:56 fetching corpus: 1700, signal 133754/171567 (executing program) 2022/10/03 09:18:56 fetching corpus: 1750, signal 134509/173259 (executing program) 2022/10/03 09:18:56 fetching corpus: 1800, signal 135977/175541 (executing program) 2022/10/03 09:18:56 fetching corpus: 1850, signal 136591/177158 (executing program) 2022/10/03 09:18:56 fetching corpus: 1900, signal 137887/179261 (executing program) 2022/10/03 09:18:56 fetching corpus: 1950, signal 138704/181006 (executing program) 2022/10/03 09:18:57 fetching corpus: 2000, signal 139675/182832 (executing program) 2022/10/03 09:18:57 fetching corpus: 2050, signal 141126/184947 (executing program) 2022/10/03 09:18:57 fetching corpus: 2100, signal 142338/186895 (executing program) 2022/10/03 09:18:57 fetching corpus: 2150, signal 143458/188781 (executing program) 2022/10/03 09:18:57 fetching corpus: 2200, signal 145129/191026 (executing program) 2022/10/03 09:18:57 fetching corpus: 2250, signal 146064/192669 (executing program) 2022/10/03 09:18:57 fetching corpus: 2300, signal 147621/194755 (executing program) 2022/10/03 09:18:57 fetching corpus: 2350, signal 149180/196844 (executing program) 2022/10/03 09:18:57 fetching corpus: 2400, signal 150101/198481 (executing program) 2022/10/03 09:18:58 fetching corpus: 2450, signal 151582/200454 (executing program) 2022/10/03 09:18:58 fetching corpus: 2500, signal 152949/202357 (executing program) 2022/10/03 09:18:58 fetching corpus: 2550, signal 153518/203704 (executing program) 2022/10/03 09:18:58 fetching corpus: 2600, signal 155786/206169 (executing program) 2022/10/03 09:18:58 fetching corpus: 2650, signal 156686/207695 (executing program) 2022/10/03 09:18:58 fetching corpus: 2700, signal 157663/209256 (executing program) 2022/10/03 09:18:58 fetching corpus: 2750, signal 158808/210943 (executing program) 2022/10/03 09:18:58 fetching corpus: 2800, signal 160248/212791 (executing program) 2022/10/03 09:18:59 fetching corpus: 2850, signal 161295/214414 (executing program) 2022/10/03 09:18:59 fetching corpus: 2900, signal 162593/216141 (executing program) 2022/10/03 09:18:59 fetching corpus: 2950, signal 163236/217441 (executing program) 2022/10/03 09:18:59 fetching corpus: 3000, signal 164575/219194 (executing program) 2022/10/03 09:18:59 fetching corpus: 3050, signal 165666/220746 (executing program) 2022/10/03 09:18:59 fetching corpus: 3100, signal 166476/222166 (executing program) 2022/10/03 09:18:59 fetching corpus: 3150, signal 167373/223556 (executing program) 2022/10/03 09:18:59 fetching corpus: 3200, signal 168749/225247 (executing program) 2022/10/03 09:18:59 fetching corpus: 3250, signal 169610/226614 (executing program) 2022/10/03 09:19:00 fetching corpus: 3300, signal 170159/227786 (executing program) 2022/10/03 09:19:00 fetching corpus: 3350, signal 171165/229222 (executing program) 2022/10/03 09:19:00 fetching corpus: 3400, signal 171951/230536 (executing program) 2022/10/03 09:19:00 fetching corpus: 3450, signal 172791/231845 (executing program) 2022/10/03 09:19:00 fetching corpus: 3500, signal 173376/232973 (executing program) 2022/10/03 09:19:00 fetching corpus: 3550, signal 174518/234484 (executing program) 2022/10/03 09:19:00 fetching corpus: 3600, signal 175161/235676 (executing program) 2022/10/03 09:19:00 fetching corpus: 3650, signal 176635/237272 (executing program) 2022/10/03 09:19:01 fetching corpus: 3700, signal 177173/238334 (executing program) 2022/10/03 09:19:01 fetching corpus: 3750, signal 178820/239951 (executing program) 2022/10/03 09:19:01 fetching corpus: 3800, signal 179493/241101 (executing program) 2022/10/03 09:19:01 fetching corpus: 3850, signal 180052/242158 (executing program) 2022/10/03 09:19:01 fetching corpus: 3900, signal 180700/243228 (executing program) 2022/10/03 09:19:01 fetching corpus: 3950, signal 181224/244251 (executing program) 2022/10/03 09:19:01 fetching corpus: 4000, signal 181728/245298 (executing program) 2022/10/03 09:19:01 fetching corpus: 4050, signal 182821/246648 (executing program) 2022/10/03 09:19:01 fetching corpus: 4100, signal 183904/247883 (executing program) 2022/10/03 09:19:02 fetching corpus: 4150, signal 184593/249014 (executing program) 2022/10/03 09:19:02 fetching corpus: 4200, signal 184993/249952 (executing program) 2022/10/03 09:19:02 fetching corpus: 4250, signal 185637/250991 (executing program) 2022/10/03 09:19:02 fetching corpus: 4300, signal 186281/252018 (executing program) 2022/10/03 09:19:02 fetching corpus: 4350, signal 187014/253127 (executing program) 2022/10/03 09:19:02 fetching corpus: 4400, signal 187681/254112 (executing program) 2022/10/03 09:19:02 fetching corpus: 4450, signal 188359/255113 (executing program) 2022/10/03 09:19:02 fetching corpus: 4500, signal 188916/256074 (executing program) 2022/10/03 09:19:02 fetching corpus: 4550, signal 189850/257176 (executing program) 2022/10/03 09:19:03 fetching corpus: 4600, signal 190216/258094 (executing program) 2022/10/03 09:19:03 fetching corpus: 4650, signal 190763/259044 (executing program) 2022/10/03 09:19:03 fetching corpus: 4700, signal 191233/259948 (executing program) 2022/10/03 09:19:03 fetching corpus: 4750, signal 192054/260976 (executing program) 2022/10/03 09:19:03 fetching corpus: 4800, signal 192575/261858 (executing program) 2022/10/03 09:19:03 fetching corpus: 4850, signal 192883/262670 (executing program) 2022/10/03 09:19:03 fetching corpus: 4900, signal 193281/263491 (executing program) 2022/10/03 09:19:03 fetching corpus: 4950, signal 194302/264491 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/265367 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/266090 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/266816 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/267520 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/268202 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/268904 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/269621 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/270310 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/271053 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/271778 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/272490 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/273163 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/273908 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/274573 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/275244 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/275942 (executing program) 2022/10/03 09:19:03 fetching corpus: 4998, signal 194783/276660 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/277386 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/278062 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/278750 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/279447 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/280169 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/280903 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/281615 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/282332 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/283035 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/283739 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/284462 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/285190 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/285907 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/286586 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/287278 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/288010 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/288740 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/289427 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/290141 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/290806 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/291494 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/292181 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/292869 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/293580 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/294244 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/294963 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/295626 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/296314 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/296993 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/297719 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/298424 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/299129 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/299135 (executing program) 2022/10/03 09:19:04 fetching corpus: 4998, signal 194783/299135 (executing program) 2022/10/03 09:19:07 starting 8 fuzzer processes 09:19:07 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x810, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x40) read(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001340)={'sit0\x00', &(0x7f00000012c0)={'syztnl0\x00', r1, 0x29, 0x80, 0x3f, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x78, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0xa00400}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}}, 0xc000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc70}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4048041) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001, 0x5}}, './file0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000017c0)={0x0}, &(0x7f0000001800)=0xc) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1fffc000}]}, 0x34}}, 0x20004000) read(0xffffffffffffffff, &(0x7f0000001900)=""/4096, 0x1000) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000002e00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002a80)={0x314, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff7, 0x9, 0x1, 0x1f}, {0x1, 0x7f, 0x1, 0x100}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000002e40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10810}, 0x804) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000002f80)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000003040)={'syztnl0\x00', &(0x7f0000002fc0)={'ip6tnl0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x5f, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x20, 0x1, 0x1, 0x2}}) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000003080)=r8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000003100)='./file1\x00', 0x500004a) 09:19:07 executing program 1: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:nvram_device_t:s0\x00', 0x24, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)="0d25b3cf686bd86faae36ffc9b3043450ea63c9a180cba72885ea6e8803347eff7") ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000340), &(0x7f0000000380)=0x1) connect(r0, &(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) shutdown(r0, 0x0) fchmod(r0, 0x100) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x0, 0x0, 0x3, 0x6, 0x9, 0x6}, {0x98a, 0xe96f, 0xfffffffffffffc01, 0x2, 0xd9, 0xffffffff}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000640)={'syzkaller1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x81}}, './file0\x00'}) bind(r1, &(0x7f00000006c0)=@can, 0x80) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000740)=0xe18, 0x2) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000780)={[0x538]}, 0x8) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x37ec, 0xc}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendfile(r0, r2, 0x0, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/module/kmemleak', 0x20000, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000900)=0x1, &(0x7f0000000940)=0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000980)={0x0, 0xec89, 0x5, 0x8, 0x2}) 09:19:07 executing program 2: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x1, 0x8001}) sync_file_range(r0, 0x8000, 0x40, 0x6) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f00000000c0)=""/148, &(0x7f0000000180)=0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000200)={0x6, 0x18, [0x1000, 0x9, 0x6, 0x6], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000240), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000280)={0x9, 0x3f}) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/144, 0x90}, {&(0x7f0000000500)=""/121, 0x79}], 0x5) r3 = accept4$inet(r2, &(0x7f0000000600)={0x2, 0x0, @loopback}, &(0x7f0000000640)=0x10, 0x80800) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000680), &(0x7f00000006c0)=0x8) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@multicast1, 0x4e21, 0x800, 0x4e20, 0x5, 0xc, 0x80, 0x20, 0x6, 0x0, 0xee00}, {0x8, 0x0, 0x97e9, 0x8001, 0x10001, 0x641, 0x7ff, 0x6}, {0x3, 0x100000000, 0x40, 0x2}, 0x1, 0x6e6bbf, 0x4, 0x0, 0x1, 0x3}, {{@in6=@private0, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x3500, 0x0, 0x3, 0x1, 0x72a74e90, 0x7, 0xfffffff9}}, 0xe8) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000800)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000840), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000a80)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000ac0)="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") write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x40, 0xc7, 0x0, 0x265b, 0x3, 0x3, 0x81, 0x2e2, 0x38, 0x3a6, 0x1f, 0x8, 0x20, 0x2, 0xf000, 0x5, 0x7a}, [{0x1, 0x8, 0x8, 0x5, 0x7, 0x0, 0x7fffffff, 0x83}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x656) 09:19:07 executing program 3: r0 = semget$private(0x0, 0x4, 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0xa2b6, 0x4]) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x3, 0x482) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)) r2 = semget$private(0x0, 0x3, 0x53b) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000080)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x3, 0x140) semtimedop(r3, &(0x7f0000000100)=[{0x4, 0x4, 0x1000}, {0x1, 0x3, 0x1000}], 0x2, &(0x7f0000000140)={0x77359400}) r4 = semget$private(0x0, 0x0, 0x260) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000180)=""/142) r5 = semget$private(0x0, 0x4, 0x80) semctl$IPC_RMID(r5, 0x0, 0x0) r6 = semget$private(0x0, 0x3, 0x10) semctl$GETZCNT(r6, 0x4, 0xf, &(0x7f0000000240)=""/233) r7 = semget(0x0, 0x0, 0x100) semctl$SETVAL(r7, 0x0, 0x10, &(0x7f0000000340)=0x100) r8 = semget(0x1, 0x1, 0x40) semctl$GETVAL(r8, 0x2, 0xc, &(0x7f0000000380)=""/122) 09:19:07 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x101000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x801, 0x100) ioctl$FIOCLEX(r3, 0x5451) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000240)=0x63, 0x2) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='memory.events.local\x00', 0x0, 0x0) fsync(r5) connect$bt_sco(r4, &(0x7f00000002c0), 0x8) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ifreq(r6, 0x8938, &(0x7f0000000300)={'wlan1\x00', @ifru_map}) r7 = openat$cgroup_subtree(r5, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) openat$cgroup(r2, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) write(r8, &(0x7f0000000400)="62fddfa3accb2bdca862368fd2a57e595c66c41e9cb022fe3c5fcb5044c4948438d44949052915bf06a2d32db86dc222a3b92d773b62802281bb88b7c205b3e783384d1e8bdae32feccb9df5807eb04aeb6f15038ccf80f0d806a5df6b732000", 0x60) [ 68.917833] audit: type=1400 audit(1664788747.293:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:19:07 executing program 5: syz_usb_ep_write(0xffffffffffffffff, 0x20, 0x4, &(0x7f0000000000)="9123d91a") syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0xaa, {0xaa, 0x6, "10968e92e239441686bbe942135b2d1a49c3bf3886ca53043145332ea46defc67f8c3b64821dbf1548a4481ca4b7a3a613906669c4880c0f386484bd332761fa8fdd782007baf7566a0a016dbeacf7d874d3717a9d00726f61da164547cc0101c6141175f025b77e072face4ce4bcabb1913765e0fa540bcda700b25cf81a964dffa35ce4382df9add961ee694d96c96f0c68aabeca7640792396397b8756516bc69948cebcd9b2c"}}, &(0x7f0000000100)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "e1105d15a082398bd643d3764c386e21f095699d79c3ed403cbd634c654c2214f17e2594ef236ebbce74"}}, &(0x7f0000000140)={0x0, 0xf, 0xe3, {0x5, 0xf, 0xe3, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x2, 0xbb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1f, 0x5, 0x3ff}, @generic={0xc0, 0x10, 0xb, "02857272f189f6df649ab3de3835c5bb19a14698ec4048b5964508c3295ec8de68ef494db08cd9d04dd95e8cb87b19ccc59a5631874b545c352cf8076e7ab1d1d083044a2d47f91bbcc63f4990eb5a877ccb1d6d7738e94d30bbeb6f93a9d9bdf8df56f426f6e32860e10ef5309962d1380bf2154c96d8ebd2c312cfacc9a8c4e08f598507eff84c947698dd9d29290ccb11bdf5e1e463c1a07d8065a29a578e4103441c8823dc101979f5aa32e0ffc0b8255ec03e4926ec797fa7f49f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x5}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf6, 0x0, 0x1, 0x7, "cfa9c6b1", "9167d82d"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf3, 0x4, 0x3f, 0x9, 0x3f, 0x88c, 0x7f}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xc, 0x98, "af6c2cf90f0db3e683216ec67367e166e6e34197ce21524d7ea8eeba5e219d0318050944b309c71bd0e8303b2f17f45a9353aa930d461f219fbd6b17f29eaab1ef20e43d40159e6c3cca3e00cd1784b409c1ffcb96c018024db01a961efa240d5f8942c9cc9b86b0f012f1660b416d7152719ba3a9cc842d56bcfaa9086d7f812cb7accc7e67bac323b7d0c0df6543b0c346575dd05e651a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000000440)={0x20, 0x0, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "a05e"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "c798"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xc5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000940)={0x14, &(0x7f0000000840)={0x20, 0xe, 0x78, {0x78, 0x31, "78bd5051b296be0a08c8cde513789f3ffb025e42a40ad5b03080b5250cc9267bb9a4c7c894d6e3f62c90580ec33454de0c61e872025dfa61d410b7ff4d2c89624ef8159b8cd92ba43d30238dc566edf1a04ea20d50c216019388105b124cd1e5b3f8e92ead2c4b8bfe5cacf8176fc63afb653f0a2a65"}}, &(0x7f00000008c0)={0x0, 0x3, 0x56, @string={0x56, 0x3, "74a5abd55be1ba07df30a2ed5b734a26188f68c373b1b0739a280ececad5d57c5e70755ca8535c688e63c3713b43e7b9c73024a33d7d50c632714cdb4803cb2bfba3531fc38aa61db178bc6ef9fc5fe40b011020"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x20, 0x0, 0x2, "b8a0"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x81, 0x1, "f6"}, &(0x7f0000000a80)={0x20, 0x82, 0x3, "8a389a"}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, "95c7"}, &(0x7f0000000b00)={0x20, 0x84, 0x2, "8a0a"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, 'Sr0, {0x5}}, './file0\x00'}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) copy_file_range(r3, &(0x7f00000004c0)=0x7ff, r0, &(0x7f0000000500)=0x9, 0x100000000, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x44000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000580)={0x0, 'ip6gretap0\x00', 0x1}, 0x18) readv(r2, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/154, 0x9a}, {&(0x7f0000001680)=""/242, 0xf2}, {&(0x7f0000001780)=""/154, 0x9a}, {&(0x7f0000001840)=""/121, 0x79}, {&(0x7f00000018c0)=""/6, 0x6}, {&(0x7f0000001900)=""/51, 0x33}, {&(0x7f0000001940)=""/185, 0xb9}, {&(0x7f0000001a00)=""/190, 0xbe}], 0x9) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001b80), 0x400, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) fchmod(r2, 0x160) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001bc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001e80)={0x9, 0x1, {0x4, @struct={0x1, 0x2}, 0x0, 0x46ff, 0x7, 0x4e, 0xd, 0xd82e, 0x1, @struct={0x4, 0x5}, 0x1, 0x5, [0x5, 0x7ff, 0x80000000, 0x4, 0x0, 0xffff]}, {0x7, @usage=0x567, 0x0, 0x4, 0x80, 0x0, 0x7fffffff, 0x100, 0x10, @usage=0x7fffffff, 0x6, 0xffffb326, [0x7, 0x401, 0x7, 0x4, 0x4, 0x2]}, {0x393, @usage=0x9, 0x0, 0xffffffffffff8001, 0x4, 0x2, 0x2, 0x7, 0x10, @usage=0xbe0, 0x2, 0xc1, [0x0, 0x2f, 0x1, 0x6, 0x0, 0x3]}, {0x2, 0x100000000}}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000002280)={{r3}, r6, 0x8, @inherit={0x98, &(0x7f0000001dc0)={0x1, 0xa, 0x1, 0x9, {0x31, 0x5, 0x1, 0x3, 0x5c}, [0xf90, 0xffffffffffffff81, 0x1, 0x7fff, 0xfffffffffffffffa, 0x101, 0x1000, 0x1, 0xc688, 0x4]}}, @devid=r7}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000003280)='/dev/nvram\x00', &(0x7f00000032c0)='\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003300)) 09:19:07 executing program 7: r0 = memfd_secret(0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1c8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdda}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2dc3924b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10fa048c}]}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44081}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x87af}}, './file0\x00'}) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x18a, 0x1ff, 0x7fffffff, 0xb55]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = fcntl$dupfd(r1, 0x406, r0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x13, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20001) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000680)=[@window={0x3, 0xfff7, 0x8}, @window={0x3, 0x7fff, 0x8}], 0x2) r3 = syz_open_dev$vcsn(&(0x7f0000000700), 0xfffffffffffffffb, 0x600400) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r3) r4 = syz_open_dev$vcsn(&(0x7f0000000740), 0x5a978bd1, 0xd0240) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x218, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x276}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb8bd}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3fff800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x349b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9828}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001480)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000001440)={&(0x7f0000000ac0)={0x964, 0x1, 0x5, 0x201, 0x0, 0x0, {0xfe637b80237eb1fa, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7}, 0x8, 0x9, 0x1, 0xfffb, 0x0, 'syz1\x00', "5550446db6de30669614bd6516bee7016adc211e2cac3a2afa638344178b7353", "306f5c51668488cf7425efe42a32e72b0e05bea6efdf3f4d9f9599f69ab3d165", [{0xb7, 0x7f, {0x1, 0x2}}, {0x2, 0x3ff, {0x2, 0xaba2}}, {0x9, 0x488, {0x2, 0x40}}, {0x8, 0x800, {0x1, 0x200000}}, {0x6, 0x80, {0x7, 0xfffffff7}}, {0x5, 0x9, {0x3, 0xfff}}, {0x4, 0xba, {0x0, 0x1}}, {0x200, 0xc000, {0x3, 0x7}}, {0xb61, 0x4, {0x3, 0x4}}, {0x741, 0x1ff, {0x3}}, {0x2, 0x81, {0x1, 0x6}}, {0x3, 0x4, {0x3, 0x363}}, {0xfbff, 0x1ff, {0x0, 0x5}}, {0x3, 0x2, {0x2, 0x9}}, {0x7, 0x800, {0x1, 0x4}}, {0x2, 0x9, {0x2, 0x5}}, {0x6d, 0x7, {0x3, 0x2}}, {0x1f, 0x1ff, {0x0, 0x8}}, {0x817, 0x31a6, {0x0, 0x41}}, {0x4, 0x4, {0xeebd637c4daa77e0, 0x1}}, {0x0, 0x19, {0x0, 0xb59}}, {0x8c9, 0x4, {0x1, 0x10001}}, {0x3, 0xc, {0x1, 0x4}}, {0x2, 0x100, {0x1, 0xfffffffc}}, {0x9, 0x9ef, {0x3, 0x834}}, {0xff7f, 0x7fff, {0x1, 0x751efa28}}, {0x9, 0x8001, {0x0, 0x39}}, {0x3, 0x82, {0x0, 0x9}}, {0x3, 0x2, {0x2, 0xae9}}, {0x8, 0x2, {0x2, 0x3f}}, {0x0, 0xfff9, {0x2, 0x3}}, {0x1f, 0x401, {0x2, 0x1}}, {0x8000, 0x0, {0x1, 0x9}}, {0x8000, 0x3, {0x0, 0x3}}, {0x8880, 0x7f, {0x3, 0x5}}, {0x9, 0x779, {0x1, 0xffffffe0}}, {0xfff, 0xff, {0x2}}, {0x101, 0x0, {0x0, 0x1f}}, {0x4, 0x100, {0x1, 0x9}}, {0xd47, 0x7, {0x1, 0x800}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x3, 0x3f, 0x5, 0x3, 0x1e, 'syz0\x00', "b7429ac0de45c46c153d4910a20441fa65228e04b5c2559abd48619d17ae1dc2", "425ee7dbc937e1cf8f12e7e8f956c8bda861542a546e8d45d7cbbd085f7844ef", [{0x20, 0x1, {0x0, 0x9f6}}, {0x20, 0x6, {0x3, 0x2}}, {0x4, 0xba7c, {0x1, 0x4}}, {0xfff, 0x1, {0x1, 0x7}}, {0x2, 0x4, {0x1, 0x7fffffff}}, {0x7, 0x1f, {0x2, 0xb5a9}}, {0xfff7, 0x8, {0x0, 0x10001}}, {0x8000, 0xfff9, {0x1, 0x1c}}, {0x8000, 0x3, {0x3, 0x47ac}}, {0x101, 0x2c, {0x0, 0x1}}, {0x4, 0xd03, {0x3, 0x4}}, {0x6, 0x5, {0x2, 0x7}}, {0xd987, 0xcc, {0x2, 0x9}}, {0x1f, 0x6, {0x1}}, {0xfffb, 0x2, {0x0, 0x7ff}}, {0x800, 0x7f, {0x3, 0x1}}, {0x506, 0x0, {0x2, 0xdb}}, {0x4573, 0x400, {0x0, 0x2}}, {0x5, 0x8, {0x2, 0x3}}, {0x8, 0xa40c, {0x3, 0x3}}, {0x60d, 0x3ff, {0x1, 0xfffff195}}, {0x0, 0x6, {0x0, 0x7ff}}, {0x7, 0x7c4, {0x3, 0x6}}, {0x1, 0xd5b2, {0x1, 0x20}}, {0x3f, 0x40, {0x0, 0x7f}}, {0x2184, 0x2, {0x0, 0x1}}, {0x6, 0x8, {0x3}}, {0x5, 0x7, {0x1, 0x9}}, {0x6, 0x9, {0x1, 0x8}}, {0xf6a, 0x0, {0x1, 0x101}}, {0x81, 0x1, {0x0, 0x401}}, {0x81, 0x3a0f, {0x3, 0x9}}, {0x1, 0xfff9, {0x3, 0x80000000}}, {0x8000, 0x6, {0x3, 0x7}}, {0x4, 0x0, {0x2, 0x3}}, {0x1, 0xaf, {0x1, 0x1000}}, {0x3, 0x3, {0x3, 0xffffffc0}}, {0x3ff, 0x200, {0x0, 0xffff}}, {0x4, 0x1, {0x3, 0x3f}}, {0x3, 0x1000, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{0x6, 0x40}, 0x3e, 0x8, 0x9, 0xfff, 0x19, 'syz1\x00', "3fc7173bfb98ea3f7ec9356841065433043b51d54dc376a86a052f4d83882208", "3ada1cec23a7ab8c02e2db5a0712307b8fcb4af006f8885718e76f0b29dbbeb8", [{0x1f, 0x7, {0x3, 0x8}}, {0x8, 0x9, {0x2, 0x4}}, {0x5, 0x6, {0x3, 0xb1e}}, {0x7fff, 0x2, {0x0, 0x6dd}}, {0xd7c, 0x2, {0x2, 0x10001}}, {0x7, 0x3, {0x0, 0xff}}, {0x8, 0x1, {0x1, 0x81}}, {0x25, 0x1f, {0x1, 0xbb}}, {0x18, 0x8, {0x0, 0x1c}}, {0x7ff, 0xd909, {0x2, 0x81}}, {0x101, 0x2, {0x2}}, {0x1, 0x3, {0x2, 0x3}}, {0x3, 0x7fff, {0x3, 0x3}}, {0x1, 0x5, {0x0, 0x1ff}}, {0x1, 0x3ff, {0x3, 0x9f44}}, {0x100, 0x644, {0x1, 0x7ff}}, {0x7fff, 0x6, {0x3, 0xda}}, {0x5, 0x6, {0x1, 0x5ad}}, {0x100, 0x6, {0x2, 0x2}}, {0x9, 0x5, {0x0, 0x1}}, {0x9, 0x5, {0x3}}, {0x101, 0x7, {0x0, 0x8}}, {0x0, 0x89, {0x2, 0x1}}, {0x1, 0xc74, {0x2, 0x5}}, {0x2, 0x7fff, {0x1}}, {0xfffc, 0x9801, {0x3}}, {0xff44, 0x400, {0x3, 0x4}}, {0x0, 0x1f, {0x2, 0x5}}, {0x9, 0xa022, {0x1, 0xffff}}, {0x8, 0x0, {0x1}}, {0xd8db, 0x6, {0x3, 0x7}}, {0x6, 0x6, {0x2}}, {0x7a62, 0x7f, {0x3, 0x81}}, {0x8000, 0x4, {0x1, 0x7}}, {0x2, 0x3, {0x3, 0x3a2a5946}}, {0x20, 0xf, {0x0, 0x3}}, {0x20, 0x5, {0x0, 0x7f}}, {0x6, 0x3ff, {0x2, 0x7f4b}}, {0x80, 0x3, {0x2, 0x10001}}, {0x0, 0x0, {0x1, 0x11}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x0, 0x1, 0x3, 0x3, 0x14, 'syz1\x00', "aee94657f1206d3060c42096fc6d89ccd3196e9b02e7b0ed4b345e8947a9a13c", "df3fd61e0ae1f194df3dbbd7326472ab8ebd56c53a1d6c319ec9eb1810f47329", [{0x7, 0x1, {0x2, 0x101}}, {0x0, 0x3, {0x1, 0xffff}}, {0x2, 0xfff7, {0x3, 0xe9}}, {0x3, 0x2, {0x3}}, {0x4b, 0x4, {0x3, 0x1f}}, {0x3, 0x3f, {0x3, 0x1}}, {0x3, 0x6, {0x3, 0x1}}, {0x100, 0x0, {0x3, 0x9}}, {0x101, 0x7, {0x1}}, {0x8001, 0xf683, {0x2, 0xe668}}, {0x4, 0xca, {0x2, 0x80000000}}, {0x0, 0xfc, {0x3, 0x1}}, {0x9b60, 0x5, {0x1, 0xc46}}, {0x7, 0xb29, {0x0, 0x3}}, {0x0, 0x1af, {0x2, 0x200}}, {0x7, 0x400, {0x1, 0x1}}, {0xffff, 0x0, {0x0, 0x3}}, {0x92, 0x52c5, {0x3, 0x1}}, {0x100, 0x7, {0x1, 0x8}}, {0x3ff, 0x4, {0x3, 0x5402}}, {0x6, 0x0, {0x0, 0x4}}, {0x299e, 0x7, {0x1, 0x9}}, {0x1, 0x62, {0x1, 0x3}}, {0x7fff, 0x2, {0x3, 0xfffffffc}}, {0x101, 0x1, {0x3, 0x2}}, {0x9, 0x6, {0x1, 0xe0000}}, {0x1000, 0x4}, {0x0, 0x101, {0x2, 0x40}}, {0x7ff, 0xde6, {0x2, 0x4}}, {0x9, 0x0, {0x2, 0x8000}}, {0x100, 0x4, {0x3, 0xfffffff8}}, {0x8200, 0x0, {0x2, 0x5}}, {0x35c, 0x66, {0x2, 0x6}}, {0x3, 0x4, {0x0, 0x40}}, {0xfa2, 0x8, {0x1, 0x2}}, {0xfffa, 0x8, {0x3, 0x40000000}}, {0x8, 0xffff, {0x2, 0x4}}, {0x3ff, 0x5, {0x0, 0x4}}, {0x4, 0x5, {0x3, 0xfff}}, {0x0, 0x1, {0x3, 0xaf6}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000014c0)=0x1, 0x4) r5 = openat2(r3, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x101800, 0x80, 0x1b}, 0x18) fcntl$setsig(r5, 0xa, 0x36) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x60008094}, 0x2000000c) openat(r3, &(0x7f00000016c0)='./file1\x00', 0x20400, 0x92) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000001b80)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001740)={0x3d0, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x643}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffa4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf9, 0x3, "4db44cda71a55f3204024e678ac6782ac64618a1e35c172b5301f423ade89ea65c39b6da7cb2ed03d7ec827392a0984e483bbdc971de834621088bdc46a24faf4dae394b4e0de9b0eeab097b54af6aaa30bc0dc7801ebb54c140db05116611d6d66c23c70e503e7521533064b470bba79d4552ec6f406eee5e6280320bba01bc82b99e1cfd9dc1fc18c60c7f7d463469657d97f18e5c6ac64097b78e745f5bf11f180c7f5a52471fa944e11ecfdbd461921dbc6e8d4c9d275fbf767ebf326b8fd7bbbbd6e10e5eee3bb66bde055cd3f00bf09a32d7d02cb5c7c03cbcef66d71680347e53554057ef37b5b6e4340fecf99a893c7751"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x568}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x2004c007}, 0x0) [ 70.290514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.292491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.295826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.296837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.299626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.300007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.303793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.305431] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.306643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.311237] Bluetooth: hci1: HCI_REQ-0x0c1a [ 70.359088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.360768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.364688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.366457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.368443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.369741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.371861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.373030] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.374874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.376233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.379245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.382567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.384193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.384973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.388639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.389733] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.390819] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 70.391716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.392993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.395828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.396975] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.398024] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.400265] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.401345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.402369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.404030] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.408542] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.408710] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.428988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.429120] Bluetooth: hci4: HCI_REQ-0x0c1a [ 70.434545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.442898] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.452996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.454962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.456790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.459763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.461616] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.463019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.467298] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.375731] Bluetooth: hci1: command 0x0409 tx timeout [ 72.375875] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 72.439846] Bluetooth: hci7: command 0x0409 tx timeout [ 72.439870] Bluetooth: hci3: command 0x0409 tx timeout [ 72.441293] Bluetooth: hci4: command 0x0409 tx timeout [ 72.442000] Bluetooth: hci6: command 0x0409 tx timeout [ 72.504252] Bluetooth: hci5: command 0x0409 tx timeout [ 72.505060] Bluetooth: hci0: command 0x0409 tx timeout [ 74.424205] Bluetooth: hci1: command 0x041b tx timeout [ 74.487289] Bluetooth: hci4: command 0x041b tx timeout [ 74.487890] Bluetooth: hci3: command 0x041b tx timeout [ 74.488535] Bluetooth: hci7: command 0x041b tx timeout [ 74.489113] Bluetooth: hci6: command 0x041b tx timeout [ 74.552265] Bluetooth: hci0: command 0x041b tx timeout [ 74.552854] Bluetooth: hci5: command 0x041b tx timeout [ 75.514802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.515839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.516705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.518347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.519375] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.520273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.522876] Bluetooth: hci2: HCI_REQ-0x0c1a [ 76.471282] Bluetooth: hci1: command 0x040f tx timeout [ 76.536257] Bluetooth: hci6: command 0x040f tx timeout [ 76.536649] Bluetooth: hci7: command 0x040f tx timeout [ 76.537022] Bluetooth: hci3: command 0x040f tx timeout [ 76.537409] Bluetooth: hci4: command 0x040f tx timeout [ 76.599215] Bluetooth: hci5: command 0x040f tx timeout [ 76.599625] Bluetooth: hci0: command 0x040f tx timeout [ 77.560287] Bluetooth: hci2: command 0x0409 tx timeout [ 78.520217] Bluetooth: hci1: command 0x0419 tx timeout [ 78.583238] Bluetooth: hci4: command 0x0419 tx timeout [ 78.583706] Bluetooth: hci3: command 0x0419 tx timeout [ 78.584119] Bluetooth: hci7: command 0x0419 tx timeout [ 78.584562] Bluetooth: hci6: command 0x0419 tx timeout [ 78.647229] Bluetooth: hci0: command 0x0419 tx timeout [ 78.647710] Bluetooth: hci5: command 0x0419 tx timeout [ 79.607253] Bluetooth: hci2: command 0x041b tx timeout [ 81.656208] Bluetooth: hci2: command 0x040f tx timeout [ 83.704222] Bluetooth: hci2: command 0x0419 tx timeout [ 127.090326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.094300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.098789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.099583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.112703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.119382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:20:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, 0x0, 0x2, 0x201, 0x70bd27, 0x25dfdbfd, {0xc, 0x0, 0xa}, [@generic="a94a739b053f69528bebe206ad5b71d46ccf700ddc7d", @typed={0x8, 0x91, 0x0, 0x0, @fd=r3}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@local}, @generic="b60b8e68cb7c50df454081a55a7a01d7cedefdb27dffe546ec094159f6717c1075f8c4ec20f01c35443f62b0ec28d9a088d92deebdc469d028e096ee80c755066f71b58f6ae21c034aadd7c54f27250f980a082aa93cc9cf675d7fc115f9e6a687885082bb8c653793edb4504b907b6adfc08136c91409ea4e2801e8902d3a609210a9fa9f1ced7cec662a3382584fc0c61e03c20b785f5a2baa249b7d4949624ad396b98d462841c9a76360c7f1e182c974b22342cb22a772", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x6}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) dup2(r1, r0) [ 127.123268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.124026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.128698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.129795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.181443] audit: type=1400 audit(1664788805.557:7): avc: denied { open } for pid=3859 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.183396] audit: type=1400 audit(1664788805.557:8): avc: denied { kernel } for pid=3859 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.210946] ------------[ cut here ]------------ [ 127.210970] [ 127.210974] ====================================================== [ 127.210978] WARNING: possible circular locking dependency detected [ 127.210982] 6.0.0-rc7-next-20220930 #1 Not tainted [ 127.210988] ------------------------------------------------------ [ 127.210992] syz-executor.1/3862 is trying to acquire lock: [ 127.210999] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 127.211040] [ 127.211040] but task is already holding lock: [ 127.211044] ffff8880403ae820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.211070] [ 127.211070] which lock already depends on the new lock. [ 127.211070] [ 127.211073] [ 127.211073] the existing dependency chain (in reverse order) is: [ 127.211076] [ 127.211076] -> #3 (&ctx->lock){....}-{2:2}: [ 127.211090] _raw_spin_lock+0x2a/0x40 [ 127.211102] __perf_event_task_sched_out+0x53b/0x18d0 [ 127.211113] __schedule+0xedd/0x2470 [ 127.211127] schedule+0xda/0x1b0 [ 127.211140] futex_wait_queue+0xf5/0x1e0 [ 127.211155] futex_wait+0x28e/0x690 [ 127.211165] do_futex+0x2ff/0x380 [ 127.211175] __x64_sys_futex+0x1c6/0x4d0 [ 127.211185] do_syscall_64+0x3b/0x90 [ 127.211203] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.211215] [ 127.211215] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 127.211229] _raw_spin_lock_nested+0x30/0x40 [ 127.211239] raw_spin_rq_lock_nested+0x1e/0x30 [ 127.211253] task_fork_fair+0x63/0x4d0 [ 127.211269] sched_cgroup_fork+0x3d0/0x540 [ 127.211284] copy_process+0x4183/0x6e20 [ 127.211294] kernel_clone+0xe7/0x890 [ 127.211304] user_mode_thread+0xad/0xf0 [ 127.211314] rest_init+0x24/0x250 [ 127.211325] arch_call_rest_init+0xf/0x14 [ 127.211343] start_kernel+0x4c6/0x4eb [ 127.211358] secondary_startup_64_no_verify+0xe0/0xeb [ 127.211372] [ 127.211372] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 127.211385] _raw_spin_lock_irqsave+0x39/0x60 [ 127.211396] try_to_wake_up+0xab/0x1930 [ 127.211409] up+0x75/0xb0 [ 127.211423] __up_console_sem+0x6e/0x80 [ 127.211438] console_unlock+0x46a/0x590 [ 127.211454] vprintk_emit+0x1bd/0x560 [ 127.211470] vprintk+0x84/0xa0 [ 127.211486] _printk+0xba/0xf1 [ 127.211497] kauditd_hold_skb.cold+0x3f/0x4e [ 127.211514] kauditd_send_queue+0x233/0x290 [ 127.211529] kauditd_thread+0x5f9/0x9c0 [ 127.211543] kthread+0x2ed/0x3a0 [ 127.211557] ret_from_fork+0x22/0x30 [ 127.211569] [ 127.211569] -> #0 ((console_sem).lock){....}-{2:2}: [ 127.211582] __lock_acquire+0x2a02/0x5e70 [ 127.211599] lock_acquire+0x1a2/0x530 [ 127.211615] _raw_spin_lock_irqsave+0x39/0x60 [ 127.211625] down_trylock+0xe/0x70 [ 127.211640] __down_trylock_console_sem+0x3b/0xd0 [ 127.211656] vprintk_emit+0x16b/0x560 [ 127.211672] vprintk+0x84/0xa0 [ 127.211687] _printk+0xba/0xf1 [ 127.211697] report_bug.cold+0x72/0xab [ 127.211713] handle_bug+0x3c/0x70 [ 127.211729] exc_invalid_op+0x14/0x50 [ 127.211746] asm_exc_invalid_op+0x16/0x20 [ 127.211758] group_sched_out.part.0+0x2c7/0x460 [ 127.211776] ctx_sched_out+0x8f1/0xc10 [ 127.211792] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.211803] __schedule+0xedd/0x2470 [ 127.211816] schedule+0xda/0x1b0 [ 127.211829] futex_wait_queue+0xf5/0x1e0 [ 127.211840] futex_wait+0x28e/0x690 [ 127.211850] do_futex+0x2ff/0x380 [ 127.211859] __x64_sys_futex+0x1c6/0x4d0 [ 127.211869] do_syscall_64+0x3b/0x90 [ 127.211885] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.211898] [ 127.211898] other info that might help us debug this: [ 127.211898] [ 127.211900] Chain exists of: [ 127.211900] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 127.211900] [ 127.211915] Possible unsafe locking scenario: [ 127.211915] [ 127.211917] CPU0 CPU1 [ 127.211920] ---- ---- [ 127.211922] lock(&ctx->lock); [ 127.211927] lock(&rq->__lock); [ 127.211934] lock(&ctx->lock); [ 127.211940] lock((console_sem).lock); [ 127.211946] [ 127.211946] *** DEADLOCK *** [ 127.211946] [ 127.211948] 2 locks held by syz-executor.1/3862: [ 127.211954] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 127.211983] #1: ffff8880403ae820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.212009] [ 127.212009] stack backtrace: [ 127.212012] CPU: 0 PID: 3862 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 127.212024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.212032] Call Trace: [ 127.212036] [ 127.212040] dump_stack_lvl+0x8b/0xb3 [ 127.212058] check_noncircular+0x263/0x2e0 [ 127.212074] ? format_decode+0x26c/0xb50 [ 127.212090] ? print_circular_bug+0x450/0x450 [ 127.212107] ? simple_strtoul+0x30/0x30 [ 127.212123] ? format_decode+0x26c/0xb50 [ 127.212140] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 127.212158] __lock_acquire+0x2a02/0x5e70 [ 127.212179] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 127.212201] lock_acquire+0x1a2/0x530 [ 127.212218] ? down_trylock+0xe/0x70 [ 127.212235] ? lock_release+0x750/0x750 [ 127.212255] ? vprintk+0x84/0xa0 [ 127.212272] _raw_spin_lock_irqsave+0x39/0x60 [ 127.212284] ? down_trylock+0xe/0x70 [ 127.212300] down_trylock+0xe/0x70 [ 127.212315] ? vprintk+0x84/0xa0 [ 127.212332] __down_trylock_console_sem+0x3b/0xd0 [ 127.212349] vprintk_emit+0x16b/0x560 [ 127.212368] vprintk+0x84/0xa0 [ 127.212385] _printk+0xba/0xf1 [ 127.212396] ? record_print_text.cold+0x16/0x16 [ 127.212412] ? report_bug.cold+0x66/0xab [ 127.212429] ? group_sched_out.part.0+0x2c7/0x460 [ 127.212448] report_bug.cold+0x72/0xab [ 127.212466] handle_bug+0x3c/0x70 [ 127.212483] exc_invalid_op+0x14/0x50 [ 127.212501] asm_exc_invalid_op+0x16/0x20 [ 127.212514] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.212534] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.212546] RSP: 0018:ffff8880407b78f8 EFLAGS: 00010006 [ 127.212554] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.212562] RDX: ffff8880183c5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 127.212570] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 127.212577] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff8880403ae800 [ 127.212585] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 127.212595] ? group_sched_out.part.0+0x2c7/0x460 [ 127.212615] ? group_sched_out.part.0+0x2c7/0x460 [ 127.212635] ctx_sched_out+0x8f1/0xc10 [ 127.212654] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.212668] ? lock_is_held_type+0xd7/0x130 [ 127.212682] ? __perf_cgroup_move+0x160/0x160 [ 127.212692] ? set_next_entity+0x304/0x550 [ 127.212712] ? lock_is_held_type+0xd7/0x130 [ 127.212726] __schedule+0xedd/0x2470 [ 127.212743] ? io_schedule_timeout+0x150/0x150 [ 127.212758] ? futex_wait_setup+0x166/0x230 [ 127.212773] schedule+0xda/0x1b0 [ 127.212788] futex_wait_queue+0xf5/0x1e0 [ 127.212800] futex_wait+0x28e/0x690 [ 127.212812] ? futex_wait_setup+0x230/0x230 [ 127.212826] ? wake_up_q+0x8b/0xf0 [ 127.212839] ? do_raw_spin_unlock+0x4f/0x220 [ 127.212858] ? futex_wake+0x158/0x490 [ 127.212874] ? fd_install+0x1f9/0x640 [ 127.212889] do_futex+0x2ff/0x380 [ 127.212901] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 127.212917] __x64_sys_futex+0x1c6/0x4d0 [ 127.212930] ? __x64_sys_futex_time32+0x480/0x480 [ 127.212942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.212956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.212972] do_syscall_64+0x3b/0x90 [ 127.212989] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.213002] RIP: 0033:0x7f4814296b19 [ 127.213011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.213021] RSP: 002b:00007f481180c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.213032] RAX: ffffffffffffffda RBX: 00007f48143a9f68 RCX: 00007f4814296b19 [ 127.213040] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f48143a9f68 [ 127.213047] RBP: 00007f48143a9f60 R08: 0000000000000000 R09: 0000000000000000 [ 127.213054] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48143a9f6c [ 127.213061] R13: 00007fffe2654d3f R14: 00007f481180c300 R15: 0000000000022000 [ 127.213073] [ 127.271918] WARNING: CPU: 0 PID: 3862 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 127.272588] Modules linked in: [ 127.272822] CPU: 0 PID: 3862 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 127.273403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.274207] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.274610] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.275894] RSP: 0018:ffff8880407b78f8 EFLAGS: 00010006 [ 127.276282] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.276795] RDX: ffff8880183c5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 127.277305] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 127.277818] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff8880403ae800 [ 127.278325] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 127.278842] FS: 00007f481180c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 127.279411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.279826] CR2: 00007f19117a3260 CR3: 000000003f69e000 CR4: 0000000000350ef0 [ 127.280335] Call Trace: [ 127.280523] [ 127.280694] ctx_sched_out+0x8f1/0xc10 [ 127.280991] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.281366] ? lock_is_held_type+0xd7/0x130 [ 127.281705] ? __perf_cgroup_move+0x160/0x160 [ 127.282054] ? set_next_entity+0x304/0x550 [ 127.282377] ? lock_is_held_type+0xd7/0x130 [ 127.282710] __schedule+0xedd/0x2470 [ 127.282996] ? io_schedule_timeout+0x150/0x150 [ 127.283323] ? futex_wait_setup+0x166/0x230 [ 127.283632] schedule+0xda/0x1b0 [ 127.283887] futex_wait_queue+0xf5/0x1e0 [ 127.284179] futex_wait+0x28e/0x690 [ 127.284445] ? futex_wait_setup+0x230/0x230 [ 127.284756] ? wake_up_q+0x8b/0xf0 [ 127.285021] ? do_raw_spin_unlock+0x4f/0x220 [ 127.285352] ? futex_wake+0x158/0x490 [ 127.285631] ? fd_install+0x1f9/0x640 [ 127.285924] do_futex+0x2ff/0x380 [ 127.286176] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 127.286585] __x64_sys_futex+0x1c6/0x4d0 [ 127.286875] ? __x64_sys_futex_time32+0x480/0x480 [ 127.287222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.287589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.287957] do_syscall_64+0x3b/0x90 [ 127.288237] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.288603] RIP: 0033:0x7f4814296b19 [ 127.288872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.290140] RSP: 002b:00007f481180c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.290685] RAX: ffffffffffffffda RBX: 00007f48143a9f68 RCX: 00007f4814296b19 [ 127.291180] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f48143a9f68 [ 127.291676] RBP: 00007f48143a9f60 R08: 0000000000000000 R09: 0000000000000000 [ 127.292197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48143a9f6c [ 127.292724] R13: 00007fffe2654d3f R14: 00007f481180c300 R15: 0000000000022000 [ 127.293252] [ 127.293430] irq event stamp: 696 [ 127.293702] hardirqs last enabled at (695): [] syscall_enter_from_user_mode+0x1d/0x50 [ 127.294401] hardirqs last disabled at (696): [] __schedule+0x1225/0x2470 [ 127.295019] softirqs last enabled at (540): [] __irq_exit_rcu+0x11b/0x180 [ 127.295649] softirqs last disabled at (449): [] __irq_exit_rcu+0x11b/0x180 [ 127.296275] ---[ end trace 0000000000000000 ]--- 09:20:05 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) r1 = signalfd4(r0, &(0x7f0000000100)={[0x7]}, 0x8, 0x81000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x80}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"}) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1", 0x1d}], 0x1) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x5, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x0, 0x0, 0x1000}}) 09:20:05 executing program 6: set_mempolicy(0x5, &(0x7f0000000000)=0x3, 0x3ff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x244740, 0x0) set_mempolicy(0x8000, &(0x7f0000000080)=0x8, 0x6) set_mempolicy(0x8000, &(0x7f00000000c0)=0x3, 0x2c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x4000010, r0, 0x6234b000) 09:20:06 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014a00)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x40, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="e958044938224392a1c9e8dbe597", 0xe, 0x5}, {&(0x7f00000002c0)="d033421fc5251e0e1b34881eed4c6d49b2aab0e0dc64033a25e10cda295ee90a99a7cc4e3a0683689bbb4c29064eb27b0ba93c9857457e6eea5268e93a9cd2f20ebd16bd5db5ca30e7af0594cfda5aa82ea9f9e7de6a7a2143a53b6103689401940390b0745bbb5e7414a15909eae10c20ff0fcb63c6a0c3a4dec013caf17b8796c1047248ac0f92b257eab7bddacf628a2a4c1ce19a993efdc9e6099fba66025df9fc991acce9d50eff511a38fec99276c411f4458be67a80141eaa018e61113e5f3414", 0xc4, 0x5}, {&(0x7f00000003c0), 0x0, 0x3}], 0x1004020, &(0x7f0000000540)={[{@size={'size', 0x3d, [0x25, 0x30, 0x0]}}, {@mode={'mode', 0x3d, 0x7fffffff}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x78, 0x74]}}, {@huge_never}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@uid={'uid', 0x3d, r1}}, {@huge_within_size}, {@size={'size', 0x3d, [0x1c, 0x2d, 0x25, 0x70, 0x39, 0x25, 0x2d]}}], [{@smackfshat}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x24041, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6c6f6f73652c63616368657413e36bde787434002c752cc2186b66736861743d7c396366383552612d300939382d666266382d383600652d3066356664391fe8e7a723e551322767077456a165312c00000000000000000000000000038e70e14af7b79cb607d200"]) [ 127.724573] loop6: detected capacity change from 0 to 16 [ 127.735055] EXT4-fs (loop6): unsupported descriptor size 0 09:20:06 executing program 5: r0 = getpgid(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) sched_getparam(r2, &(0x7f0000000000)) getpgid(r2) [ 127.831232] ======================================================= [ 127.831232] WARNING: The mand mount option has been deprecated and [ 127.831232] and is ignored by this kernel. Remove the mand [ 127.831232] option from the mount to silence this warning. [ 127.831232] ======================================================= [ 127.833910] loop6: detected capacity change from 0 to 16 [ 127.835880] EXT4-fs (loop6): unsupported descriptor size 0 09:20:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 09:20:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r8, @ANYRESHEX=r7, @ANYRES64, @ANYRESOCT, @ANYRES64=r6, @ANYRES32, @ANYRESOCT]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r8}}, './file0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) [ 127.929496] Zero length message leads to an empty skb 09:20:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3f, 0x0, 0x7, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 128.060258] hrtimer: interrupt took 19236 ns [ 133.303307] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 135.482810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.484922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.491059] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.494304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.496384] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 135.498070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.502589] Bluetooth: hci4: HCI_REQ-0x0c1a VM DIAGNOSIS: 09:20:05 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880407b7340 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f481180c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f19117a3260 CR3=000000003f69e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f481437d7c0 00007f481437d7c8 YMM02=0000000000000000 0000000000000000 00007f481437d7e0 00007f481437d7c0 YMM03=0000000000000000 0000000000000000 00007f481437d7c8 00007f481437d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3f080 RCX=0000000000000000 RDX=ffff88801b0c1ac0 RSI=ffffffff813bbaa7 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888018887958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c7e11 R14=ffff88806ce3f088 R15=0000000000000001 RIP=ffffffff813bbaa9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555573400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f481439ed5c CR3=000000003f69e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f481437d7c0 00007f481437d7c8 YMM02=0000000000000000 0000000000000000 00007f481437d7e0 00007f481437d7c0 YMM03=0000000000000000 0000000000000000 00007f481437d7c8 00007f481437d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000