Warning: Permanently added '[localhost]:63731' (ECDSA) to the list of known hosts. 2022/10/03 17:55:50 fuzzer started 2022/10/03 17:55:50 dialing manager at localhost:35095 syzkaller login: [ 42.565461] cgroup: Unknown subsys name 'net' [ 42.654155] cgroup: Unknown subsys name 'rlimit' 2022/10/03 17:56:04 syscalls: 2215 2022/10/03 17:56:04 code coverage: enabled 2022/10/03 17:56:04 comparison tracing: enabled 2022/10/03 17:56:04 extra coverage: enabled 2022/10/03 17:56:04 setuid sandbox: enabled 2022/10/03 17:56:04 namespace sandbox: enabled 2022/10/03 17:56:04 Android sandbox: enabled 2022/10/03 17:56:04 fault injection: enabled 2022/10/03 17:56:04 leak checking: enabled 2022/10/03 17:56:04 net packet injection: enabled 2022/10/03 17:56:04 net device setup: enabled 2022/10/03 17:56:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 17:56:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 17:56:04 USB emulation: enabled 2022/10/03 17:56:04 hci packet injection: enabled 2022/10/03 17:56:04 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 17:56:04 802.15.4 emulation: enabled 2022/10/03 17:56:04 fetching corpus: 50, signal 29963/31769 (executing program) 2022/10/03 17:56:04 fetching corpus: 100, signal 39000/42502 (executing program) 2022/10/03 17:56:05 fetching corpus: 150, signal 46268/51381 (executing program) 2022/10/03 17:56:05 fetching corpus: 200, signal 55222/61776 (executing program) 2022/10/03 17:56:05 fetching corpus: 250, signal 61021/69025 (executing program) 2022/10/03 17:56:05 fetching corpus: 300, signal 65395/74833 (executing program) 2022/10/03 17:56:05 fetching corpus: 350, signal 71036/81795 (executing program) 2022/10/03 17:56:05 fetching corpus: 400, signal 75853/87936 (executing program) 2022/10/03 17:56:05 fetching corpus: 450, signal 77785/91256 (executing program) 2022/10/03 17:56:05 fetching corpus: 500, signal 81644/96297 (executing program) 2022/10/03 17:56:06 fetching corpus: 550, signal 84192/100095 (executing program) 2022/10/03 17:56:06 fetching corpus: 600, signal 86241/103466 (executing program) 2022/10/03 17:56:06 fetching corpus: 650, signal 89483/107876 (executing program) 2022/10/03 17:56:06 fetching corpus: 700, signal 92429/111992 (executing program) 2022/10/03 17:56:06 fetching corpus: 750, signal 95627/116321 (executing program) 2022/10/03 17:56:06 fetching corpus: 800, signal 97555/119451 (executing program) 2022/10/03 17:56:06 fetching corpus: 850, signal 103122/125781 (executing program) 2022/10/03 17:56:06 fetching corpus: 900, signal 107428/130895 (executing program) 2022/10/03 17:56:07 fetching corpus: 950, signal 109786/134240 (executing program) 2022/10/03 17:56:07 fetching corpus: 1000, signal 111607/137051 (executing program) 2022/10/03 17:56:07 fetching corpus: 1050, signal 113372/139865 (executing program) 2022/10/03 17:56:07 fetching corpus: 1100, signal 115275/142688 (executing program) 2022/10/03 17:56:07 fetching corpus: 1150, signal 116893/145343 (executing program) 2022/10/03 17:56:07 fetching corpus: 1200, signal 118567/147997 (executing program) 2022/10/03 17:56:07 fetching corpus: 1250, signal 120561/150928 (executing program) 2022/10/03 17:56:07 fetching corpus: 1300, signal 122962/154099 (executing program) 2022/10/03 17:56:07 fetching corpus: 1350, signal 124367/156481 (executing program) 2022/10/03 17:56:07 fetching corpus: 1400, signal 125112/158302 (executing program) 2022/10/03 17:56:08 fetching corpus: 1450, signal 126459/160592 (executing program) 2022/10/03 17:56:08 fetching corpus: 1500, signal 128232/163194 (executing program) 2022/10/03 17:56:08 fetching corpus: 1550, signal 130122/165890 (executing program) 2022/10/03 17:56:08 fetching corpus: 1600, signal 131345/168010 (executing program) 2022/10/03 17:56:08 fetching corpus: 1650, signal 132504/170044 (executing program) 2022/10/03 17:56:08 fetching corpus: 1700, signal 133655/172079 (executing program) 2022/10/03 17:56:08 fetching corpus: 1750, signal 135707/174784 (executing program) 2022/10/03 17:56:08 fetching corpus: 1800, signal 137022/176878 (executing program) 2022/10/03 17:56:09 fetching corpus: 1850, signal 138065/178790 (executing program) 2022/10/03 17:56:09 fetching corpus: 1900, signal 139087/180690 (executing program) 2022/10/03 17:56:09 fetching corpus: 1950, signal 140360/182699 (executing program) 2022/10/03 17:56:09 fetching corpus: 2000, signal 141515/184586 (executing program) 2022/10/03 17:56:09 fetching corpus: 2050, signal 142059/186069 (executing program) 2022/10/03 17:56:09 fetching corpus: 2100, signal 143683/188333 (executing program) 2022/10/03 17:56:09 fetching corpus: 2150, signal 144298/189812 (executing program) 2022/10/03 17:56:09 fetching corpus: 2200, signal 145105/191415 (executing program) 2022/10/03 17:56:09 fetching corpus: 2250, signal 146071/193177 (executing program) 2022/10/03 17:56:10 fetching corpus: 2300, signal 147655/195377 (executing program) 2022/10/03 17:56:10 fetching corpus: 2350, signal 149517/197696 (executing program) 2022/10/03 17:56:10 fetching corpus: 2400, signal 151467/200066 (executing program) 2022/10/03 17:56:10 fetching corpus: 2450, signal 153698/202599 (executing program) 2022/10/03 17:56:10 fetching corpus: 2500, signal 154700/204318 (executing program) 2022/10/03 17:56:10 fetching corpus: 2550, signal 155337/205681 (executing program) 2022/10/03 17:56:10 fetching corpus: 2600, signal 155979/207061 (executing program) 2022/10/03 17:56:10 fetching corpus: 2650, signal 156796/208596 (executing program) 2022/10/03 17:56:11 fetching corpus: 2700, signal 158060/210397 (executing program) 2022/10/03 17:56:11 fetching corpus: 2750, signal 158920/211938 (executing program) 2022/10/03 17:56:11 fetching corpus: 2800, signal 159554/213315 (executing program) 2022/10/03 17:56:11 fetching corpus: 2850, signal 160603/214983 (executing program) 2022/10/03 17:56:11 fetching corpus: 2900, signal 161464/216492 (executing program) 2022/10/03 17:56:11 fetching corpus: 2950, signal 162138/217831 (executing program) 2022/10/03 17:56:11 fetching corpus: 3000, signal 162815/219184 (executing program) 2022/10/03 17:56:11 fetching corpus: 3050, signal 163560/220560 (executing program) 2022/10/03 17:56:12 fetching corpus: 3100, signal 165464/222618 (executing program) 2022/10/03 17:56:12 fetching corpus: 3150, signal 166087/223886 (executing program) 2022/10/03 17:56:12 fetching corpus: 3200, signal 167570/225664 (executing program) 2022/10/03 17:56:12 fetching corpus: 3250, signal 168130/226895 (executing program) 2022/10/03 17:56:12 fetching corpus: 3300, signal 168844/228265 (executing program) 2022/10/03 17:56:12 fetching corpus: 3350, signal 169679/229637 (executing program) 2022/10/03 17:56:12 fetching corpus: 3400, signal 170030/230715 (executing program) 2022/10/03 17:56:12 fetching corpus: 3450, signal 170661/231963 (executing program) 2022/10/03 17:56:12 fetching corpus: 3500, signal 171613/233404 (executing program) 2022/10/03 17:56:12 fetching corpus: 3550, signal 172449/234721 (executing program) 2022/10/03 17:56:13 fetching corpus: 3600, signal 174608/236754 (executing program) 2022/10/03 17:56:13 fetching corpus: 3650, signal 175610/238115 (executing program) 2022/10/03 17:56:13 fetching corpus: 3700, signal 176546/239489 (executing program) 2022/10/03 17:56:13 fetching corpus: 3750, signal 177352/240738 (executing program) 2022/10/03 17:56:13 fetching corpus: 3800, signal 178147/241965 (executing program) 2022/10/03 17:56:13 fetching corpus: 3850, signal 178791/243070 (executing program) 2022/10/03 17:56:13 fetching corpus: 3900, signal 179228/244130 (executing program) 2022/10/03 17:56:13 fetching corpus: 3950, signal 179632/245148 (executing program) 2022/10/03 17:56:14 fetching corpus: 4000, signal 180273/246374 (executing program) 2022/10/03 17:56:14 fetching corpus: 4050, signal 180894/247522 (executing program) 2022/10/03 17:56:14 fetching corpus: 4100, signal 181638/248754 (executing program) 2022/10/03 17:56:14 fetching corpus: 4150, signal 182142/249773 (executing program) 2022/10/03 17:56:14 fetching corpus: 4200, signal 182626/250819 (executing program) 2022/10/03 17:56:14 fetching corpus: 4250, signal 183543/252080 (executing program) 2022/10/03 17:56:14 fetching corpus: 4300, signal 184361/253215 (executing program) 2022/10/03 17:56:14 fetching corpus: 4350, signal 185099/254396 (executing program) 2022/10/03 17:56:14 fetching corpus: 4400, signal 186059/255653 (executing program) 2022/10/03 17:56:15 fetching corpus: 4450, signal 186839/256788 (executing program) 2022/10/03 17:56:15 fetching corpus: 4500, signal 187675/257913 (executing program) 2022/10/03 17:56:15 fetching corpus: 4550, signal 188589/259051 (executing program) 2022/10/03 17:56:15 fetching corpus: 4600, signal 188999/259993 (executing program) 2022/10/03 17:56:15 fetching corpus: 4650, signal 189999/261140 (executing program) 2022/10/03 17:56:15 fetching corpus: 4700, signal 190702/262228 (executing program) 2022/10/03 17:56:15 fetching corpus: 4750, signal 191068/263147 (executing program) 2022/10/03 17:56:15 fetching corpus: 4800, signal 192099/264303 (executing program) 2022/10/03 17:56:15 fetching corpus: 4850, signal 192724/265310 (executing program) 2022/10/03 17:56:16 fetching corpus: 4900, signal 193136/266169 (executing program) 2022/10/03 17:56:16 fetching corpus: 4950, signal 193888/267188 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/268277 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/269045 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/269803 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/270519 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/271277 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/272015 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/272746 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/273502 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/274199 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/274933 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/275692 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/276464 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/277191 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/277970 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/278695 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/279434 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/280176 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/280935 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/281652 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/282403 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/283160 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/283893 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/284639 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/285362 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/286071 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/286807 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/287556 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/288326 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/289065 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/289842 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/290591 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/291342 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/292086 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/292844 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/293546 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/294308 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/295036 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/295759 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/296506 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/297218 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/297939 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/298684 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/299421 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/300154 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/300883 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/301613 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/302336 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/303088 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/303802 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/304523 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/305257 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/305957 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/306486 (executing program) 2022/10/03 17:56:16 fetching corpus: 5000, signal 194783/306486 (executing program) 2022/10/03 17:56:19 starting 8 fuzzer processes 17:56:19 executing program 0: r0 = getegid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x4, {0x1, 0x0, 0x8}, 0x47, 0xee01, r0, 0x6, 0x80000000, 0x5, 0x1, 0x7f, 0x4, 0x3, 0x1000000000, 0x1, 0x6, 0x100, 0x3, 0x1, 0xfff, 0x7}}, 0xa0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}}, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x0, r1, 0xffffffffffffffff, 0xee00, r0, 0x88, 0x2}, 0x0, 0x0, 0x1000, 0xffff, 0x9, 0x2, 0x49, 0x1, 0x8, 0x5, r3}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @dev}, &(0x7f0000000340)=0xc) fork() r4 = msgget$private(0x0, 0x31) msgctl$MSG_INFO(r4, 0xc, &(0x7f0000000380)=""/138) msgsnd(r4, &(0x7f0000000440)={0x3, "44601be6751bb0b2f1eaa38274fb0525383672fdc88746a166e1f6cf327d292c855c8f9ccced7a4514fcd4be475a84e50a8e34a7618f78e463344001510aa10acb4c43160b93b3a938dbe400c24755b0014ffc1ce488b08681b7b007d27ec9d2525d2b8465e41a661771a4544eb5c893a948ce7dbcf683551fd194e7a83e8b703fa167"}, 0x8b, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)) r5 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000580)=""/213) r6 = msgget(0x0, 0x90) msgrcv(r6, &(0x7f0000000680)={0x0, ""/226}, 0xea, 0x2, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f00000007c0)={0xef, "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"}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000a40)={0x7, 0x4d, 0x2}, 0x7) 17:56:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f0000001340)={{0x10b, 0x1, 0x7, 0x20e, 0xd, 0x1195ab54, 0xb8, 0x42}, "3449674926415333144ea534f8725bb93cc4b22e64f9170061afe4a0ee34855809e4eac975fc7bb1c934d1824fb0de706c6d53fe1234e09d4b0bb874980f810ee9fa76d9ef397cac1cb6f3acdd251fe59a5d023817fa73e3305e293dc4a2dd830ffcc154a8bcaf8cf518a876136c7bf93a8b64ac247a280d7df750d428b1ff1c86e68f76e109bd352e6707bd44867df56ebbb5743f781781985c8943a7b7b632f728ad1068444ac59ec1f5298f61082fdfb172faeab92bd5624f524939c19b89b89323b3f69c5a62f50d67488a831eb8bfc67784d3adf74ed0"}, 0xf9) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001440)={0x0, @rand_addr, @multicast1}, &(0x7f0000001480)=0xc) r2 = fsopen(&(0x7f00000014c0)='sysfs\x00', 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x10, 0x3f6, 0x20, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000814}, 0x40000) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001680)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000001780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000018c0)={'ip6gre0\x00', &(0x7f0000001840)={'sit0\x00', r1, 0x2f, 0x0, 0x7, 0x85cc, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback, 0x8, 0x429afc15bcb2388c, 0x40, 0x80000000}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000001b40)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0xc0000600}, 0xc, &(0x7f0000001b00)={&(0x7f0000001900)={0x1d0, r4, 0x954f1d000f506ce0, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4080}, 0x44055) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001d40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c00)={0xc4, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xf815f7794f03c461}, 0x4045) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'rose0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001ec0)={'syztnl1\x00', &(0x7f0000001e40)={'ip6gre0\x00', r6, 0x29, 0xb5, 0x80, 0x8, 0x70, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x8001, 0xfffffff8}}) accept4$packet(r3, &(0x7f0000001f00)={0x11, 0x0, 0x0}, &(0x7f0000001f40)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002000)={'syztnl2\x00', &(0x7f0000001f80)={'ip6gre0\x00', r5, 0x2f, 0x0, 0x8, 0x8c41, 0x8, @empty, @mcast1, 0x20, 0x700, 0x6, 0x1}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000002540)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002500)={&(0x7f0000002100)={0x3ec, 0x0, 0x220, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xfc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x4004011}, 0x2de76e0a909673f3) 17:56:19 executing program 2: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@caif, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="920834789802e2629924682474a90c4919d4228c9d1f072a33c908702c0bf43ab0f068f1150ee8acfd2e58830a2b5b097b1a6e663d12a704d42c228dace1ac2a12f4eb3d46a911b714dd7595df06d7501fc6372da33b107eda2b74adb883b62ccc0af3c4e21afe07375ca5c4bf83b54341f4485adca002231c1a4ef407cc331f4075fd4d12755db28d4c1670055f403c", 0x90}], 0x1, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x31698a46}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}], 0xf0}, 0x24000000) bind(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x30b, 0x22, 0x81, 0x5, 0x2, @remote}, 0x80) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000005c0)={0x0, 0x7fffffff}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000600)) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000680)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x6ff4a097cfe29f11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44084) mount$bind(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0xa00491, 0x0) fcntl$getflags(r5, 0xa) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5, {0xffffffff}}, './file0\x00'}) 17:56:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_io_uring_setup(0x44cd, &(0x7f0000000040)={0x0, 0xafa4, 0x0, 0x2, 0x274}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x448d0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/memory_tiering', 0x400000, 0x8) io_uring_enter(r3, 0x7a88, 0x7, 0x2, &(0x7f00000003c0)={[0x9]}, 0x8) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000400)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) kcmp(0x0, 0x0, 0x4, r4, r3) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000002) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000006c0)={r1, 0x8, 0x6, 0x7}) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000700)={'\x00', 0x400, 0x0, 0x1f}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0x1f}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xf0, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1f}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8b7}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1cdd}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 17:56:19 executing program 4: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x3354000000}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x138, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe06}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff0000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "02ca4c4a745245c0ea54d3bf3360be987b3b2ae688e23ce2bc5cba01be04da8a67a47118"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "af8b3c3db28b91af0841a4f8eee977e1023b561bbebf8adb8c3ef7182767b05b57228148"}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc4}, 0x24044880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x24000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24004880}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r0, {0xf2b}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x34, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2bc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}}, 0x40010) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x88, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="30f44814a67d687f38155e5257606ad7988fc6df1cc85e9081c7"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x954}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1eb19225785c"}, @NL80211_ATTR_HIDDEN_SSID={0x21, 0x7e, @random="8e683db76d2583415e88a91823bc4c03c41d2877202e03f6aa5e4be2a8"}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44812) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000024c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002480)={&(0x7f00000020c0)={0x3bc, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x522}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83ce}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffbb43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x147}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x507}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "560044793f814014cd7a0d5e7b2b7d3003e8e3e068"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "84307de1aedf820485bebdcafbbf2e21ac0c737d496afd0c75d92f4aa5c382bce7f67a804894381cce83e146f61b8d24d8d97a8838f96cbeffa280b3280038e17f4601292e50549f2a2914c87532670a401a9fbd00f55b3fcceb1b757037e074168a1e071c5e4f3498eeb25397474d6e82e31944bfdecb3aa1c2fe1da3c3637031c8fd112ec6b9cfa4604f39a27e68232d67c80eba9abe089ca18ec5ef19719b57c703948ba23c0fef25f9395338071701325b8201ced81c66ef7debe8cc1d762536caa364206b9236b7c386a38036f3"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "19c4b3d9958fc2d3a739caa8891fe7d072e71b3627b7583a088d9a11b8282895d57c7467"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "dc49cd524a43f0523d8325c2fed4964df3da0992d0"}}, @TIPC_NLA_NODE_ID={0x24, 0x3, "57cfab1f522905439ca1f8be30de5e5acfb1d8e0cab51a5683c98f1beb74c727"}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff01}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000002500)={0x0, 0x380f, [0x3, 0x8, 0xfffffffffffffff9, 0x8, 0xfff, 0x1]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002540)='/proc/tty/drivers\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000002700)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0x8c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x600}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @device_b, @broadcast, @random="cd684cd701ee", {0x2, 0x1f}}, 0x1e, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x4040000) [ 71.549477] audit: type=1400 audit(1664819779.931:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:56:19 executing program 5: r0 = semget(0x0, 0x3, 0x196) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/237) r1 = semget(0x2, 0x2, 0x1) semtimedop(r1, &(0x7f0000000100), 0x0, &(0x7f0000000140)) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000180)=""/203) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = semget(0x3, 0x4, 0x48) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000280)=[0xd446, 0x2]) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0x7f8}, {0x4, 0x3, 0x1000}, {0x1, 0x401, 0x800}, {0x2, 0x100, 0x800}], 0x4, &(0x7f0000000300)={0x77359400}) r3 = semget$private(0x0, 0x0, 0x2) semop(r0, &(0x7f0000000340)=[{0x3, 0x0, 0x800}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x1, 0x580) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000380)=""/250) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000480)=[0x80, 0x5, 0x400, 0x6, 0x2746]) r5 = semget(0x0, 0x4, 0x202) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000005c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000006c0)={{0x3, r6, r7, 0x0, 0xee00, 0x0, 0x6}, 0x8f00, 0x398b, 0x0, 0x0, 0x0, 0x0, 0x4}) 17:56:19 executing program 6: sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7fffffff, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xafc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc0d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0xfffffffd, 0xfd08, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x9, 0x400, 0x7, 0xffffffff, 0x20, 0x4]}]}, @NL80211_ATTR_CQM={0x7c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x47c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x3, 0x3ff, 0x4, 0x1, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x1, 0x2, 0x9b, 0x5, 0x3, 0x6]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2000080) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000340)=0x5, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x118, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "325aa46337d1de9e8ba9d19a160dd17e0865f465951089d8"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c850873af3c2e9bd368f33a99e42744112eaaf3563b4002d"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x118}}, 0x4040000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f00000005c0)={0xbd4, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0xa}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x15c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x13, 0x3, "5adbb5c0d1d0f6969a64da6cd1915e"}, @NL80211_FTM_RESP_ATTR_LCI={0x9e, 0x2, "f0bb05ef0520c3fecb2f49a5a93f9ce6f599877e6deb490c3470b8150783065f5faa005bdbf8cc5076fea8b37ad4432eb2801d09681051c77b25a137bde2c1be6a62eca6ee885175c340ff26156b1fe1bf8db8d0b369309b9d699a48f5d2a9341ad1f7776d961215910894ba8c8eade7b060271db78d9f44d2b0dca7f261ba3faa8bcbc6b992df1e8943972373a5d39a56bc60549b97c89eef35"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x20, 0x3, "b81296843cee8f1feb4ebacd72a4aa885ab0a4298aa310630408d38d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x79, 0x3, "fb0438fc32c70fbbc6a43ecaaf3a3186870db90b46d9dccf5a6f919bc4699c9271303215f3ebbebb5ee76274ee49e931a5f0faaee3fa6aff8ec61dee95dea4b97732b94ed2bbf418e7e651142b8ab62cf2ad96e6eaeacfa0325212d961f4ed72fb127b7f168b7592ba4e6492add76bdb1fcf43ca88"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x3f, 0x7f, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x5, 0x0, {0x11f9, 0x157c, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0xe, 0xaed, 0x4}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xff, 0xac, 0x3f}}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x28, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x1f, @not_ext={{}, 0xff, 0x9, @device_b, 0x9, "", 0x3, 0x81, @device_a, 0x4}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf0, 0x80, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}}, @cf={0x4, 0x6, {0x7f, 0x2, 0x6, 0xa50}}, @random_vendor={0xdd, 0xd1, "2a480ff1233285e61ef0f871a4425b33dfb33f62a68203555f26f7183a671d3d92ab4dddec8a9cf6a54cb6abf31dc37e187834a1e3e2f54c8942a26e63b766a2e16408c7a41ba0a91d8f26ebff22161dba29a0fb6fc538cf264b4a15c4a143f298c6ab8ca19ad71f8facb08d863b73a11ba69216cfaee5108b5e8df8873c4231fbf53732bc0552e0a3ce955b017287bf117bd7af37a82399f0e336fe2e846a6c217bc859ade437e0e6938c8655551b71fac2c402f3f986285a4de1b839142ba7e905471fcd852ed42ecd8aa8812980f5c5"}]}, @NL80211_ATTR_BEACON_HEAD={0x5f0, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_a, @broadcast, @initial, {0x0, 0x4}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x80000001, @random=0x800, 0x2200, @val={0x0, 0xf, @random="9cea4446c486500a34d72ea1c2167f"}, @val, @val={0x3, 0x1, 0x8c}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x6, 0x7f}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x49}}, @void, [{0xdd, 0xeb, "9f12d2400935336567a24bc6538c98e65911e8c723bf38b94aa28430e6bf04a711cde904d17a0c52d5bd9bf2b820555060bc589f8049f607581ae245f2ea730ee1856e4f27fe32775b71050a358fa661c37e850808650bcca486a78f81f73b2ff10c1df0314f552d4b88616059052c258933cea715fb6f9b9655b7e375de0e13d093401967cdce71da981f40c8781e022d358a63e713826cc0595aad0ce2696f21fdba25dbbdfce32082f0509be59f24ec816133f16fdd2bdbc2bbf03f6826af753eaa560869c0377474573acb43642802542d80e373aa197057a0497166c0649076a2dae836a300e373fe"}, {0xdd, 0xd6, "80316f5c05523019e4e775ce53b9b7ba7e6fc013d665b87884a2c85d7e81d37e2909acf1f2760e9f9135d8ef625c422b3bcf8e7daad9ab59be673db40fa5abae19b28b48adcf985e0161a7f12f95b57d234949e6e5b3ed62022f1b83c2cb4a3a0a41940f5a9c1db2a7b4a0dc67cb65cb4e3a12b901cb4e2bd5601aa85edb58e87cb18d12f63a31d11a05d3834f0c261aec54b27c2927ab93e6110ad104ba863059cf0e18d5d59564e27c381146a95dbe1ef6104a8a10b4291ece72f8a30088d29d4a2c2f76a1405019a7cb5f0b0902167547981ddf8e"}, {0xdd, 0xd2, "289892b0d88d29ac6d74fb8fb48ae09762fa8af3c067a93f14cc464b4791aaf1a8403db144503a06b9c9562a68be92ef09b2a06396e52592659bfd00be8468d7e4254e95883f834cc8cd8dd89db88c35915721c4b91d5765dd8d1045403529edd2b96737282137f579a1421a9667e69bed73c8db94993b839e974fcc1626fa995c14450257fe558f510e2340d03f09ee1d7ca16109c398e2a953664f64d251180f57eba2ba57fdb1a84bfb81248b86e41f039ed8449b5c908d7e7617c7b43e23efc36e76082d7c6a4c110b1ca971a29b3f2c"}, {0xdd, 0xa9, "a5fa3f3a557d68fdd3c7db3eee3d1c7c38031fe17496529275bff5c2551a8724f8c3028e574a20a7f1967d65302cbf650f2e3cff7a67c4f58a604e3e7d4f7526b69b3d7d01b515f682585272fb1acabc3886ac6c4a56a9325a1416b2029beabd27b9aa27b6837c0526ba76108ca2f1ff7b84497ee6fc30f12d6293b2a7e03fd5f06633c20678e3e10779c4a906af5c8ffc817f6831ba9129b4df425e2a59b0a88fe29b86ef431c03cd"}, {0xdd, 0x14, "6071ebc9c4196cf3fa9da1fd2f0be20f2b68ffba"}, {0xdd, 0x75, "4f64e489f849c3acb67afb223488eca18f9b46dc5e036386f0feba48e4e593cd3f25f6d42c7e49ee21d3134483f3b40e1cd62b46af25b5a0cae1f2042b8650c5b433f7be0a0b73d1b6c3eeb96232af3bd349af1a85b07b7c7c1a56098248873d319a7661a0be4a20106bb4f5e00d74748fa14d8452"}, {0xdd, 0xf3, "50e98039e57ffb83ee7ba38e70897071590f820afc560f6b4c95d78aab5b65d58a8442c3277a567cbdb6d4675d5b78e289aaa59b7390c503d6572d25bc564062416f97acf316f1cce29bc68b20a5d58a2b4457b9ccff9cd3a7be962d6ec29fdbbf34fa6fc4393b964cae7c0122d4a687839bdb9e00e3959b64dc1aacda95bc14981fc408d1ef567f08f0fb5b256506ef075dc1f03e3d5e4592dd3d8242857f5503d73fb4408beec92e9fe1871187f1353f5735e26a1cdb0c6e823f8d3c12193761eaafa7debf7753a66ba3416da9bf12b410e349038015a2d3d873c8fd13f9914e5724f87cfa14598f399913ecd6c88ad367bd"}, {0xdd, 0xb4, "fa2f892c1b9aed27a26a23ae43f9913c9d02f306b91439909cfb5ebf5f896661ea4895fa984d001224af9e46277ab0f7964ac0c9fed55e7337a3c4c8a0bffb2a9a37f1530867dd1c513b38a332ca933692545b2177d41652d3a5936e2efdbb2152f0474960bc1581f313087bba7d70683c19d45cd48cafc71411d7d9feb6a74ae6a8e0a257ae5c37eb58891e8699c6b98ebd52e85920d2950bcda03b10c4845639d5660420ed8887f8b996e89c96e0a470204c0b"}, {0xdd, 0x16, "bb4a295bb334ceb1c10b56fbe8300a3bf1ca4f609908"}]}}, @NL80211_ATTR_IE={0x10e, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x6, @void, @val=0x2b, @val="80456406b8626c12c1bfaf0c497a5881"}}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x0, 0x0, {0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x300, 0xd7, 0x3f}}, @tim={0x5, 0xd1, {0x1, 0x38, 0x88, "68ccd267b5a926283c61a6ec9912d708ab21f6a8a5c94d22ee248e14a8147db7a5416cead8d14586f34c238a85b7d480d389aface77fe8159c9f96199c2631fdc7a35fb509b509d51a74032fb9fa298bbd6514800d157612f84d3c38e703db76221c702c8f41925d1224feeea169957d7818dfe2382fe12997095d5522f808ec58570577ea53dfe2784deb3c3808c207e81d3e165e79d8175c92b75ddca769c277345a489f32057868932bfe0c4ddbb9c6d842443ba4f19116c3874bfebae47033ca43d65e287f08859d10be701a"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}], @NL80211_ATTR_SMPS_MODE={0x5}]}, 0xbd4}, 0x1, 0x0, 0x0, 0x2000005c}, 0x40010) pipe2(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x9c, r0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1a44950c, 0x13}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xfffff402, 0x400, 0x7fff, 0x2, 0x6, 0xb1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x401, 0x80000001, 0x10001]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40811}, 0x20000000) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x7c, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}}, 0x20000800) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540), 0x120400, 0x0) r5 = dup3(r2, r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000}, 0x20024000) r7 = memfd_secret(0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000001680)={0x8, 'wlan1\x00', {'ipvlan0\x00'}, 0x6}) r8 = openat$cgroup_ro(r4, &(0x7f00000016c0)='pids.current\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000001b80)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001740)={0x3d4, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1cc, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd4, 0x2, "52f74d317645387b9d78da37dd5d42fbade9399420d6cca2811d654fdd0b66f8b45cf1037dba3de52781c206492e71366140318ca105e3356e4efaf247e43709bcfec97a98405c69b9b27c6c674233500d1cb2bd9b11dd647c209a35208b8be85898c0a75749b136a0bc01bacffbefa7f7102a02a226fa473bfb01f7c8f6c82722f6f865668844acb9f742ebc588136818825d4933ac27e7612d82ea44aa89c9edfb6630ec45162a004da2d5ceccc747f998c7b80d0bec3de2250f90843facfa51a68d9aea9e37e826246ca1cc9fb1cd"}}, {0xf0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xec, 0x2, "a137fefaae4c7d2252e1c5ff27263ad5127bb40c6fc0f58e05220c658082391556c7cc99721bb59ef3c1ba9815709fc5bd8e6f23d6317ca5892e57becaa655aac86baaa5a5177d6b31bb5a2c9e40e74fe001b74b564b09070dcf41a9f546c6edb4d546ab36231aa25e22ff3833fb0783505a9c6113855be654462af59fc5dc74673ee011bb7770c304360dc247eb6a7c03b8fc7d866b364478421ce0063e2bd9c532b8afcc0450beca1a27c62b8305321e852dee1f6af59abfb062ffa3ed54e3cfef3e7eb3167dc00bae9bd359851a55e07a79d10792e2f8f0f769e8c6b27b2e2887cd3cf6419aa9"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1d8, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf9, 0x1, "a46836563c2385a981e70ab9d38080eb3654176c70feedd5849406c2b29ba76a1d78e8d96ce60df52feeb39c2eb5bab4362072ca6152049ce7cc1345c35725a26358ea49ebdeb367e58a84a3aabdca98583c44723547804f24430d9125b914f430ae220717dc78f6066a75b4e71bc57c7cb4fb87a83eea27f8ea14f830b6a0ef37e5354a3fd356bf2746ac17f50f68e3d8533386bc702d1a62544f9e1c3e53b6255afd9957e48ee96d88e1539607e37e1f92357bc0d71eec66ad9bcc7be721026690f057bc2daa60f1542d11cc12252827f4643949a25b0ca606603c5781b203249a73c84aadb0be023aef169b055defeb7bb9984e"}}, {0xd4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xcd, 0x2, "2b9e38abd4f44b1fc0976fb3242b77bdefae179a609bbdc56831637829f57f5b94e804b9b261a01c26d436b117f1075c24715818df19c5b2fd38f67c91896bfb7c02aecfe72bd86c3f427f0cdba3c9030320f30ae6843489159c8e09f7256f496e97865009244065671838c57b0c8cd40591178290e8063e03b2cb19e52ac057dbba0a81d707ec29c0243d4fb1e092a3d2558e2aa7f0e35544f684e5d51b3acc41e48961828b44871783c42abff944c255d122561657c5f62476394d8a999fec53ed862d617625b61e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x3d4}}, 0x40400c0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 17:56:19 executing program 7: tkill(0x0, 0x37) ptrace(0x4208, 0xffffffffffffffff) ptrace$setopts(0x4200, 0x0, 0x3, 0x1) r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, r1, 0xffffffffffffffff, 0x0, 0x12, 0x2}, 0x8, 0x3, 0x1f0000000000, 0xeb, 0xffffffffffffffff, 0xffffffffffffffff, 0xfff9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) rt_tgsigqueueinfo(r2, 0xffffffffffffffff, 0xe, &(0x7f00000001c0)={0x3b, 0x4, 0x293}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0xbd, 0x40) r4 = getpid() capset(&(0x7f00000002c0)={0x20080522, r4}, &(0x7f0000000300)={0x7fff, 0x0, 0xd3f, 0x0, 0x1, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) shmctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)={{0x0, r5, r1, r6, r7, 0x40}, 0x9, 0x200, 0xc08, 0x7f, r3, r4, 0x7}) clone3(&(0x7f0000000800)={0x20000000, &(0x7f0000000640)=0xffffffffffffffff, &(0x7f0000000680)=0x0, &(0x7f00000006c0), {0x2a}, &(0x7f0000000700)=""/125, 0x7d, &(0x7f0000000780)=""/6, &(0x7f00000007c0)=[r2, r4, r3, 0xffffffffffffffff], 0x4}, 0x58) capset(&(0x7f0000000880)={0x3553128e, r9}, &(0x7f00000008c0)={0x8, 0x5, 0xffffffda, 0xac01, 0x9, 0x100}) r10 = fcntl$getown(r8, 0x9) get_robust_list(r10, &(0x7f0000000980)=&(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, &(0x7f00000009c0)=0x18) [ 72.896783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.899971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.903091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.909103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.911794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.913224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.919138] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.952491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.953930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.956536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.958215] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.959670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.960983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.962192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.963857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.965872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.967085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.969143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.972580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.976337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.978016] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.978777] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.980645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.983786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.988202] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.990621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.001605] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.002535] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.015646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.019570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.021274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.022628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.025458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.027511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.028726] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.041064] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.043677] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.045709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.047706] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.049072] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.056634] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.057464] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.089064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.091721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.094232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.111496] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.113812] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.116549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.124744] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.980840] Bluetooth: hci0: command 0x0409 tx timeout [ 75.044413] Bluetooth: hci1: command 0x0409 tx timeout [ 75.044446] Bluetooth: hci3: command 0x0409 tx timeout [ 75.045413] Bluetooth: hci2: command 0x0409 tx timeout [ 75.047132] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 75.108407] Bluetooth: hci6: command 0x0409 tx timeout [ 75.109227] Bluetooth: hci4: command 0x0409 tx timeout [ 75.173444] Bluetooth: hci5: command 0x0409 tx timeout [ 77.029407] Bluetooth: hci0: command 0x041b tx timeout [ 77.092370] Bluetooth: hci3: command 0x041b tx timeout [ 77.092807] Bluetooth: hci1: command 0x041b tx timeout [ 77.093375] Bluetooth: hci2: command 0x041b tx timeout [ 77.157412] Bluetooth: hci4: command 0x041b tx timeout [ 77.157848] Bluetooth: hci6: command 0x041b tx timeout [ 77.221715] Bluetooth: hci5: command 0x041b tx timeout [ 78.395751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.402495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.403342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.448809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.450096] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.462223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.473390] Bluetooth: hci7: HCI_REQ-0x0c1a [ 79.076346] Bluetooth: hci0: command 0x040f tx timeout [ 79.141381] Bluetooth: hci2: command 0x040f tx timeout [ 79.141856] Bluetooth: hci1: command 0x040f tx timeout [ 79.142250] Bluetooth: hci3: command 0x040f tx timeout [ 79.205384] Bluetooth: hci6: command 0x040f tx timeout [ 79.205844] Bluetooth: hci4: command 0x040f tx timeout [ 79.269345] Bluetooth: hci5: command 0x040f tx timeout [ 80.485372] Bluetooth: hci7: command 0x0409 tx timeout [ 81.125351] Bluetooth: hci0: command 0x0419 tx timeout [ 81.188542] Bluetooth: hci3: command 0x0419 tx timeout [ 81.189373] Bluetooth: hci1: command 0x0419 tx timeout [ 81.190098] Bluetooth: hci2: command 0x0419 tx timeout [ 81.252426] Bluetooth: hci4: command 0x0419 tx timeout [ 81.253235] Bluetooth: hci6: command 0x0419 tx timeout [ 81.316392] Bluetooth: hci5: command 0x0419 tx timeout [ 82.532416] Bluetooth: hci7: command 0x041b tx timeout [ 84.580353] Bluetooth: hci7: command 0x040f tx timeout [ 86.629385] Bluetooth: hci7: command 0x0419 tx timeout [ 135.231822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.232867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.234656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.235565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.236716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.237405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.238491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.239096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.239818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.242764] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.243729] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.244399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.245173] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 135.246138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.246732] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 135.247587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.248192] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 135.251136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.252379] Bluetooth: hci4: HCI_REQ-0x0c1a [ 135.261352] Bluetooth: hci6: HCI_REQ-0x0c1a [ 135.264360] Bluetooth: hci5: HCI_REQ-0x0c1a 17:57:23 executing program 2: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf252c0000000c0000000025000000604bc73c6d1de71daef1f2062bdc2f4aab95028aa0f5ff8c82c46c4d49afd075560158121d94acf1d04d8388000000"], 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x40) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x60}, 0x1, 0x0, 0x0, 0x60040010}, 0x891) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) fork() r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x301840, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="ab69164b98d14ddf2d1edb0f5a51a7864557312231cb577ff991b3c6a9e8c4bfd74253d12e154f5754b2793c382f927f45bbd12f8c131f4c9d62000000000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009100010000007f0000000a0007000000000a002921f154daf1479bdfaa5fd5e764592040b82864839fb9e8f500de00"/59], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040085) 17:57:23 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet6(0xa, 0xff80d2e42906f2dd, 0x1f) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff80d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000001140), 0x2, 0x200080) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r4}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x81, 0x1f, 0x3, 0x20, 0x0, 0x10001, 0x8, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xffffffffffff0001, 0x6}, 0x10, 0x5, 0x10001, 0x6, 0x3, 0x6, 0x8, 0x0, 0x2}, r4, 0x6, r3, 0x1) sendto$inet6(r3, &(0x7f0000001180)="b9ea891e6b26a28869c9ca92cd7702bc1b2e76f468ae34605327a1df0e3f530da83ca797aed28a82132e3ab68dd7bc31806b242c79cdc3894b5791646a9fdda0f483ef649339a8a8", 0x48, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000010c0), &(0x7f0000001100)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff9, @mcast2, 0xe2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xb26, @private1, 0x101}, 0x1c) [ 135.490864] audit: type=1400 audit(1664819843.873:7): avc: denied { open } for pid=3804 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.492380] audit: type=1400 audit(1664819843.873:8): avc: denied { kernel } for pid=3804 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.500623] ------------[ cut here ]------------ [ 135.500647] [ 135.500651] ====================================================== [ 135.500655] WARNING: possible circular locking dependency detected [ 135.500659] 6.0.0-rc7-next-20220930 #1 Not tainted [ 135.500666] ------------------------------------------------------ [ 135.500669] syz-executor.2/3805 is trying to acquire lock: [ 135.500675] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 135.500716] [ 135.500716] but task is already holding lock: [ 135.500719] ffff8880093e3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.500746] [ 135.500746] which lock already depends on the new lock. [ 135.500746] [ 135.500749] [ 135.500749] the existing dependency chain (in reverse order) is: [ 135.500753] [ 135.500753] -> #3 (&ctx->lock){....}-{2:2}: [ 135.500767] _raw_spin_lock+0x2a/0x40 [ 135.500778] __perf_event_task_sched_out+0x53b/0x18d0 [ 135.500789] __schedule+0xedd/0x2470 [ 135.500803] preempt_schedule_common+0x45/0xc0 [ 135.500818] __cond_resched+0x17/0x30 [ 135.500832] __mutex_lock+0xa3/0x14d0 [ 135.500847] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.500858] do_syscall_64+0x3b/0x90 [ 135.500875] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.500888] [ 135.500888] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 135.500902] _raw_spin_lock_nested+0x30/0x40 [ 135.500912] raw_spin_rq_lock_nested+0x1e/0x30 [ 135.500926] task_fork_fair+0x63/0x4d0 [ 135.500943] sched_cgroup_fork+0x3d0/0x540 [ 135.500957] copy_process+0x4183/0x6e20 [ 135.500968] kernel_clone+0xe7/0x890 [ 135.500977] user_mode_thread+0xad/0xf0 [ 135.500987] rest_init+0x24/0x250 [ 135.500999] arch_call_rest_init+0xf/0x14 [ 135.501017] start_kernel+0x4c6/0x4eb [ 135.501032] secondary_startup_64_no_verify+0xe0/0xeb [ 135.501046] [ 135.501046] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 135.501060] _raw_spin_lock_irqsave+0x39/0x60 [ 135.501070] try_to_wake_up+0xab/0x1930 [ 135.501083] up+0x75/0xb0 [ 135.501097] __up_console_sem+0x6e/0x80 [ 135.501113] console_unlock+0x46a/0x590 [ 135.501129] vprintk_emit+0x1bd/0x560 [ 135.501145] vprintk+0x84/0xa0 [ 135.501160] _printk+0xba/0xf1 [ 135.501172] kauditd_hold_skb.cold+0x3f/0x4e [ 135.501189] kauditd_send_queue+0x233/0x290 [ 135.501205] kauditd_thread+0x5f9/0x9c0 [ 135.501218] kthread+0x2ed/0x3a0 [ 135.501233] ret_from_fork+0x22/0x30 [ 135.501245] [ 135.501245] -> #0 ((console_sem).lock){....}-{2:2}: [ 135.501258] __lock_acquire+0x2a02/0x5e70 [ 135.501275] lock_acquire+0x1a2/0x530 [ 135.501291] _raw_spin_lock_irqsave+0x39/0x60 [ 135.501301] down_trylock+0xe/0x70 [ 135.501316] __down_trylock_console_sem+0x3b/0xd0 [ 135.501332] vprintk_emit+0x16b/0x560 [ 135.501347] vprintk+0x84/0xa0 [ 135.501363] _printk+0xba/0xf1 [ 135.501373] report_bug.cold+0x72/0xab [ 135.501389] handle_bug+0x3c/0x70 [ 135.501405] exc_invalid_op+0x14/0x50 [ 135.501422] asm_exc_invalid_op+0x16/0x20 [ 135.501434] group_sched_out.part.0+0x2c7/0x460 [ 135.501452] ctx_sched_out+0x8f1/0xc10 [ 135.501468] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.501479] __schedule+0xedd/0x2470 [ 135.501493] preempt_schedule_common+0x45/0xc0 [ 135.501507] __cond_resched+0x17/0x30 [ 135.501521] __mutex_lock+0xa3/0x14d0 [ 135.501535] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.501547] do_syscall_64+0x3b/0x90 [ 135.501563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.501575] [ 135.501575] other info that might help us debug this: [ 135.501575] [ 135.501578] Chain exists of: [ 135.501578] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 135.501578] [ 135.501593] Possible unsafe locking scenario: [ 135.501593] [ 135.501595] CPU0 CPU1 [ 135.501597] ---- ---- [ 135.501600] lock(&ctx->lock); [ 135.501605] lock(&rq->__lock); [ 135.501612] lock(&ctx->lock); [ 135.501618] lock((console_sem).lock); [ 135.501624] [ 135.501624] *** DEADLOCK *** [ 135.501624] [ 135.501626] 2 locks held by syz-executor.2/3805: [ 135.501633] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 135.501661] #1: ffff8880093e3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.501687] [ 135.501687] stack backtrace: [ 135.501690] CPU: 0 PID: 3805 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 135.501703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.501711] Call Trace: [ 135.501714] [ 135.501719] dump_stack_lvl+0x8b/0xb3 [ 135.501737] check_noncircular+0x263/0x2e0 [ 135.501753] ? format_decode+0x26c/0xb50 [ 135.501769] ? print_circular_bug+0x450/0x450 [ 135.501786] ? simple_strtoul+0x30/0x30 [ 135.501800] ? __lockdep_reset_lock+0x180/0x180 [ 135.501817] ? format_decode+0x26c/0xb50 [ 135.501833] ? memcpy+0x39/0x60 [ 135.501851] ? vsnprintf+0x4ba/0x1600 [ 135.501869] __lock_acquire+0x2a02/0x5e70 [ 135.501890] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 135.501912] lock_acquire+0x1a2/0x530 [ 135.501929] ? down_trylock+0xe/0x70 [ 135.501945] ? lock_release+0x750/0x750 [ 135.501964] ? find_held_lock+0x2c/0x110 [ 135.501980] ? vprintk+0x84/0xa0 [ 135.501998] _raw_spin_lock_irqsave+0x39/0x60 [ 135.502009] ? down_trylock+0xe/0x70 [ 135.502025] down_trylock+0xe/0x70 [ 135.502040] ? vprintk+0x84/0xa0 [ 135.502057] __down_trylock_console_sem+0x3b/0xd0 [ 135.502074] vprintk_emit+0x16b/0x560 [ 135.502092] vprintk+0x84/0xa0 [ 135.502109] _printk+0xba/0xf1 [ 135.502121] ? record_print_text.cold+0x16/0x16 [ 135.502134] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 135.502149] ? lock_downgrade+0x6d0/0x6d0 [ 135.502166] ? report_bug.cold+0x66/0xab [ 135.502184] ? group_sched_out.part.0+0x2c7/0x460 [ 135.502202] report_bug.cold+0x72/0xab [ 135.502220] handle_bug+0x3c/0x70 [ 135.502237] exc_invalid_op+0x14/0x50 [ 135.502255] asm_exc_invalid_op+0x16/0x20 [ 135.502268] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.502288] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.502300] RSP: 0018:ffff8880374f7978 EFLAGS: 00010006 [ 135.502308] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.502316] RDX: ffff88802ef51ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 135.502324] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 135.502331] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880093e3c00 [ 135.502338] R13: ffff88806ce3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 135.502349] ? group_sched_out.part.0+0x2c7/0x460 [ 135.502369] ? group_sched_out.part.0+0x2c7/0x460 [ 135.502388] ctx_sched_out+0x8f1/0xc10 [ 135.502408] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.502422] ? lock_is_held_type+0xd7/0x130 [ 135.502436] ? __perf_cgroup_move+0x160/0x160 [ 135.502446] ? set_next_entity+0x304/0x550 [ 135.502464] ? update_curr+0x267/0x740 [ 135.502482] ? lock_is_held_type+0xd7/0x130 [ 135.502496] __schedule+0xedd/0x2470 [ 135.502513] ? io_schedule_timeout+0x150/0x150 [ 135.502528] ? find_held_lock+0x2c/0x110 [ 135.502544] ? lock_is_held_type+0xd7/0x130 [ 135.502557] ? __cond_resched+0x17/0x30 [ 135.502572] preempt_schedule_common+0x45/0xc0 [ 135.502588] __cond_resched+0x17/0x30 [ 135.502603] __mutex_lock+0xa3/0x14d0 [ 135.502619] ? lock_is_held_type+0xd7/0x130 [ 135.502632] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.502645] ? mutex_lock_io_nested+0x1310/0x1310 [ 135.502662] ? lock_release+0x3b2/0x750 [ 135.502679] ? __up_read+0x192/0x730 [ 135.502694] ? up_write+0x520/0x520 [ 135.502711] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.502727] ? perf_compat_ioctl+0x130/0x130 [ 135.502738] ? xfd_validate_state+0x59/0x180 [ 135.502761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.502774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.502790] do_syscall_64+0x3b/0x90 [ 135.502807] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.502821] RIP: 0033:0x7f81fbaafb19 [ 135.502829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.502840] RSP: 002b:00007f81f9025188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 135.502851] RAX: ffffffffffffffda RBX: 00007f81fbbc2f60 RCX: 00007f81fbaafb19 [ 135.502858] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 135.502866] RBP: 00007f81fbb09f6d R08: 0000000000000000 R09: 0000000000000000 [ 135.502873] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 135.502880] R13: 00007ffd906e0baf R14: 00007f81f9025300 R15: 0000000000022000 [ 135.502892] [ 135.565500] WARNING: CPU: 0 PID: 3805 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 135.566204] Modules linked in: [ 135.566449] CPU: 0 PID: 3805 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 135.567052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.567909] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.568320] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.569675] RSP: 0018:ffff8880374f7978 EFLAGS: 00010006 [ 135.570075] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.570617] RDX: ffff88802ef51ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 135.571150] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 135.571694] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880093e3c00 [ 135.572235] R13: ffff88806ce3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 135.572769] FS: 00007f81f9025700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 135.573372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.573814] CR2: 00007f7e11f58100 CR3: 000000001daec000 CR4: 0000000000350ef0 [ 135.574350] Call Trace: [ 135.574550] [ 135.574729] ctx_sched_out+0x8f1/0xc10 [ 135.575036] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.575450] ? lock_is_held_type+0xd7/0x130 [ 135.575786] ? __perf_cgroup_move+0x160/0x160 [ 135.576127] ? set_next_entity+0x304/0x550 [ 135.576460] ? update_curr+0x267/0x740 [ 135.576761] ? lock_is_held_type+0xd7/0x130 [ 135.577088] __schedule+0xedd/0x2470 [ 135.577379] ? io_schedule_timeout+0x150/0x150 [ 135.577731] ? find_held_lock+0x2c/0x110 [ 135.578041] ? lock_is_held_type+0xd7/0x130 [ 135.578374] ? __cond_resched+0x17/0x30 [ 135.578685] preempt_schedule_common+0x45/0xc0 [ 135.579032] __cond_resched+0x17/0x30 [ 135.579339] __mutex_lock+0xa3/0x14d0 [ 135.579635] ? lock_is_held_type+0xd7/0x130 [ 135.579961] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.580356] ? mutex_lock_io_nested+0x1310/0x1310 [ 135.580726] ? lock_release+0x3b2/0x750 [ 135.581034] ? __up_read+0x192/0x730 [ 135.581326] ? up_write+0x520/0x520 [ 135.581618] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.582009] ? perf_compat_ioctl+0x130/0x130 [ 135.582354] ? xfd_validate_state+0x59/0x180 [ 135.582702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.583088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.583498] do_syscall_64+0x3b/0x90 [ 135.583794] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.584197] RIP: 0033:0x7f81fbaafb19 [ 135.584482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.585842] RSP: 002b:00007f81f9025188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 135.586417] RAX: ffffffffffffffda RBX: 00007f81fbbc2f60 RCX: 00007f81fbaafb19 [ 135.586957] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 135.587495] RBP: 00007f81fbb09f6d R08: 0000000000000000 R09: 0000000000000000 [ 135.588025] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 135.588556] R13: 00007ffd906e0baf R14: 00007f81f9025300 R15: 0000000000022000 [ 135.589102] [ 135.589283] irq event stamp: 494 [ 135.589535] hardirqs last enabled at (493): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.590256] hardirqs last disabled at (494): [] __schedule+0x1225/0x2470 [ 135.590881] softirqs last enabled at (362): [] __irq_exit_rcu+0x11b/0x180 [ 135.591527] softirqs last disabled at (353): [] __irq_exit_rcu+0x11b/0x180 [ 135.592185] ---[ end trace 0000000000000000 ]--- [ 135.779300] hrtimer: interrupt took 12564 ns [ 135.807173] blktrace: Concurrent blktraces are not allowed on sg0 17:57:24 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet6(0xa, 0xff80d2e42906f2dd, 0x1f) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff80d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000001140), 0x2, 0x200080) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r4}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x81, 0x1f, 0x3, 0x20, 0x0, 0x10001, 0x8, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xffffffffffff0001, 0x6}, 0x10, 0x5, 0x10001, 0x6, 0x3, 0x6, 0x8, 0x0, 0x2}, r4, 0x6, r3, 0x1) sendto$inet6(r3, &(0x7f0000001180)="b9ea891e6b26a28869c9ca92cd7702bc1b2e76f468ae34605327a1df0e3f530da83ca797aed28a82132e3ab68dd7bc31806b242c79cdc3894b5791646a9fdda0f483ef649339a8a8", 0x48, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000010c0), &(0x7f0000001100)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff9, @mcast2, 0xe2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xb26, @private1, 0x101}, 0x1c) [ 135.857063] blktrace: Concurrent blktraces are not allowed on sg0 17:57:24 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet6(0xa, 0xff80d2e42906f2dd, 0x1f) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff80d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000001140), 0x2, 0x200080) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r4}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x81, 0x1f, 0x3, 0x20, 0x0, 0x10001, 0x8, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xffffffffffff0001, 0x6}, 0x10, 0x5, 0x10001, 0x6, 0x3, 0x6, 0x8, 0x0, 0x2}, r4, 0x6, r3, 0x1) sendto$inet6(r3, &(0x7f0000001180)="b9ea891e6b26a28869c9ca92cd7702bc1b2e76f468ae34605327a1df0e3f530da83ca797aed28a82132e3ab68dd7bc31806b242c79cdc3894b5791646a9fdda0f483ef649339a8a8", 0x48, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000010c0), &(0x7f0000001100)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff9, @mcast2, 0xe2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xb26, @private1, 0x101}, 0x1c) [ 135.947030] blktrace: Concurrent blktraces are not allowed on sg0 17:57:24 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet6(0xa, 0xff80d2e42906f2dd, 0x1f) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff80d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000001140), 0x2, 0x200080) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r4}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x81, 0x1f, 0x3, 0x20, 0x0, 0x10001, 0x8, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xffffffffffff0001, 0x6}, 0x10, 0x5, 0x10001, 0x6, 0x3, 0x6, 0x8, 0x0, 0x2}, r4, 0x6, r3, 0x1) sendto$inet6(r3, &(0x7f0000001180)="b9ea891e6b26a28869c9ca92cd7702bc1b2e76f468ae34605327a1df0e3f530da83ca797aed28a82132e3ab68dd7bc31806b242c79cdc3894b5791646a9fdda0f483ef649339a8a8", 0x48, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000010c0), &(0x7f0000001100)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff9, @mcast2, 0xe2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xb26, @private1, 0x101}, 0x1c) [ 136.024112] blktrace: Concurrent blktraces are not allowed on sg0 17:57:24 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet6(0xa, 0xff80d2e42906f2dd, 0x1f) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff80d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000001140), 0x2, 0x200080) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r4}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x81, 0x1f, 0x3, 0x20, 0x0, 0x10001, 0x8, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xffffffffffff0001, 0x6}, 0x10, 0x5, 0x10001, 0x6, 0x3, 0x6, 0x8, 0x0, 0x2}, r4, 0x6, r3, 0x1) sendto$inet6(r3, &(0x7f0000001180)="b9ea891e6b26a28869c9ca92cd7702bc1b2e76f468ae34605327a1df0e3f530da83ca797aed28a82132e3ab68dd7bc31806b242c79cdc3894b5791646a9fdda0f483ef649339a8a8", 0x48, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000010c0), &(0x7f0000001100)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff9, @mcast2, 0xe2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xb26, @private1, 0x101}, 0x1c) [ 136.093273] blktrace: Concurrent blktraces are not allowed on sg0 17:57:24 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1}) r0 = socket$inet6(0xa, 0xff80d2e42906f2dd, 0x1f) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff80d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000001140), 0x2, 0x200080) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r4}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x81, 0x1f, 0x3, 0x20, 0x0, 0x10001, 0x8, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xffffffffffff0001, 0x6}, 0x10, 0x5, 0x10001, 0x6, 0x3, 0x6, 0x8, 0x0, 0x2}, r4, 0x6, r3, 0x1) sendto$inet6(r3, &(0x7f0000001180)="b9ea891e6b26a28869c9ca92cd7702bc1b2e76f468ae34605327a1df0e3f530da83ca797aed28a82132e3ab68dd7bc31806b242c79cdc3894b5791646a9fdda0f483ef649339a8a8", 0x48, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f00000010c0), &(0x7f0000001100)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff9, @mcast2, 0xe2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xb26, @private1, 0x101}, 0x1c) [ 136.181754] blktrace: Concurrent blktraces are not allowed on sg0 17:57:24 executing program 2: r0 = semget(0x0, 0x4, 0x23c) semget(0x3, 0x2, 0x3) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/200) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r1, 0xffffffffffffffff, 0x0, 0xee00, 0x6}, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x891c}) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000100)=""/52) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x1000, 0x6]) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0xffe1, 0x1ff, 0x6, 0xde5]) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8, @none, 0x101}, 0xe) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000140)=0x2, 0x4) [ 136.933351] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 137.188315] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 137.188332] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 137.189433] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 137.316383] Bluetooth: hci6: command 0x0409 tx timeout [ 137.316835] Bluetooth: hci5: command 0x0409 tx timeout [ 137.317235] Bluetooth: hci4: command 0x0409 tx timeout [ 139.364341] Bluetooth: hci4: command 0x041b tx timeout [ 139.364359] Bluetooth: hci5: command 0x041b tx timeout [ 139.364766] Bluetooth: hci6: command 0x041b tx timeout [ 141.220317] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 141.412324] Bluetooth: hci6: command 0x040f tx timeout [ 141.413436] Bluetooth: hci5: command 0x040f tx timeout [ 141.413832] Bluetooth: hci4: command 0x040f tx timeout [ 141.540310] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 141.668352] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 141.668352] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 143.460342] Bluetooth: hci4: command 0x0419 tx timeout [ 143.460766] Bluetooth: hci5: command 0x0419 tx timeout [ 143.461153] Bluetooth: hci6: command 0x0419 tx timeout [ 143.463932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.464636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.465255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.466797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.468176] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.468942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.470829] Bluetooth: hci0: HCI_REQ-0x0c1a VM DIAGNOSIS: 17:57:24 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880374f73c0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f81f9025700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7e11f58100 CR3=000000001daec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff815b2945 RDX=ffff888037453580 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffea000011a500 RSP=ffff88803040fba0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f1f12921000 R14=0000000000000006 R15=dffffc0000000000 RIP=ffffffff814607cc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f12922368 CR3=000000003e918000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000