Warning: Permanently added '[localhost]:3557' (ECDSA) to the list of known hosts. 2022/10/03 19:26:06 fuzzer started 2022/10/03 19:26:07 dialing manager at localhost:35095 syzkaller login: [ 44.156549] cgroup: Unknown subsys name 'net' [ 44.252299] cgroup: Unknown subsys name 'rlimit' 2022/10/03 19:26:20 syscalls: 2215 2022/10/03 19:26:20 code coverage: enabled 2022/10/03 19:26:20 comparison tracing: enabled 2022/10/03 19:26:20 extra coverage: enabled 2022/10/03 19:26:20 setuid sandbox: enabled 2022/10/03 19:26:20 namespace sandbox: enabled 2022/10/03 19:26:20 Android sandbox: enabled 2022/10/03 19:26:20 fault injection: enabled 2022/10/03 19:26:20 leak checking: enabled 2022/10/03 19:26:20 net packet injection: enabled 2022/10/03 19:26:20 net device setup: enabled 2022/10/03 19:26:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 19:26:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 19:26:20 USB emulation: enabled 2022/10/03 19:26:20 hci packet injection: enabled 2022/10/03 19:26:20 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 19:26:20 802.15.4 emulation: enabled 2022/10/03 19:26:20 fetching corpus: 50, signal 26950/28762 (executing program) 2022/10/03 19:26:20 fetching corpus: 100, signal 39088/42564 (executing program) 2022/10/03 19:26:20 fetching corpus: 150, signal 47006/52064 (executing program) 2022/10/03 19:26:20 fetching corpus: 200, signal 52128/58765 (executing program) 2022/10/03 19:26:21 fetching corpus: 250, signal 59135/67203 (executing program) 2022/10/03 19:26:21 fetching corpus: 300, signal 66482/75866 (executing program) 2022/10/03 19:26:21 fetching corpus: 350, signal 69343/80191 (executing program) 2022/10/03 19:26:21 fetching corpus: 400, signal 74766/86929 (executing program) 2022/10/03 19:26:21 fetching corpus: 450, signal 79147/92571 (executing program) 2022/10/03 19:26:21 fetching corpus: 500, signal 81698/96440 (executing program) 2022/10/03 19:26:21 fetching corpus: 550, signal 85909/101849 (executing program) 2022/10/03 19:26:21 fetching corpus: 600, signal 89740/106752 (executing program) 2022/10/03 19:26:21 fetching corpus: 650, signal 91909/110157 (executing program) 2022/10/03 19:26:22 fetching corpus: 700, signal 94981/114335 (executing program) 2022/10/03 19:26:22 fetching corpus: 750, signal 96115/116693 (executing program) 2022/10/03 19:26:22 fetching corpus: 800, signal 98237/119950 (executing program) 2022/10/03 19:26:22 fetching corpus: 850, signal 100780/123556 (executing program) 2022/10/03 19:26:22 fetching corpus: 900, signal 102223/126159 (executing program) 2022/10/03 19:26:22 fetching corpus: 950, signal 105423/130339 (executing program) 2022/10/03 19:26:22 fetching corpus: 1000, signal 107476/133465 (executing program) 2022/10/03 19:26:22 fetching corpus: 1050, signal 112226/138929 (executing program) 2022/10/03 19:26:22 fetching corpus: 1100, signal 114070/141784 (executing program) 2022/10/03 19:26:23 fetching corpus: 1150, signal 117460/145917 (executing program) 2022/10/03 19:26:23 fetching corpus: 1200, signal 119630/149031 (executing program) 2022/10/03 19:26:23 fetching corpus: 1250, signal 121210/151587 (executing program) 2022/10/03 19:26:23 fetching corpus: 1300, signal 122843/154142 (executing program) 2022/10/03 19:26:23 fetching corpus: 1350, signal 123904/156212 (executing program) 2022/10/03 19:26:23 fetching corpus: 1400, signal 125286/158513 (executing program) 2022/10/03 19:26:23 fetching corpus: 1450, signal 127395/161439 (executing program) 2022/10/03 19:26:23 fetching corpus: 1500, signal 128743/163711 (executing program) 2022/10/03 19:26:23 fetching corpus: 1550, signal 130909/166598 (executing program) 2022/10/03 19:26:23 fetching corpus: 1600, signal 131574/168274 (executing program) 2022/10/03 19:26:24 fetching corpus: 1650, signal 132778/170385 (executing program) 2022/10/03 19:26:24 fetching corpus: 1700, signal 134016/172510 (executing program) 2022/10/03 19:26:24 fetching corpus: 1750, signal 135931/175196 (executing program) 2022/10/03 19:26:24 fetching corpus: 1800, signal 137373/177436 (executing program) 2022/10/03 19:26:24 fetching corpus: 1850, signal 138485/179397 (executing program) 2022/10/03 19:26:24 fetching corpus: 1900, signal 139499/181261 (executing program) 2022/10/03 19:26:24 fetching corpus: 1950, signal 141343/183768 (executing program) 2022/10/03 19:26:24 fetching corpus: 2000, signal 142341/185598 (executing program) 2022/10/03 19:26:25 fetching corpus: 2050, signal 143526/187592 (executing program) 2022/10/03 19:26:25 fetching corpus: 2100, signal 144050/189061 (executing program) 2022/10/03 19:26:25 fetching corpus: 2150, signal 145341/191047 (executing program) 2022/10/03 19:26:25 fetching corpus: 2200, signal 146557/193042 (executing program) 2022/10/03 19:26:25 fetching corpus: 2250, signal 147198/194563 (executing program) 2022/10/03 19:26:25 fetching corpus: 2300, signal 147819/196039 (executing program) 2022/10/03 19:26:25 fetching corpus: 2350, signal 149293/198039 (executing program) 2022/10/03 19:26:25 fetching corpus: 2400, signal 150116/199630 (executing program) 2022/10/03 19:26:25 fetching corpus: 2450, signal 150925/201229 (executing program) 2022/10/03 19:26:25 fetching corpus: 2500, signal 152172/203106 (executing program) 2022/10/03 19:26:26 fetching corpus: 2550, signal 154250/205556 (executing program) 2022/10/03 19:26:26 fetching corpus: 2600, signal 155473/207304 (executing program) 2022/10/03 19:26:26 fetching corpus: 2650, signal 157728/209817 (executing program) 2022/10/03 19:26:26 fetching corpus: 2700, signal 158907/211553 (executing program) 2022/10/03 19:26:26 fetching corpus: 2750, signal 159457/212861 (executing program) 2022/10/03 19:26:26 fetching corpus: 2800, signal 160049/214204 (executing program) 2022/10/03 19:26:26 fetching corpus: 2850, signal 160652/215568 (executing program) 2022/10/03 19:26:26 fetching corpus: 2900, signal 161916/217338 (executing program) 2022/10/03 19:26:27 fetching corpus: 2950, signal 162821/218851 (executing program) 2022/10/03 19:26:27 fetching corpus: 3000, signal 163186/219993 (executing program) 2022/10/03 19:26:27 fetching corpus: 3050, signal 163909/221435 (executing program) 2022/10/03 19:26:27 fetching corpus: 3100, signal 165169/223156 (executing program) 2022/10/03 19:26:27 fetching corpus: 3150, signal 165805/224436 (executing program) 2022/10/03 19:26:27 fetching corpus: 3200, signal 166359/225644 (executing program) 2022/10/03 19:26:27 fetching corpus: 3250, signal 167051/226960 (executing program) 2022/10/03 19:26:27 fetching corpus: 3300, signal 168524/228711 (executing program) 2022/10/03 19:26:28 fetching corpus: 3350, signal 169524/230153 (executing program) 2022/10/03 19:26:28 fetching corpus: 3400, signal 170360/231512 (executing program) 2022/10/03 19:26:28 fetching corpus: 3450, signal 171645/233124 (executing program) 2022/10/03 19:26:28 fetching corpus: 3500, signal 172135/234290 (executing program) 2022/10/03 19:26:28 fetching corpus: 3550, signal 172871/235604 (executing program) 2022/10/03 19:26:28 fetching corpus: 3600, signal 173485/236796 (executing program) 2022/10/03 19:26:28 fetching corpus: 3650, signal 173981/237968 (executing program) 2022/10/03 19:26:28 fetching corpus: 3700, signal 174747/239241 (executing program) 2022/10/03 19:26:28 fetching corpus: 3750, signal 175810/240624 (executing program) 2022/10/03 19:26:29 fetching corpus: 3800, signal 177511/242335 (executing program) 2022/10/03 19:26:29 fetching corpus: 3850, signal 178647/243722 (executing program) 2022/10/03 19:26:29 fetching corpus: 3900, signal 179586/245042 (executing program) 2022/10/03 19:26:29 fetching corpus: 3950, signal 180187/246137 (executing program) 2022/10/03 19:26:29 fetching corpus: 4000, signal 181450/247591 (executing program) 2022/10/03 19:26:29 fetching corpus: 4050, signal 181726/248552 (executing program) 2022/10/03 19:26:29 fetching corpus: 4100, signal 182482/249742 (executing program) 2022/10/03 19:26:29 fetching corpus: 4150, signal 182844/250741 (executing program) 2022/10/03 19:26:30 fetching corpus: 4200, signal 183389/251827 (executing program) 2022/10/03 19:26:30 fetching corpus: 4250, signal 183996/252973 (executing program) 2022/10/03 19:26:30 fetching corpus: 4300, signal 184724/254147 (executing program) 2022/10/03 19:26:30 fetching corpus: 4350, signal 185154/255123 (executing program) 2022/10/03 19:26:30 fetching corpus: 4400, signal 185737/256206 (executing program) 2022/10/03 19:26:30 fetching corpus: 4450, signal 186560/257337 (executing program) 2022/10/03 19:26:30 fetching corpus: 4500, signal 187305/258447 (executing program) 2022/10/03 19:26:30 fetching corpus: 4550, signal 187963/259515 (executing program) 2022/10/03 19:26:31 fetching corpus: 4600, signal 188971/260721 (executing program) 2022/10/03 19:26:31 fetching corpus: 4650, signal 189671/261752 (executing program) 2022/10/03 19:26:31 fetching corpus: 4700, signal 190464/262822 (executing program) 2022/10/03 19:26:31 fetching corpus: 4750, signal 191382/263958 (executing program) 2022/10/03 19:26:31 fetching corpus: 4800, signal 191875/264918 (executing program) 2022/10/03 19:26:31 fetching corpus: 4850, signal 192854/265995 (executing program) 2022/10/03 19:26:31 fetching corpus: 4900, signal 193509/266966 (executing program) 2022/10/03 19:26:31 fetching corpus: 4950, signal 193851/267861 (executing program) 2022/10/03 19:26:31 fetching corpus: 5000, signal 194785/268932 (executing program) 2022/10/03 19:26:31 fetching corpus: 5000, signal 194785/269652 (executing program) 2022/10/03 19:26:31 fetching corpus: 5000, signal 194785/270375 (executing program) 2022/10/03 19:26:31 fetching corpus: 5000, signal 194785/271083 (executing program) 2022/10/03 19:26:31 fetching corpus: 5000, signal 194785/271806 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/272535 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/273284 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/274016 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/274775 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/275533 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/276248 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/277001 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/277759 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/278505 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/279266 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/280043 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/280791 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/281532 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/282261 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/283004 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/283780 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/284471 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/285207 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/285953 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/286672 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/287394 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/288152 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/288900 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/289626 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/290346 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/291086 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/291809 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/292557 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/293269 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/294021 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/294716 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/295409 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/296162 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/296906 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/297694 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/298441 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/299146 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/299892 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/300644 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/301371 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/302115 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/302863 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/303635 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/304356 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/305137 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/305862 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/306613 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/307361 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/307579 (executing program) 2022/10/03 19:26:32 fetching corpus: 5000, signal 194785/307579 (executing program) 2022/10/03 19:26:35 starting 8 fuzzer processes 19:26:35 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = dup(r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x4e, 0x0, 0x3f, "58036bcf5b677d33e8e697272f85cce0", "aac03a2953b97e39e41e0e61ce851939167a1fb16cf6cf9f3bdf24dfe35af65ac63c12fa311a955cd71d612a75b0a6e87c7f4b3483e04a08fb"}, 0x4e, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x9f72}}, './file0\x00'}) r4 = fsmount(r2, 0x1, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000280), 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x10000}}, './file0\x00'}) ioctl$FIONCLEX(r6, 0x5450) r7 = open_tree(r2, &(0x7f0000000340)='./file0\x00', 0x89000) getsockopt$packet_int(r7, 0x107, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r8 = syz_open_dev$hiddev(&(0x7f0000000400), 0x3ff, 0x40400) write(r8, &(0x7f0000000440), 0x0) r9 = openat$cgroup_freezer_state(r5, &(0x7f0000000480), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r9, {0x4}}, './file0\x00'}) ioctl$CDROM_SELECT_DISK(r10, 0x5322, 0x7fff) 19:26:35 executing program 1: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7f}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) r0 = memfd_secret(0x80000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x5]}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048860}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x44000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x20800, 0x0) close_range(r4, r0, 0x2) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_DISALLOCATE(r5, 0x5608) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x101100, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1c4, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff9e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa86}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4faac9c0}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffe1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xec9d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_REG_RULES={0x74, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcc6b}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x976d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x30}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x44000}, 0x84) ioctl$int_in(r0, 0x5421, &(0x7f0000000a00)=0x7f) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700), 0x4000, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000007b80)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007b40)={&(0x7f0000007780)={0x384, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "a9faace1911ef15938ef68b0eb83d0776db76bbcf10bb8fc4008a79f478a0515938c3d45a80ad880030e1d5ca969cd9fe370ed6687090a96f125b239663c30055e1afd959ba963202c71d2fc168571696524cc9ec721523f1c03791152a3ec5c42c9c584f177e90f393a5c57130dade27d513b35c8f81c96a13946e5e65798a480f064de3e20163248d5e691addcd900e0a0889e2eaf315d53190aa906fdf553450967703651f976dc140b94c9cc61469be46167d68ed65298ff2108079a30407d396e59f975248acca578c86d0a8da5cd1f018d27e874e7184b8935275781904e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x83+}D\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%#[]+@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6c}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "e7b8db5f24c6576dd0d252b616d52cb0527fbd43fa8f6717a1ced7d672af31d85373e90a558af60200a74cdf3cad15"}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x40048000}, 0x4010) fcntl$getflags(r6, 0x3) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000007bc0)) 19:26:35 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x32b, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000100)="a1a98d8d937a0f0f38bd64507fd26a056b6a6fe3edc1f8bb4c3946dd0e9f27bbd96cba18b95a143c619dbb991e3b8fd3c6e5ac24fc7d521242c21b1e61edafa1dcc79e625c7bd14f84f4f53a2213e6e2dec54ba2d9d41b1c6708f4c3275c1169dbb538142cbf1fa6454e4808f438013018086b4756fee3e783c13e0a10799cbf420b144d97ac6ca160681b6d6880c8f88fc46fbba948b3b83f9cb5d72893c50cb39d3cc1ecbea6e692a90c0d97f20fe090d24206283f2dae1e3808dc0629cfe9545fb8a7805fa8e7028612cfece981d0d6f0a81f40b3f167", 0xd8}, {&(0x7f0000000200)="626dabcd3ebb393e35ef7aca19f813826822f1d171e36981a5ca3437cfb047e5847cdc25db295303b48348504332c2972f569949d94ee5824fc74e6c9dead111a0a660d1f2787a2074203596ae4d8086626f4f2360f752cca1304397a6e3358e50e8249b5e19cfacc0cd7570b8bbb7e344b6d661e64a48cecd67d16dbe7c2b355bac31b1dcf5affe05ee8b3b8906868df455d67de5b1df212b1b45c3c548978e98b8a68f1f36473434e93f8e59cd223261b36fa6b35564fa619035f23ff539440798541b02f88cf9ce07721138c7e537bfa031263a862fc086eee372e841a4a113ffaf6932d897aec37ff8c3214fa143a9", 0xf1}, {&(0x7f0000000300)="ce2326bce8e418782e3b434a3c519458f35ccd2c90f9cc732244a9c484066f4bb412eb57a3ba40b9278a3dc28bce9dbebb21c05792592e8217c45e97ebcd6014d25dbb1980b2e841ad0a131ab5a792a749abc65bd0d89e9354e42f47d364025ad751dbbb5b207bc87395641c79e04695c55c0221cfb7f49e2ba28ef2d155ce639f0dd97d5f3ae0246b033dd0028958ae028fd8d6614776e0a67be07bb52e17371c466493ebc7e64787c24d649c93", 0xae}, {&(0x7f00000003c0)="516cf8db86308225630431acd448795605e26c30b23c52d01ce840944e6311827bf3c756dd61847734ea74661a7e37f9c8432fd2a2238e7940bba85e1bb19a01f0be44ec450e8ab73789ac954b00e0823b43de05c163", 0x56}, {&(0x7f0000000440)="8dac53231820f0da3774539450b9d99756b0b3bd198ce7b8cc89d6d9ac84b3bef980ec17cc7bff524eac436161264cd0964b597ede7d4e8d63c680d287dca04fcc3b9d149c496931166399e05bd043331ce3069e28627d3a54e59b84c906a0b2d691b47f324015108f11aad5ea94c08618cd3f6ab2b7792fdea7eb04eec44e7387126fae7aa98df3118e00a88a23572e9a6c269bd331fde812279db0b314cb778c812116ff0aaf9767d9b4205e95940749afd4ebb7dd89a91e0d291e1dd6655af15419d070a69326b2a33aa623f50d88ff2cf66ab0495bcb49c02e274b2000a2694621", 0xe3}, {&(0x7f0000000540)="2da9c6481d5eddac95ffceaffe3498974be112ea603209d3d34ec522653cdb2016ca6f78c7454fbdad6915ef5fc3c9cb7555d49904888790af13db5d4908d81c8474b29a9148ebe44b98f5b9201e3d06012f12d49b26d34968f1", 0x5a}, {&(0x7f00000005c0)="09e71055e63c27467896a92c429375b7ffc36b6d90edfe47b259890b867e58349bf61cbf4b67e5de68f7eb4a4a765a9823cae653016732ccea8f121efe48a49bdd286ed8398771011986", 0x4a}], 0x7, 0x5, 0x1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000006c0)={0xd3b, 0x401, 0x8000, 0x7fff, 0x200}) r3 = fspick(r0, &(0x7f0000000700)='./file0\x00', 0x1) r4 = open(&(0x7f0000000740)='./file0\x00', 0x8000, 0x220) tee(r3, r4, 0x7, 0x1) getpeername$netlink(r4, &(0x7f0000000780), &(0x7f00000007c0)=0xc) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000800)={0x6, {0x20, 0xffffffffffffffe0, 0x7, 0x1, 0x80}}) r5 = openat$cgroup(r0, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000880)=0x7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000008c0)={0x1, 0x8, 0x0, 0x6}, 0x10) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000e40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000940)={0x4bc, 0x0, 0x5, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x7}, 0xe4, 0x9, 0xacb, 0x1f, 0x18, 'syz1\x00', "a6729bb92d6b4a4e4fee3d1bc15731a8df67c941e5bbcf8c73df176486e7eb9c", "c3aa5743c6642d42d1faac1933b5f2b4e20bbd0005bc722391c103c5faa5ba67", [{0x40, 0x5, {0x3, 0x1ff}}, {0x5, 0x800, {0x1, 0x8}}, {0x6, 0x3, {0x1, 0x9}}, {0x7, 0x8, {0x0, 0x2}}, {0x3, 0x8, {0x2, 0xffffff00}}, {0x6, 0x1ff, {0x1, 0x6}}, {0x7, 0x5, {0x1, 0x8}}, {0x3, 0x6, {0x2, 0x9}}, {0x3, 0xfc00, {0x2, 0xff}}, {0x1000, 0x8000, {0x3, 0x2}}, {0x1, 0x5, {0x2, 0x80000000}}, {0x6, 0x2, {0x3, 0x4}}, {0x100, 0x8, {0x2}}, {0x68, 0x8000, {0x0, 0x7}}, {0x100, 0xff01, {0x0, 0x8}}, {0x0, 0x4, {0x2}}, {0x5, 0xc5c, {0x0, 0xf0}}, {0x800, 0x26c2, {0x3, 0x9}}, {0x1f, 0x8, {0x0, 0x1}}, {0x400, 0x3, {0x2, 0x5}}, {0x4, 0x520, {0x1, 0x6}}, {0x100, 0x1, {0x1, 0xff}}, {0xaa, 0x8000, {0x2, 0x200}}, {0x80, 0x8001, {0x0, 0x6dc}}, {0x1, 0x5, {0x1, 0x6}}, {0x2, 0x101, {0x1, 0x8000}}, {0x0, 0x200, {0x1, 0x3f}}, {0x80, 0x5, {0x0, 0xfff}}, {0x8, 0xd1, {0x2, 0x9}}, {0x0, 0x1, {0x3, 0x6}}, {0xffff, 0xe4d4, {0x0, 0x3ff}}, {0xc3c, 0xd64, {0x3, 0x1}}, {0x75, 0x400, {0x1, 0xfee}}, {0x6, 0x5, {0x2, 0x6}}, {0x1e8, 0x1, {0x3, 0xfff}}, {0x1, 0x7fff, {0x3, 0xfffffff7}}, {0x0, 0x0, {0x3}}, {0x3, 0x18}, {0x3f, 0x3, {0x2, 0x2e78}}, {0xdbe, 0x1eb, {0x2, 0x80}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x4, 0x40, 0x67, 0x8001, 0x24, 'syz1\x00', "b78d42c60f39f05c39fe15ce03573842e760f96f8f5e54f91f9367ab438b26ed", "3ac29f6773b75babce1f1ba01b7438b35dfd45d19b652917c7357e9ad0c9edd0", [{0x3, 0x3, {0x0, 0x7586}}, {0x9, 0x7, {0x3, 0xffff}}, {0x7fff, 0x401, {0x1, 0x3f}}, {0x4, 0xe400, {0x3, 0x5}}, {0x3, 0x101, {0x0, 0x7}}, {0x6, 0x6, {0x2, 0x5}}, {0x6, 0x4, {0x3, 0x1}}, {0x80, 0x1, {0x1, 0x3d}}, {0x1, 0x6, {0x2, 0x200}}, {0x4, 0x3, {0x1, 0x3}}, {0x9, 0x2, {0x0, 0x10001}}, {0x7, 0x0, {0x2, 0x6}}, {0x9, 0x8088, {0x0, 0xec23}}, {0x1ff, 0x1, {0x2, 0x9}}, {0x100, 0x8000, {0x2, 0x8}}, {0x6f, 0x3, {0x2, 0xffff0047}}, {0x59c, 0x6, {0x2, 0x4}}, {0x9, 0x91, {0x1, 0x70}}, {0x9, 0x3, {0x2, 0x2f}}, {0x8, 0x4, {0x1}}, {0x0, 0x1, {0x2, 0x3f}}, {0x1000, 0x6, {0x2, 0x6}}, {0x1, 0xfff, {0x0, 0x9}}, {0x20, 0x83, {0x2, 0x7fff}}, {0xff80, 0x40, {0x3, 0x9}}, {0x401, 0x5, {0x2, 0xf1}}, {0x9, 0x2, {0x1, 0x8}}, {0x7, 0x1, {0x1}}, {0x7, 0x9, {0x2, 0x98b}}, {0x0, 0x5, {0x2, 0xad}}, {0x7ff, 0x913, {0x1, 0x2}}, {0x4ef9, 0x3ff, {0x2, 0xffffffff}}, {0xf001, 0x3f, {0x0, 0x5}}, {0x1, 0x4, {0x2, 0x1f}}, {0x0, 0x8000, {0x0, 0x3}}, {0x5, 0x8, {0x2, 0x8}}, {0x6, 0x4, {0x0, 0x3}}, {0x81, 0xfff, {0x0, 0xdb}}, {0x7, 0x8, {0x3, 0x4}}, {0x8, 0x6e8, {0x2, 0x1f}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4014}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000e80)={r0, 0x4, 0x5, 0x401}) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000ec0)={0x8}, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xa0, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8d}, {0x6, 0x11, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x8010) 19:26:35 executing program 3: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) socketpair(0x28, 0x6, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) r4 = openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x102000, 0x0, 0x3}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x800}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6erspan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r7 = signalfd4(r2, &(0x7f0000000280)={[0x4]}, 0x8, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000300)={r8, 0x1, 0x6, @broadcast}, 0x10) fcntl$setstatus(r4, 0x4, 0x6000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000340)={0x2}) accept4$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14, 0x80000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r9, 0x1, 0x6, @local}, 0x10) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) r11 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) 19:26:35 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/190, 0xbe}], 0x6, &(0x7f0000000400)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x2000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x800, 0x5, 0x2}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000540)) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000005c0)={'\x00', 0x6, 0x44c6, 0x8, 0x682, 0x3ff, r7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000640)) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) fcntl$getflags(r6, 0x7) write$binfmt_elf32(r4, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x6, 0x3, 0x3, 0x8, 0x2, 0x6, 0x144, 0x32a, 0x38, 0x18, 0x800, 0x6, 0x20, 0x2, 0x6, 0x6, 0xfff}, [{0x2, 0xe8, 0x8, 0x8, 0x5, 0x337e, 0x0, 0xfffffe00}], "37a996616295e3f2692d3cc7f72734795c6dcdcaa721005dca0ea4f559673d65307a79b908b299eb816f5ac945fd561803e3e71ad7303ca62e7673abffbc0d846821916c9b273293c83554d0cdf0b7cc2fccb1572b8b34742d9ae47073c4196f74aee023b44d47dc5adbc448b4707330c3c8a4c6e248407bd8ec55378ff805385cc43a4547b90ab9f7a1501c30bf03a7dbb3f14ee3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ed) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) sendto(0xffffffffffffffff, &(0x7f0000001080)="ba43e0379962742bef02fef2a572b80c34fae894522870e7ce31356fff0016caa184f65ef88aa57ced40b15c119aefee84138fc639026874bcbfc9b7099dec986226742445e20c412359e986393430fe702c228b69c8065fc3001b6296c0381037c99f076ef152eb3dfdf1261d4bf5e2677aa8ee15a0b63e6f24252791f3ef9d85a673e2dea78971b3a9774fb603258dbeaafcf3d4242d23dd4166d070a84384a30a177d12a39f6d53a138e4b84c006f0c6e34f8ab657b2e501a429e1761e2c874e0299476544bc86e01d40e3833092294b07321d1c388b6ff973b6d9b979070382aa7af066a203583b20a7627306302d1ab5a6e3310f89a93d1b65dbd86fa536407295a10872c8a7e6ccd0add794251fe3bb445878ec4d6b1d781724371ae00c9640019a62f023f3986dbf70083c9e834053f5c3698272c3ba8f957f585e25f09ddb48b63080c44df18d5978cc0e1d121e6327f31492e31b91da6bfc74a4aa4aecf0636a3916dce5ec140ab5e498cf3bc4f3b3aea4721f10b9d2d0be4ed3e27b785aef330d2f3b94932382955137f2ddab295f6e9131a9144e74e28fe58c2999728192802faf2b52a32bbd2bb95b9d9bc4ca179e0a88692d780dd00dbe0807acc793bff9fcc66d9f85ebf38f87e9e48f8ee5ae39d28ee364add5c9e543589222578978ef802002fe5760be66c58a415d95abc134b2d9db4feb907da4417e82f329e5cb19abf456cc72db627d181a069c712e84c0f5ecf08e4593016be4ded7214c7df7a28cfcf40af9e2cb9013b77e65d8e9e46605f3abb36dad6f827bf8771c4e8f78e40dd82527d7dd848c8dd2f2e784b70e8c1932dd73a592fe9c25a5c9b15011dcce2a6741d34b8104c327f567f9f9664585f14783c00943040ab74132d78b2ad34c48fc30e31bcf93ea5d3dbc23a464ce8f59847af7912ea41c742ace2544fd7dbd9f6543dea2d6d885c2f5732c5bab383f10859b5b645955293f4a5f1a25b53106b3394c38fc8a6fb4bd1c3e8f4746750a0560ad5fd1e85502be71b23ef6bd1388a279aa1e0c12c12a27ac348cd226b6bb22626dd714c467b8eb0dd471ff1d8cfb6eb9bf055369dbf274487f49e6696081616ee95860acccd88b34a144af0a75fa15a273d0ab9686949c86f812288e8b13eb186cfd7ea0bc85092acb010043ea5b08194bd6e4050fd298bc2591c1e572b9e3878162434db95cfc2309436a1a5816fee1eab4307630c6305ac5bd6c947a55ba67c25f4b52a53bde08020e39faf0b886153b1c2dc8c31c4755d4833b80fe4ccebbbffb72a14eec38833e5a0eed2b0f101dd26c74ea97602a813cdc887ce082407270e5b91ec35d2a7d40502ccf057145ed7b877f7f0f39c20e86141de953d588c249f61bcd48ae889f87b6ea3679823931054083647da64ab15f6d68462ba4ba5b8de882ee92b6b64135b70e64b6d65a5dc50102d1e021048899994c16bb9773d7d7270333779a0a8be536ed96636d47cefe7f34542c44b26fc4303a4d344888f91711b6758bd9fd3ea95faba16e1b43ee06b46e2d17720f5a7860acd1889d34e359276751b941511bbf4f778cff2ebe4a53f44da5bac17702cf8a61feeb5e03ff70205741e22595078c122b6446f742ae62bc4216f2c8f35c6ddae82e5106bc21d8a8c99d4b4f04ce621312b464fc24f3e397c9073dcccf3b6ab3010d694431ed8177ff7386cd15e4428cfe653b0ae98245bc76cdd1fb52926739b6724506b8c9ad74da7389c68af4d6014ef125acd1c9b555c5afa7a5ec44c32c1ba8b5d316a428966f2780f1d118d6a45ad5f3bb0a0e2a30bf6b6465ac297d915246a3c76bf5b9396a57fb2f6b6392bf5e7d2d6ec0b000c3b172e824a6490b2c7d62a068cdf52ed0579966eac674aecafd4dd5e6b22307133477afa37631bb7b86525c907da1c52b78c5e6027fd3dc778e39ccf756e3e8bc9143542d99c06595b8d81e608d9792c4910a7e360628477e84d7e8f0f077c02bc6edd68eac9d29a490a688220fbfabe16cfe9bfbe3ce5d7e2ed279691ff808bcadc97fe3fb3a5023f8856e5883a65626e5725439ffd87ed4dd692468261ca1c1fe3039b717db91bf2178bae572bbe1911f2bf9bff354a0a124a72acb2bf3e5db4d9d9fc11c6f8811823d3de45881b53807049be0291a9ec20946a7c5f0e910ad710697bb830df55f113b68442d8af3e34f82c89ed2ec79aa5067c7e9b4d77d28a86991bd2df187b0a8a252a6310aa62c90fa2170c43dffe552f6e4e999d345b244d54fb19c25d2170118f29032400b9a01c73e55f4abe8c9e03d38b6ee32b2c7fd68f6fa8b097d188e49c130cf2e1aebe008dd6ea97ef7532c1c35663f8c06c728cd5f30a5ca5881bbc92061fa1799869142b7c3bd55fcc5560eb1dc0016640a1e7470ab565c2f0a5fb77fae4c792f601e671ac10faa79c7b0f7b41c92d7aa93cc9033db3cbf52d0c3c8b72857a64cf903d065debe93edbd1368600d93e57823a801e4fd0c613f98df85add6fcf49caf6898dca48f7e729ac5f73962d84c298e3f34d16b1b83ddafdf729ae9b382511010f7c3ad9fd59ae3b45c4651c673477aa1217e1b314a16201c956e70b3625c57ac22202cb203f2c6a1de5f246fe6506bdc48900db5875a1b9e18ca0b8dc279a4d9d5c710ca62ca3cfd04c40cae6c80cb05763cda8f623d4b108404a4ac976c1d1fe888625e2dc8cb95bba881e0dff1dc5ed83d83a7b4ab64b5dc75035b5e6c6e609fa825a5548545df91bfe285012ace0e40e62e0578d17327a29f3f7dd531ecdff486f08f32c3bd341caec6922525c0b36284b481653022afcf5831b4359c4b9e4ad649f3842dd7b8acc9a79027c203e6da5f027be8488e63ab8a7fbd4fc6e522440dd8bb59ef5e6b48eebddef5b14a78d87cd7deefa27b20345fbd093e730f00937ec1338a68bb08f3dab10655445f405abeeb893184bc5c6f31b90db8145696aad1716fd1eb4ad747608a74993da9e53bf34c8c3a1584f3efb2b7b6252e67706828b9285459636245decae4ae7feabb61815a2ebfc1eb685548f187a24fd04dce150fb6f91c8da2d87db98c29b01486b1a5a653d5de717df851e99c96fc82c68048f1c1a79a0e6baab61ed69100a133a041444b876b966ec221e22290ab3c953c96dac9ee42c1a060598d62309d2f55c6ef01f9fc4b51f7055d7df4bd1115d990c13e2388b86c3ee52587cdcafcc508fd7b8c045c05e9a0d91eb3cf29ae63469eae1c6868bd9e8d25779a862149e55992ef6424ea643f15daf73b370e65cfa193a97c8248a75362d450e294b3c23faf447eab80866b2c73b01c3267535e582fb6297d8f66eea814cc6cd59e75dbbc688b97dde29f7abac0752e6d8f1148a632c1d072bafed4eb7c2d429af3efa35dac51c3444cf5f428d5fd3f924d45be80e28f1f112fb9a38637beb71f74df1cf0f1cbd94649dd2939231159211be8716c36a6de57aa46ac804fcd2cc1dffd02c8cb668e0e892bb3381735a643e14045ea870ab11bb705b458ab22cec05eb35ba0a2c207164d07395355a5050614de4dad17de294d3fc2b7e10daf974e4de6997fee071478e2defd7e48b3e880d62a296d54b11320d099a1d57b50bba3b4f9f7aca43cbca39549dbd5411c54f56fc80e29d9e0836e96f897a85bb49199606ccf192236483ae1b27b5722bb16152830ff608a858e723fbe6e23d93d67bc6a395735228ec8a555d7f55243af3c2a15655b0df066544337d1fdd603bf330d53305bc18eaf99af525d79f52fcbea5bd966fea3f11b2306dea5a10d1cb0be45e791a50eeba16a9842a4760ff56977b4c78925b39bd34d49283517f07093abddca5982569829f35a91cfdb90600274d2f6fe548330f42fa652d28f158df5f09ae2513b014c0854efdb78e12cbdf42456729e93997ec7d1ce1f5994dc3bc35e912fd4e2c45ebd847d231e3435e96f8923d54a796ff02708d6107cdd59190ec2cf21e6db6d0d95f55ea83c3000a7ad42ee3450269ce94b178691d80b8c45aa99c725fce753e0c8e28d5ae24a8eada93286567172a8a9f3647bb3aa2eaa3c4842e3d024f5f85e060192ce45a80efce7f126e6189cadc3d0ab210e03667287cb39b24b6f4ab490efca892dac1113b10aea6a0bb9000d55282c1bf809b0dcd970be7f0f9ba6ade86fc6a38d49d224bd38f3159945e9d4b5151efa0f314c9acc624f163aa3458e4f23b12fe8a2efd865aef12aef12ffb52868acae5966bb47cdb29d68c29a5bf0d504486cac56fb6502bd884de090e22d805b2984998f0f18db651399259f9f9565580e1b9b4892b7fd84f47a799131197b2d153ec3cf9e73f306316910e81344c68e3581f1d3b4e48ecf42a40f77c15267ceb1ac645c94eb33767d91a18000d95ee061548dcb2b51215aa0be9573aa0f321a16225012c3582e34e7707ceff160bfce6c474aa118675e24c9290e09824aa97126d22c702b136fb88ba610ddc540ea8084306ae9e8b78eecb0998a59892495244e6171c5446cc852944ac6dac222339d531dde6350d397ff95d6afff0c212366d1f661fb6dab5224e56d4ef07b1c537dba64c1f4939039f88c647b95a145f49376f8f1e678e397a8ac546b3ad47e64c217ff0bc36bdb13a80e66dfb14e4d0bf80b17124d641825c0f37fdf85afcdcefaf36c291f8ef4825329db125b432b68a2913640a339135b9952bec3fbf7c9436e87a6fe9f6ffe7667e92857656b4438e634986480e932ea7f5a34f54a791d5accae8d25558942df57dce03035297f9120ae70be22a767248febd083883808ccb69739308448bcc7b758cccae64ff197c8948cc417fa216620e3fb0fe9668fe0aecfdf0e6c70c2b0a296cff6476aae8bf207260866663e5228a3e69661ad69fd87a1a943cc43f2160ad8facc49737c25980916b80d0d9d1bead365fb95f76a3724f9a03c0a0a6a93534bdb75db9e4efcfe9ec87838671b5b63bac7c3c65a4225cf1ca49512fa29fe7202a80d6b38299690ee0008cca0455bd2271e02765f26bcc2ab9860e472114118d68cb5c95a54e2dde4f2ad75aa4b56d169548e57e9825f29d289d9308baeb25cc431c1b3b11031e01cd11da9e72da113d0abc2b35640587142d0ef5ff5fbf062cd4ad5e777f9788441481c247e54b7e2f1027fcfca8ec7af4c49c940eaa4ec18fa6571c4a1a325d1e55af8cf084bb3091069b4de2b167fcd5a9650790c88f0b8c4f362c14bce5e924b343ba347b4492e4438400720c99eed5694e133c7878902d7495a3070ef8403a9f1cc172472270d7b55dabdba333a91df53b7c0746bb1e503e16f8dd0a0db5e072610572d6a132ef96ca94b1c78cf713f09a260eff6081c0d35114ceaff6674209e79d97fc28c82ccd982df9d7bb6f9aebc6369904844e1b8c70d0ea7829d8ec91d83ce9fc4363686157d30d5bdc29d42b6f74115d443e335d4ea3f9dde25d612d460522413575ea13f7c963215d249ef28a489850ad5bf8aa06d00f062386398552e53781bbce3e2acc075a536f46be07a579b2900a7d1ce035dc2fb332168e59cfcf254363e4ed7ce51699de511bd88e3fa68cd8eb39c2177df102263fcb455bf2749bbf7085afdca3ddbeea68b0d2f7089b4e6171c161e847d6976b1fa3d6e14b7989aec1764d36ad182393d961b3cea8614c3ec398fca463c2aaf41fbdf1ea37bb1f1da8c95d003dac60dc14f9b3d15829129de1cb9eeffb413e9a87ad6973770089f421eac0293a6ceb6d877181d745abdcb85cd558d8923064bb303c00056c970f6b", 0x1000, 0x4000800, &(0x7f0000002080)=@in={0x2, 0x4e21, @multicast1}, 0x80) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000023c0)={{}, {}, 0x101, 0x0, 0x0, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='./file0\x00', &(0x7f0000002180)="3fbf9499064c934937098662aca9814e96e9de001e68fd201265c6b37455a5d03e2cecd78a11693028099821289cfd52e8ea69dd1867ea28447f42b25607ae54f95451f1d45ac69c595c3a1a5d5572acc453b94f819ae0a0d188e5447f84e6136872765923d870511ca452f73356f0f8b6635a99e5076e549e98f1467312f1f46657f2c783ae293519942d516946c538adf68b8da45630c60e23", 0x9a, 0x0, &(0x7f0000002240)={0x2, 0xd9, {0x0, 0xc, 0x17, "b887b47902854f5f55cc417ae3adc2119e98b7f3ff2934", 0xb5, "846dd397654e313c8173ddcb8a13709b7324da5343caebd3f5c35083c5210febb371d945f43db6af83bdf54649d4543dc468633f837ddd0f481572d08a55233898e383076c2557cbd41759d13c285c3da9bde4ed53bfdf18fc7d964ab0fbab8fdd94bd89d25679055df05d63a6317e6108c09157b206fd85310e19bf86534420d3fb4286c19b447233012dc6c2e3d34a4f52b97a8de7da4b398872902904c62664956ecc9b31b36acc6ce08b17fc81066414f7b29a"}, 0x6d, "37429c9d87bd5dcd02bbecd68571c986f609e672d141316c1b8af36cb3dd364f58cb8d87f333d812bc71eb3bd2f69830b591d9ee161791ae56fa87d86d7b5f3d623111633a79d2860c6ef0d554456190baffe4f6b79726d8ef782e62f355563968f7a1918695e714ad48d400ee"}, 0x152}) r8 = openat$incfs(r2, &(0x7f0000002440)='.log\x00', 0x4000, 0x123) r9 = getpgrp(r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000002480)={'\x00', 0x1, 0x1, 0x7, 0x7ff, 0x4, r9}) r10 = open$dir(&(0x7f0000002500)='./file0\x00', 0x4800, 0x51) fchdir(r10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 19:26:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x200, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4080) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20400401}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b8, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x70a000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ea8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6e992ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2064fe37}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1fe, @local, 0x6}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24008001}, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}]}, 0x1c}}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x72d}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1d0, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20004881}, 0x40000) [ 72.416620] audit: type=1400 audit(1664825195.675:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:26:35 executing program 6: mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, 0x2, @thr={&(0x7f0000000000)="e258497e8334504917ac4eb24e0b0895fdd08224d22f1b5745017323f9287fdc0b1402147469dfe569a9b0fcd86522df9f9fd9af4fe4954b5aa83427281bead08fa3df30ac54c48274ce9c78d9ae8387a04bef5da8d100b89adc48f37c9738b7b2c6ac4367d71be279fcdd7268febd", &(0x7f0000000080)="55730ac55eec3d355cfd6f900c8d401584fd2c4da8f6329a2c0fb8ae35075e216aa0e6de7674a85e17549f50112b8be8bc889ce340a5c7ed87890c5bf1c698ac6df63ad7dddb2806ad0276cab22eee989b43a37ad659728d7589c281b8d307127ca09da0e555145399d066d95b2dfec58107677aba5a60fbac7395201412403f11db2f6a0e77a9942d2000a025b32e2777b741e476b60fee5835601694c8ef8864ec3ac6375f42f90a4e482089027afa7625f6d22cca3821f5e5cb5cc8de9a0a0236ba095f38db3a032866d93c63d6b791a329336fa8d26875"}}) mq_timedsend(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb2dd, &(0x7f00000001c0)={0x77359400}) r0 = io_uring_setup(0x2fbe, &(0x7f0000000200)={0x0, 0xc2c5, 0x1, 0x2, 0x2e1}) fchmod(r0, 0x42) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x5, 0x110, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000001600)=[{&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/68, 0x44}, {&(0x7f00000015c0)=""/8, 0x8}], 0x6, &(0x7f0000001680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001740)=""/117, 0x75}, {&(0x7f00000017c0)=""/47, 0x2f}, {&(0x7f0000001800)=""/160, 0xa0}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/203, 0xcb}, {&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/46, 0x2e}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)=""/23, 0x17}], 0x9, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}], 0x2, 0x40000000, &(0x7f0000002cc0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000002d80)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r2, &(0x7f0000002d00)={0x204801, 0x20, 0x14}, &(0x7f0000002d40)='./file0\x00', 0x18, 0x0, 0x23456}, 0xab3) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) readv(r6, &(0x7f0000003f80)=[{&(0x7f0000002dc0)=""/144, 0x90}, {&(0x7f0000002e80)=""/216, 0xd8}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x3) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000003fc0)={0x0, @aes128, 0x0, @desc3}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000004000)='./file0\x00', 0x181000) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000004040)=r4, 0x1) fchmod(r5, 0x1c1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000040c0)={0x6, &(0x7f0000004080)=[{0x4, 0x7, 0x8, 0x1}, {0x1ff, 0x8, 0x2, 0x9}, {0x0, 0x3f, 0x2, 0x7}, {0xfffd, 0x5, 0x6, 0xffffff00}, {0x9, 0x2, 0x0, 0x2}, {0x8001, 0xfd, 0x97, 0x9c7}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000004100)={"420a5a3a40707b3a83adc3a84bb6708b", 0x0, 0x0, {0x5, 0x9db}, {0x9}, 0x9a, [0x2, 0x4, 0x5, 0x7fff, 0xffffffffffffffe1, 0x9, 0x0, 0x1, 0x1ff, 0x6, 0x4, 0x7fff, 0x100, 0x0, 0x1, 0x8]}) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, &(0x7f0000004200)=r11) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000004240)={r3}) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000004280)={0x8}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000004300)={0x0, 'ip6_vti0\x00', {0x1}, 0x5}) 19:26:35 executing program 7: sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="b851ec64c3d445d5347a0cff61c085a8d441", 0x12}, {&(0x7f00000000c0)="242318ee0181db69285c80d60f4f601ac41e4a92a0e833b04b1820303c7412deb9b01ab17ad1408b4c9bcc7bedcbbe8a9b39e02182ec01216b6e634e313e7e12a0a39e5315ec8479068fe016cbdb72db553cbe87a60fc71cdcde0baa21874492ff7287f0e09579dd9f87818f77cbf0185598874f6dbec70838ad1e09301501ca8fb642660ae1bcba06ebe7a17147cc0f39696473398d229d6638ad2c99bf17aa90730ccdc48b1c8ef7bec522630566fdc31178de550a3995cafe89bcd315d79f27e897e03d0ea868b20bc3ff4c738e98482b71a0787dac3bc8c8370d", 0xdc}, {&(0x7f00000001c0)="985f388b4662ecf18871597859d36a50a2f82fb2c37d0da82be04a01b79a89f5a0dc5f0a97a1f16bf90ad0309f7430cf42d5b1733ee04a8f829097d90886e21b1961a3ef6485a3", 0x47}], 0x3, &(0x7f0000000280)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xd8}, 0x44000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4810) r0 = syz_io_uring_setup(0xdb4, &(0x7f00000004c0)={0x0, 0x2e69, 0x2, 0x0, 0x29b}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0), &(0x7f00000006c0)='./file0\x00', 0x10, 0x4000, 0x1}, 0x10001) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000740)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x6000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x7) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r3, 0xd638a14d99d41689, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}}, 0x4000020) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xfc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040000}, 0x54) syz_io_uring_submit(r2, 0x0, &(0x7f0000000a80)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x10100, 0x1, {0x2}}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x9, 0x40000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000c40)={@loopback, 0x0}, &(0x7f0000000c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x33, 0x1, 0x4a, @private2, @empty, 0x20, 0x700, 0x20, 0xff}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d80)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000e80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001100)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x184, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x84, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) [ 73.803883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.805804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.807181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.809800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.840598] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.846857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.848929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.851146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.854569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.856226] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.857281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.858712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.860957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.862201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.866493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.867951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.869385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.870473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.871918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.873010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.874127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.875883] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.877297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.878348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.880375] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.880937] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.883179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.885265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.886769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.888319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.890435] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.893989] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.895445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.907546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.910665] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.910851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.916508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.919038] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.920522] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.921869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.925133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.925787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.926356] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.927992] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.928788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.929283] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.930458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.931783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.935270] Bluetooth: hci3: HCI_REQ-0x0c1a [ 73.935314] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.947784] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.951339] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.967424] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.969013] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.974485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.979372] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.923127] Bluetooth: hci1: command 0x0409 tx timeout [ 75.924138] Bluetooth: hci2: command 0x0409 tx timeout [ 75.924847] Bluetooth: hci0: command 0x0409 tx timeout [ 75.986235] Bluetooth: hci3: command 0x0409 tx timeout [ 75.987178] Bluetooth: hci4: command 0x0409 tx timeout [ 75.987870] Bluetooth: hci5: command 0x0409 tx timeout [ 75.988589] Bluetooth: hci6: command 0x0409 tx timeout [ 76.050521] Bluetooth: hci7: command 0x0409 tx timeout [ 77.970266] Bluetooth: hci0: command 0x041b tx timeout [ 77.970716] Bluetooth: hci2: command 0x041b tx timeout [ 77.971143] Bluetooth: hci1: command 0x041b tx timeout [ 78.034158] Bluetooth: hci6: command 0x041b tx timeout [ 78.034572] Bluetooth: hci5: command 0x041b tx timeout [ 78.034978] Bluetooth: hci4: command 0x041b tx timeout [ 78.035412] Bluetooth: hci3: command 0x041b tx timeout [ 78.098137] Bluetooth: hci7: command 0x041b tx timeout [ 80.018147] Bluetooth: hci1: command 0x040f tx timeout [ 80.018617] Bluetooth: hci2: command 0x040f tx timeout [ 80.019025] Bluetooth: hci0: command 0x040f tx timeout [ 80.082199] Bluetooth: hci3: command 0x040f tx timeout [ 80.082607] Bluetooth: hci4: command 0x040f tx timeout [ 80.082989] Bluetooth: hci5: command 0x040f tx timeout [ 80.083411] Bluetooth: hci6: command 0x040f tx timeout [ 80.146175] Bluetooth: hci7: command 0x040f tx timeout [ 82.066196] Bluetooth: hci0: command 0x0419 tx timeout [ 82.066666] Bluetooth: hci2: command 0x0419 tx timeout [ 82.067109] Bluetooth: hci1: command 0x0419 tx timeout [ 82.130223] Bluetooth: hci6: command 0x0419 tx timeout [ 82.131033] Bluetooth: hci5: command 0x0419 tx timeout [ 82.132258] Bluetooth: hci4: command 0x0419 tx timeout [ 82.133030] Bluetooth: hci3: command 0x0419 tx timeout [ 82.194186] Bluetooth: hci7: command 0x0419 tx timeout 19:27:34 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003300)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x12000, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c2bd404d6d00"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x80) r4 = creat(&(0x7f0000000140)='./file2\x00', 0x4) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12200) 19:27:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x80000) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000001c0)={0x3}) ioctl$VT_DISALLOCATE(r7, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r7, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x220) [ 131.230140] audit: type=1400 audit(1664825254.489:7): avc: denied { open } for pid=3843 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.231680] audit: type=1400 audit(1664825254.489:8): avc: denied { kernel } for pid=3843 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.249711] ------------[ cut here ]------------ [ 131.249733] [ 131.249736] ====================================================== [ 131.249740] WARNING: possible circular locking dependency detected [ 131.249744] 6.0.0-rc7-next-20220930 #1 Not tainted [ 131.249750] ------------------------------------------------------ [ 131.249754] syz-executor.4/3844 is trying to acquire lock: [ 131.249760] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 131.249800] [ 131.249800] but task is already holding lock: [ 131.249803] ffff88800fb7a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.249830] [ 131.249830] which lock already depends on the new lock. [ 131.249830] [ 131.249833] [ 131.249833] the existing dependency chain (in reverse order) is: [ 131.249837] [ 131.249837] -> #3 (&ctx->lock){....}-{2:2}: [ 131.249850] _raw_spin_lock+0x2a/0x40 [ 131.249862] __perf_event_task_sched_out+0x53b/0x18d0 [ 131.249873] __schedule+0xedd/0x2470 [ 131.249887] schedule+0xda/0x1b0 [ 131.249900] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.249913] syscall_exit_to_user_mode+0x19/0x40 [ 131.249926] do_syscall_64+0x48/0x90 [ 131.249943] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.249956] [ 131.249956] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 131.249969] _raw_spin_lock_nested+0x30/0x40 [ 131.249980] raw_spin_rq_lock_nested+0x1e/0x30 [ 131.249994] task_fork_fair+0x63/0x4d0 [ 131.250010] sched_cgroup_fork+0x3d0/0x540 [ 131.250024] copy_process+0x4183/0x6e20 [ 131.250035] kernel_clone+0xe7/0x890 [ 131.250045] user_mode_thread+0xad/0xf0 [ 131.250055] rest_init+0x24/0x250 [ 131.250070] arch_call_rest_init+0xf/0x14 [ 131.250087] start_kernel+0x4c6/0x4eb [ 131.250102] secondary_startup_64_no_verify+0xe0/0xeb [ 131.250116] [ 131.250116] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 131.250130] _raw_spin_lock_irqsave+0x39/0x60 [ 131.250140] try_to_wake_up+0xab/0x1930 [ 131.250153] up+0x75/0xb0 [ 131.250167] __up_console_sem+0x6e/0x80 [ 131.250183] console_unlock+0x46a/0x590 [ 131.250199] vprintk_emit+0x1bd/0x560 [ 131.250215] vprintk+0x84/0xa0 [ 131.250230] _printk+0xba/0xf1 [ 131.250242] regdb_fw_cb.cold+0x6c/0xa7 [ 131.250259] request_firmware_work_func+0x12e/0x240 [ 131.250279] process_one_work+0xa17/0x16a0 [ 131.250296] worker_thread+0x637/0x1260 [ 131.250312] kthread+0x2ed/0x3a0 [ 131.250326] ret_from_fork+0x22/0x30 [ 131.250338] [ 131.250338] -> #0 ((console_sem).lock){....}-{2:2}: [ 131.250352] __lock_acquire+0x2a02/0x5e70 [ 131.250368] lock_acquire+0x1a2/0x530 [ 131.250384] _raw_spin_lock_irqsave+0x39/0x60 [ 131.250395] down_trylock+0xe/0x70 [ 131.250409] __down_trylock_console_sem+0x3b/0xd0 [ 131.250425] vprintk_emit+0x16b/0x560 [ 131.250441] vprintk+0x84/0xa0 [ 131.250456] _printk+0xba/0xf1 [ 131.250466] report_bug.cold+0x72/0xab [ 131.250482] handle_bug+0x3c/0x70 [ 131.250498] exc_invalid_op+0x14/0x50 [ 131.250515] asm_exc_invalid_op+0x16/0x20 [ 131.250527] group_sched_out.part.0+0x2c7/0x460 [ 131.250545] ctx_sched_out+0x8f1/0xc10 [ 131.250562] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.250573] __schedule+0xedd/0x2470 [ 131.250586] schedule+0xda/0x1b0 [ 131.250599] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.250609] syscall_exit_to_user_mode+0x19/0x40 [ 131.250622] do_syscall_64+0x48/0x90 [ 131.250638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.250650] [ 131.250650] other info that might help us debug this: [ 131.250650] [ 131.250653] Chain exists of: [ 131.250653] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 131.250653] [ 131.250668] Possible unsafe locking scenario: [ 131.250668] [ 131.250670] CPU0 CPU1 [ 131.250672] ---- ---- [ 131.250675] lock(&ctx->lock); [ 131.250680] lock(&rq->__lock); [ 131.250687] lock(&ctx->lock); [ 131.250693] lock((console_sem).lock); [ 131.250699] [ 131.250699] *** DEADLOCK *** [ 131.250699] [ 131.250701] 2 locks held by syz-executor.4/3844: [ 131.250707] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 131.250736] #1: ffff88800fb7a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.250762] [ 131.250762] stack backtrace: [ 131.250765] CPU: 1 PID: 3844 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 131.250777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.250785] Call Trace: [ 131.250789] [ 131.250793] dump_stack_lvl+0x8b/0xb3 [ 131.250811] check_noncircular+0x263/0x2e0 [ 131.250827] ? format_decode+0x26c/0xb50 [ 131.250844] ? print_circular_bug+0x450/0x450 [ 131.250860] ? simple_strtoul+0x30/0x30 [ 131.250876] ? format_decode+0x26c/0xb50 [ 131.250893] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 131.250910] __lock_acquire+0x2a02/0x5e70 [ 131.250931] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.250954] lock_acquire+0x1a2/0x530 [ 131.250970] ? down_trylock+0xe/0x70 [ 131.250987] ? lock_release+0x750/0x750 [ 131.251007] ? vprintk+0x84/0xa0 [ 131.251024] _raw_spin_lock_irqsave+0x39/0x60 [ 131.251036] ? down_trylock+0xe/0x70 [ 131.251052] down_trylock+0xe/0x70 [ 131.251067] ? vprintk+0x84/0xa0 [ 131.251084] __down_trylock_console_sem+0x3b/0xd0 [ 131.251101] vprintk_emit+0x16b/0x560 [ 131.251119] vprintk+0x84/0xa0 [ 131.251136] _printk+0xba/0xf1 [ 131.251148] ? record_print_text.cold+0x16/0x16 [ 131.251163] ? report_bug.cold+0x66/0xab [ 131.251181] ? group_sched_out.part.0+0x2c7/0x460 [ 131.251199] report_bug.cold+0x72/0xab [ 131.251217] handle_bug+0x3c/0x70 [ 131.251235] exc_invalid_op+0x14/0x50 [ 131.251253] asm_exc_invalid_op+0x16/0x20 [ 131.251265] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.251286] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.251297] RSP: 0018:ffff8880180efc48 EFLAGS: 00010006 [ 131.251306] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.251314] RDX: ffff88801aa8b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 131.251321] RBP: ffff888040c30000 R08: 0000000000000005 R09: 0000000000000001 [ 131.251329] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800fb7a400 [ 131.251336] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 131.251347] ? group_sched_out.part.0+0x2c7/0x460 [ 131.251367] ? group_sched_out.part.0+0x2c7/0x460 [ 131.251386] ctx_sched_out+0x8f1/0xc10 [ 131.251406] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.251420] ? lock_is_held_type+0xd7/0x130 [ 131.251433] ? __perf_cgroup_move+0x160/0x160 [ 131.251444] ? set_next_entity+0x304/0x550 [ 131.251461] ? update_curr+0x267/0x740 [ 131.251479] ? lock_is_held_type+0xd7/0x130 [ 131.251493] __schedule+0xedd/0x2470 [ 131.251510] ? io_schedule_timeout+0x150/0x150 [ 131.251526] ? rcu_read_lock_sched_held+0x3e/0x80 [ 131.251547] schedule+0xda/0x1b0 [ 131.251562] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.251574] syscall_exit_to_user_mode+0x19/0x40 [ 131.251587] do_syscall_64+0x48/0x90 [ 131.251605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.251618] RIP: 0033:0x7f09beb02b19 [ 131.251626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.251637] RSP: 002b:00007f09bc078218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.251647] RAX: 0000000000000001 RBX: 00007f09bec15f68 RCX: 00007f09beb02b19 [ 131.251655] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09bec15f6c [ 131.251662] RBP: 00007f09bec15f60 R08: 000000000000000e R09: 0000000000000000 [ 131.251669] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f09bec15f6c [ 131.251676] R13: 00007ffc5b40d98f R14: 00007f09bc078300 R15: 0000000000022000 [ 131.251688] [ 131.308859] WARNING: CPU: 1 PID: 3844 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 131.309552] Modules linked in: [ 131.309796] CPU: 1 PID: 3844 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 131.310387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.311206] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.311613] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.312955] RSP: 0018:ffff8880180efc48 EFLAGS: 00010006 [ 131.313350] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.313874] RDX: ffff88801aa8b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 131.314399] RBP: ffff888040c30000 R08: 0000000000000005 R09: 0000000000000001 [ 131.314922] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800fb7a400 [ 131.315436] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 131.315958] FS: 00007f09bc078700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 131.316542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.316966] CR2: 00005602b94adf88 CR3: 0000000040b10000 CR4: 0000000000350ee0 [ 131.317491] Call Trace: [ 131.317686] [ 131.317861] ctx_sched_out+0x8f1/0xc10 [ 131.318160] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.318547] ? lock_is_held_type+0xd7/0x130 [ 131.318866] ? __perf_cgroup_move+0x160/0x160 [ 131.319201] ? set_next_entity+0x304/0x550 [ 131.319525] ? update_curr+0x267/0x740 [ 131.319823] ? lock_is_held_type+0xd7/0x130 [ 131.320143] __schedule+0xedd/0x2470 [ 131.320434] ? io_schedule_timeout+0x150/0x150 [ 131.320781] ? rcu_read_lock_sched_held+0x3e/0x80 [ 131.321149] schedule+0xda/0x1b0 [ 131.321410] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.321778] syscall_exit_to_user_mode+0x19/0x40 [ 131.322134] do_syscall_64+0x48/0x90 [ 131.322415] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.322797] RIP: 0033:0x7f09beb02b19 [ 131.323071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.324385] RSP: 002b:00007f09bc078218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.324937] RAX: 0000000000000001 RBX: 00007f09bec15f68 RCX: 00007f09beb02b19 [ 131.325469] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09bec15f6c [ 131.326001] RBP: 00007f09bec15f60 R08: 000000000000000e R09: 0000000000000000 [ 131.326524] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f09bec15f6c [ 131.327044] R13: 00007ffc5b40d98f R14: 00007f09bc078300 R15: 0000000000022000 [ 131.327572] [ 131.327747] irq event stamp: 660 [ 131.327994] hardirqs last enabled at (659): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 131.328672] hardirqs last disabled at (660): [] __schedule+0x1225/0x2470 [ 131.329284] softirqs last enabled at (312): [] __irq_exit_rcu+0x11b/0x180 [ 131.329908] softirqs last disabled at (277): [] __irq_exit_rcu+0x11b/0x180 [ 131.330526] ---[ end trace 0000000000000000 ]--- 19:27:34 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mpde=000<00000000006252\x00\x00\x00\x00\x00']) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 131.491896] tmpfs: Unknown parameter 'mpde' [ 131.492717] tmpfs: Unknown parameter 'mpde' 19:27:34 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x0) [ 131.596383] audit: type=1400 audit(1664825254.856:9): avc: denied { read } for pid=3843 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 19:27:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x74, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20080084) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x90, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x90}}, 0x0) 19:27:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x80000) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000001c0)={0x3}) ioctl$VT_DISALLOCATE(r7, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r7, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x220) 19:27:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x74, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20080084) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x90, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x90}}, 0x0) 19:27:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/148, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) memfd_secret(0x80000) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0x0, 0x10, "ddab93e1adcbd470"}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000001c0)={0x3}) ioctl$VT_DISALLOCATE(r7, 0x5608) io_submit(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="666fd6fb7c4c8e8bf4059397e83e5ca7e7a13e2dbc305703a2c6a90bba95bb649867b6deabc9", 0x26, 0x4, 0x0, 0x3, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000400)="bcf3b4f072b97e9c8e5e4369e898ea7d3b9aaf8d0633f79e97d0826da4635d97340e117a758d18b9fe61c37ab2832aa388c707228965f582216544e3d9b9e1d50f2085b8b532a2d6b3c64fef32086daf609dede175371d47064c088a9ccda4c9", 0x60, 0x1, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r7, &(0x7f00000004c0)="457e9ecce6f0e6267ca821ea89e945294a9d2c204cfc7e6ab54c199887166c29b9dd581d3b99a5afd0", 0x29, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000006c0)="caab5ab60cec2af461a1c275cab0df2622d311b22d15515e3c4d26fe7dddedecf8b1d9938e233d24e9941337524c7aaaa1ee7e747d80fbc3cca3eeec", 0x3c, 0xffffffffffffffff, 0x0, 0x1, r3}]) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x220) [ 137.042260] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 137.043347] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 137.043365] Bluetooth: hci4: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 19:27:34 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84274587 RDX=ffffed100d9e6fd1 RSI=0000000000000004 RDI=ffff88806cf37e80 RBP=ffff88806cf37e80 RSP=ffff888018227ab0 R8 =0000000000000000 R9 =ffff88806cf37e83 R10=ffffed100d9e6fd0 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e6fd0 R14=0000000000000001 R15=1ffff11003044f57 RIP=ffffffff84274604 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555fcc400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c91a7dd40 CR3=000000001b93a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000ffff00000000 000000000000ffff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 000000ff00000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880180ef690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f09bc078700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005602b94adf88 CR3=0000000040b10000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f09bebe97c0 00007f09bebe97c8 YMM02=0000000000000000 0000000000000000 00007f09bebe97e0 00007f09bebe97c0 YMM03=0000000000000000 0000000000000000 00007f09bebe97c8 00007f09bebe97c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000