Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:54250' (ECDSA) to the list of known hosts. 2022/09/13 22:59:22 fuzzer started 2022/09/13 22:59:22 dialing manager at localhost:36597 syzkaller login: [ 35.695410] cgroup: Unknown subsys name 'net' [ 35.800553] cgroup: Unknown subsys name 'rlimit' 2022/09/13 22:59:38 syscalls: 2215 2022/09/13 22:59:38 code coverage: enabled 2022/09/13 22:59:38 comparison tracing: enabled 2022/09/13 22:59:38 extra coverage: enabled 2022/09/13 22:59:38 setuid sandbox: enabled 2022/09/13 22:59:38 namespace sandbox: enabled 2022/09/13 22:59:38 Android sandbox: enabled 2022/09/13 22:59:38 fault injection: enabled 2022/09/13 22:59:38 leak checking: enabled 2022/09/13 22:59:38 net packet injection: enabled 2022/09/13 22:59:38 net device setup: enabled 2022/09/13 22:59:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 22:59:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 22:59:38 USB emulation: enabled 2022/09/13 22:59:38 hci packet injection: enabled 2022/09/13 22:59:38 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 22:59:38 802.15.4 emulation: enabled 2022/09/13 22:59:38 fetching corpus: 50, signal 35407/37148 (executing program) 2022/09/13 22:59:38 fetching corpus: 100, signal 48404/51701 (executing program) 2022/09/13 22:59:38 fetching corpus: 150, signal 58572/63329 (executing program) 2022/09/13 22:59:38 fetching corpus: 200, signal 70082/76132 (executing program) 2022/09/13 22:59:38 fetching corpus: 250, signal 77105/84414 (executing program) 2022/09/13 22:59:39 fetching corpus: 300, signal 81843/90395 (executing program) 2022/09/13 22:59:39 fetching corpus: 350, signal 86478/96264 (executing program) 2022/09/13 22:59:39 fetching corpus: 400, signal 89254/100262 (executing program) 2022/09/13 22:59:39 fetching corpus: 450, signal 92460/104659 (executing program) 2022/09/13 22:59:39 fetching corpus: 500, signal 98445/111567 (executing program) 2022/09/13 22:59:39 fetching corpus: 550, signal 101552/115730 (executing program) 2022/09/13 22:59:39 fetching corpus: 600, signal 106380/121414 (executing program) 2022/09/13 22:59:39 fetching corpus: 650, signal 109461/125473 (executing program) 2022/09/13 22:59:40 fetching corpus: 700, signal 112424/129350 (executing program) 2022/09/13 22:59:40 fetching corpus: 750, signal 114683/132586 (executing program) 2022/09/13 22:59:40 fetching corpus: 800, signal 117968/136747 (executing program) 2022/09/13 22:59:40 fetching corpus: 850, signal 121789/141282 (executing program) 2022/09/13 22:59:40 fetching corpus: 900, signal 123829/144250 (executing program) 2022/09/13 22:59:40 fetching corpus: 950, signal 126768/147936 (executing program) 2022/09/13 22:59:40 fetching corpus: 1000, signal 129025/150981 (executing program) 2022/09/13 22:59:41 fetching corpus: 1050, signal 132795/155315 (executing program) 2022/09/13 22:59:41 fetching corpus: 1100, signal 135625/158745 (executing program) 2022/09/13 22:59:41 fetching corpus: 1150, signal 137885/161681 (executing program) 2022/09/13 22:59:41 fetching corpus: 1200, signal 139079/163697 (executing program) 2022/09/13 22:59:41 fetching corpus: 1250, signal 141458/166694 (executing program) 2022/09/13 22:59:41 fetching corpus: 1300, signal 142884/168888 (executing program) 2022/09/13 22:59:42 fetching corpus: 1350, signal 145478/172019 (executing program) 2022/09/13 22:59:42 fetching corpus: 1400, signal 148932/175805 (executing program) 2022/09/13 22:59:42 fetching corpus: 1450, signal 151046/178426 (executing program) 2022/09/13 22:59:42 fetching corpus: 1500, signal 152298/180378 (executing program) 2022/09/13 22:59:42 fetching corpus: 1550, signal 154241/182850 (executing program) 2022/09/13 22:59:42 fetching corpus: 1600, signal 156260/185402 (executing program) 2022/09/13 22:59:42 fetching corpus: 1650, signal 157547/187291 (executing program) 2022/09/13 22:59:43 fetching corpus: 1700, signal 158971/189298 (executing program) 2022/09/13 22:59:43 fetching corpus: 1750, signal 159820/190818 (executing program) 2022/09/13 22:59:43 fetching corpus: 1800, signal 162011/193349 (executing program) 2022/09/13 22:59:43 fetching corpus: 1850, signal 163986/195713 (executing program) 2022/09/13 22:59:43 fetching corpus: 1900, signal 165565/197759 (executing program) 2022/09/13 22:59:43 fetching corpus: 1950, signal 166949/199600 (executing program) 2022/09/13 22:59:43 fetching corpus: 2000, signal 168976/201973 (executing program) 2022/09/13 22:59:43 fetching corpus: 2050, signal 170729/204082 (executing program) 2022/09/13 22:59:44 fetching corpus: 2100, signal 172341/206048 (executing program) 2022/09/13 22:59:44 fetching corpus: 2150, signal 174865/208595 (executing program) 2022/09/13 22:59:44 fetching corpus: 2200, signal 176500/210511 (executing program) 2022/09/13 22:59:44 fetching corpus: 2250, signal 178175/212416 (executing program) 2022/09/13 22:59:44 fetching corpus: 2300, signal 179811/214311 (executing program) 2022/09/13 22:59:44 fetching corpus: 2350, signal 181054/215894 (executing program) 2022/09/13 22:59:44 fetching corpus: 2400, signal 182321/217540 (executing program) 2022/09/13 22:59:45 fetching corpus: 2450, signal 183425/219020 (executing program) 2022/09/13 22:59:45 fetching corpus: 2500, signal 184118/220182 (executing program) 2022/09/13 22:59:45 fetching corpus: 2550, signal 185223/221617 (executing program) 2022/09/13 22:59:45 fetching corpus: 2600, signal 186406/223066 (executing program) 2022/09/13 22:59:45 fetching corpus: 2650, signal 187492/224428 (executing program) 2022/09/13 22:59:45 fetching corpus: 2700, signal 188898/225963 (executing program) 2022/09/13 22:59:45 fetching corpus: 2750, signal 189857/227210 (executing program) 2022/09/13 22:59:46 fetching corpus: 2800, signal 190826/228481 (executing program) 2022/09/13 22:59:46 fetching corpus: 2850, signal 191776/229685 (executing program) 2022/09/13 22:59:46 fetching corpus: 2900, signal 193111/231093 (executing program) 2022/09/13 22:59:46 fetching corpus: 2950, signal 194161/232373 (executing program) 2022/09/13 22:59:46 fetching corpus: 3000, signal 195090/233625 (executing program) 2022/09/13 22:59:46 fetching corpus: 3050, signal 195891/234721 (executing program) 2022/09/13 22:59:46 fetching corpus: 3100, signal 197299/236244 (executing program) 2022/09/13 22:59:46 fetching corpus: 3150, signal 198289/237419 (executing program) 2022/09/13 22:59:47 fetching corpus: 3200, signal 199235/238566 (executing program) 2022/09/13 22:59:47 fetching corpus: 3250, signal 200093/239651 (executing program) 2022/09/13 22:59:47 fetching corpus: 3300, signal 200769/240630 (executing program) 2022/09/13 22:59:47 fetching corpus: 3350, signal 202219/241986 (executing program) 2022/09/13 22:59:47 fetching corpus: 3400, signal 203150/243099 (executing program) 2022/09/13 22:59:47 fetching corpus: 3450, signal 204439/244405 (executing program) 2022/09/13 22:59:47 fetching corpus: 3500, signal 205196/245407 (executing program) 2022/09/13 22:59:48 fetching corpus: 3550, signal 206503/246669 (executing program) 2022/09/13 22:59:48 fetching corpus: 3600, signal 207331/247671 (executing program) 2022/09/13 22:59:48 fetching corpus: 3650, signal 208457/248810 (executing program) 2022/09/13 22:59:48 fetching corpus: 3700, signal 209246/249730 (executing program) 2022/09/13 22:59:48 fetching corpus: 3750, signal 210016/250661 (executing program) 2022/09/13 22:59:48 fetching corpus: 3800, signal 210460/251415 (executing program) 2022/09/13 22:59:48 fetching corpus: 3850, signal 211244/252328 (executing program) 2022/09/13 22:59:48 fetching corpus: 3900, signal 212418/253400 (executing program) 2022/09/13 22:59:49 fetching corpus: 3950, signal 213055/254199 (executing program) 2022/09/13 22:59:49 fetching corpus: 4000, signal 213849/255132 (executing program) 2022/09/13 22:59:49 fetching corpus: 4050, signal 214557/255988 (executing program) 2022/09/13 22:59:49 fetching corpus: 4100, signal 215669/256993 (executing program) 2022/09/13 22:59:49 fetching corpus: 4150, signal 216761/257989 (executing program) 2022/09/13 22:59:49 fetching corpus: 4200, signal 217583/258834 (executing program) 2022/09/13 22:59:49 fetching corpus: 4250, signal 218072/259534 (executing program) 2022/09/13 22:59:49 fetching corpus: 4300, signal 218721/260315 (executing program) 2022/09/13 22:59:50 fetching corpus: 4350, signal 219473/261130 (executing program) 2022/09/13 22:59:50 fetching corpus: 4400, signal 220129/261833 (executing program) 2022/09/13 22:59:50 fetching corpus: 4450, signal 220838/262620 (executing program) 2022/09/13 22:59:50 fetching corpus: 4500, signal 221545/263340 (executing program) 2022/09/13 22:59:50 fetching corpus: 4550, signal 222339/264092 (executing program) 2022/09/13 22:59:50 fetching corpus: 4600, signal 223056/264789 (executing program) 2022/09/13 22:59:51 fetching corpus: 4650, signal 223648/265487 (executing program) 2022/09/13 22:59:51 fetching corpus: 4700, signal 224354/266210 (executing program) 2022/09/13 22:59:51 fetching corpus: 4750, signal 225066/266891 (executing program) 2022/09/13 22:59:51 fetching corpus: 4800, signal 226156/267673 (executing program) 2022/09/13 22:59:51 fetching corpus: 4850, signal 226636/268248 (executing program) 2022/09/13 22:59:51 fetching corpus: 4900, signal 227369/268882 (executing program) 2022/09/13 22:59:51 fetching corpus: 4950, signal 228181/269561 (executing program) 2022/09/13 22:59:52 fetching corpus: 5000, signal 228740/270142 (executing program) 2022/09/13 22:59:52 fetching corpus: 5050, signal 229425/270763 (executing program) 2022/09/13 22:59:52 fetching corpus: 5100, signal 230136/271366 (executing program) 2022/09/13 22:59:52 fetching corpus: 5150, signal 230629/271931 (executing program) 2022/09/13 22:59:52 fetching corpus: 5200, signal 231042/272437 (executing program) 2022/09/13 22:59:52 fetching corpus: 5250, signal 232552/273205 (executing program) 2022/09/13 22:59:52 fetching corpus: 5300, signal 233241/273759 (executing program) 2022/09/13 22:59:53 fetching corpus: 5350, signal 233816/274269 (executing program) 2022/09/13 22:59:53 fetching corpus: 5400, signal 234460/274823 (executing program) 2022/09/13 22:59:53 fetching corpus: 5450, signal 235116/275357 (executing program) 2022/09/13 22:59:53 fetching corpus: 5500, signal 235431/275796 (executing program) 2022/09/13 22:59:53 fetching corpus: 5550, signal 236487/276414 (executing program) 2022/09/13 22:59:53 fetching corpus: 5600, signal 237434/277001 (executing program) 2022/09/13 22:59:53 fetching corpus: 5650, signal 238351/277545 (executing program) 2022/09/13 22:59:53 fetching corpus: 5700, signal 238744/277951 (executing program) 2022/09/13 22:59:54 fetching corpus: 5750, signal 239274/278411 (executing program) 2022/09/13 22:59:54 fetching corpus: 5800, signal 239927/278863 (executing program) 2022/09/13 22:59:54 fetching corpus: 5850, signal 240539/279284 (executing program) 2022/09/13 22:59:54 fetching corpus: 5900, signal 241089/279705 (executing program) 2022/09/13 22:59:54 fetching corpus: 5950, signal 241651/280146 (executing program) 2022/09/13 22:59:54 fetching corpus: 6000, signal 242099/280529 (executing program) 2022/09/13 22:59:54 fetching corpus: 6050, signal 242763/280957 (executing program) 2022/09/13 22:59:55 fetching corpus: 6100, signal 243481/281404 (executing program) 2022/09/13 22:59:55 fetching corpus: 6150, signal 244175/281815 (executing program) 2022/09/13 22:59:55 fetching corpus: 6200, signal 244912/282246 (executing program) 2022/09/13 22:59:55 fetching corpus: 6250, signal 245384/282599 (executing program) 2022/09/13 22:59:55 fetching corpus: 6300, signal 245930/282986 (executing program) 2022/09/13 22:59:55 fetching corpus: 6350, signal 246477/283321 (executing program) 2022/09/13 22:59:55 fetching corpus: 6400, signal 246852/283672 (executing program) 2022/09/13 22:59:56 fetching corpus: 6450, signal 247288/284048 (executing program) 2022/09/13 22:59:56 fetching corpus: 6500, signal 247739/284356 (executing program) 2022/09/13 22:59:56 fetching corpus: 6550, signal 248252/284704 (executing program) 2022/09/13 22:59:56 fetching corpus: 6600, signal 248572/285001 (executing program) 2022/09/13 22:59:56 fetching corpus: 6650, signal 249105/285307 (executing program) 2022/09/13 22:59:56 fetching corpus: 6700, signal 249570/285623 (executing program) 2022/09/13 22:59:56 fetching corpus: 6750, signal 249923/285903 (executing program) 2022/09/13 22:59:56 fetching corpus: 6800, signal 250305/286204 (executing program) 2022/09/13 22:59:57 fetching corpus: 6850, signal 250957/286502 (executing program) 2022/09/13 22:59:57 fetching corpus: 6900, signal 251306/286798 (executing program) 2022/09/13 22:59:57 fetching corpus: 6950, signal 251883/287234 (executing program) 2022/09/13 22:59:57 fetching corpus: 7000, signal 252307/287512 (executing program) 2022/09/13 22:59:57 fetching corpus: 7050, signal 252943/287775 (executing program) 2022/09/13 22:59:57 fetching corpus: 7100, signal 253312/287775 (executing program) 2022/09/13 22:59:57 fetching corpus: 7150, signal 253863/287784 (executing program) 2022/09/13 22:59:58 fetching corpus: 7200, signal 254418/287838 (executing program) 2022/09/13 22:59:58 fetching corpus: 7250, signal 254815/287845 (executing program) 2022/09/13 22:59:58 fetching corpus: 7300, signal 255389/287889 (executing program) 2022/09/13 22:59:58 fetching corpus: 7350, signal 255823/287898 (executing program) 2022/09/13 22:59:58 fetching corpus: 7400, signal 256611/287899 (executing program) 2022/09/13 22:59:58 fetching corpus: 7450, signal 257303/287908 (executing program) 2022/09/13 22:59:58 fetching corpus: 7500, signal 257769/287915 (executing program) 2022/09/13 22:59:58 fetching corpus: 7550, signal 258426/287951 (executing program) 2022/09/13 22:59:59 fetching corpus: 7600, signal 258841/287954 (executing program) 2022/09/13 22:59:59 fetching corpus: 7650, signal 259251/287957 (executing program) 2022/09/13 22:59:59 fetching corpus: 7700, signal 259589/287972 (executing program) 2022/09/13 22:59:59 fetching corpus: 7750, signal 260084/287997 (executing program) 2022/09/13 22:59:59 fetching corpus: 7800, signal 260744/288030 (executing program) 2022/09/13 22:59:59 fetching corpus: 7850, signal 261756/288059 (executing program) 2022/09/13 22:59:59 fetching corpus: 7900, signal 262133/288062 (executing program) 2022/09/13 23:00:00 fetching corpus: 7950, signal 262520/288107 (executing program) 2022/09/13 23:00:00 fetching corpus: 8000, signal 263084/288113 (executing program) 2022/09/13 23:00:00 fetching corpus: 8050, signal 263561/288118 (executing program) 2022/09/13 23:00:00 fetching corpus: 8100, signal 263859/288119 (executing program) 2022/09/13 23:00:00 fetching corpus: 8150, signal 264485/288124 (executing program) 2022/09/13 23:00:00 fetching corpus: 8200, signal 264881/288134 (executing program) 2022/09/13 23:00:00 fetching corpus: 8250, signal 265439/288139 (executing program) 2022/09/13 23:00:00 fetching corpus: 8300, signal 265708/288139 (executing program) 2022/09/13 23:00:01 fetching corpus: 8350, signal 266161/288141 (executing program) 2022/09/13 23:00:01 fetching corpus: 8400, signal 266589/288166 (executing program) 2022/09/13 23:00:01 fetching corpus: 8450, signal 266903/288170 (executing program) 2022/09/13 23:00:01 fetching corpus: 8500, signal 267260/288177 (executing program) 2022/09/13 23:00:01 fetching corpus: 8550, signal 267966/288188 (executing program) 2022/09/13 23:00:01 fetching corpus: 8600, signal 268692/288195 (executing program) 2022/09/13 23:00:01 fetching corpus: 8650, signal 268900/288206 (executing program) 2022/09/13 23:00:02 fetching corpus: 8700, signal 269548/288218 (executing program) 2022/09/13 23:00:02 fetching corpus: 8750, signal 270122/288220 (executing program) 2022/09/13 23:00:02 fetching corpus: 8800, signal 270443/288226 (executing program) 2022/09/13 23:00:02 fetching corpus: 8850, signal 270794/288246 (executing program) 2022/09/13 23:00:02 fetching corpus: 8900, signal 271214/288253 (executing program) 2022/09/13 23:00:02 fetching corpus: 8950, signal 271620/288255 (executing program) 2022/09/13 23:00:02 fetching corpus: 9000, signal 271988/288258 (executing program) 2022/09/13 23:00:03 fetching corpus: 9050, signal 272309/288284 (executing program) 2022/09/13 23:00:03 fetching corpus: 9100, signal 272979/288294 (executing program) 2022/09/13 23:00:03 fetching corpus: 9150, signal 273376/288330 (executing program) 2022/09/13 23:00:03 fetching corpus: 9200, signal 274113/288364 (executing program) 2022/09/13 23:00:03 fetching corpus: 9250, signal 274595/288375 (executing program) 2022/09/13 23:00:03 fetching corpus: 9300, signal 275125/288376 (executing program) 2022/09/13 23:00:04 fetching corpus: 9350, signal 275474/288382 (executing program) 2022/09/13 23:00:04 fetching corpus: 9355, signal 275568/288396 (executing program) 2022/09/13 23:00:04 fetching corpus: 9355, signal 275568/288396 (executing program) 2022/09/13 23:00:06 starting 8 fuzzer processes 23:00:06 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000001c0)='/{^\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x28c00, 0x0, 0x10}, 0x18) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@ieee802154={0x24, @short}, &(0x7f0000000340)=0x80) sendmsg$sock(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="988af14a7b63", 0x6}, {&(0x7f00000003c0)="2484d0f126cd601240e5b2b8024ba0a88bb0543d3b5f153f0c0c90e84b7f25448c35a305d2c31b41a9a762d93cc6465c2b1f6a883301ddb3667ca2e3453d9e941d6af87fff015c906aecd0bdd9b73d4fd2537322548a9a6bfbec61587813e5eb5c228fd5713b6bf78c2bad3bb6f2a32d15997343f11f788843edfdbb0a", 0x7d}, {&(0x7f0000000440)="fb1d4f4898e3d88fb4997d69b42f9b0912d404386d1a596df135fa572bd06d08e8299d00d3adc3bc9708c43743a86501eac9", 0x32}], 0x3}, 0x4040) bind(0xffffffffffffffff, &(0x7f0000000500)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) r2 = syz_open_dev$vcsa(&(0x7f0000000580), 0x836, 0x20000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000005c0)={0x0, 'sit0\x00', {0x2}, 0x5}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000600)={@dev, @initdev}, &(0x7f0000000640)=0xc) statx(r2, &(0x7f0000000680)='./file1\x00', 0x1500, 0x100, &(0x7f00000006c0)) fstat(r2, &(0x7f00000007c0)) fstat(r1, &(0x7f0000000840)) accept4$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14, 0x80800) getsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000940), &(0x7f0000000980)=0x4) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x4a0001, 0x15c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000a00)=""/82, &(0x7f0000000a80)=0x52) fcntl$dupfd(0xffffffffffffffff, 0xa86821fed89d2df8, r0) 23:00:06 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, 0x0, 0x6, 0x9, 0x0, 0x6032, 0x10000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5e8631c70058aed1, 0x8000, 0x7, 0x48b8, {{0x4e, 0x4, 0x0, 0x7, 0x138, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@loopback, 0x3f}, {@remote, 0x9e}, {@multicast2, 0x26}]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "77c05465f18508"}, {0x1, 0x10, "b63729d5ea4fd6b63d1bcba58266"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x5, [{@broadcast, 0x3f}, {@multicast1}, {@loopback, 0x7}, {@multicast1, 0x1000}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "cf69f633b76f9f1e6e44ad"}, {0x7, 0xa, "c04dfedfb3250445"}]}, @timestamp_prespec={0x44, 0x3c, 0x9e, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x66e}, {@remote, 0x4}, {@remote, 0x7a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @cipso={0x86, 0x3a, 0x66642f271aa6cc9b, [{0x1, 0x10, "31a625ca32e8aafce58a8a5c4cb3"}, {0x0, 0x12, "f2f90ff8fe4b351ad77bcb4917a3e561"}, {0x5, 0x12, "833885c0ec64261c49675d93228f3faf"}]}, @end, @generic={0x83, 0xd, "e7cf0092c9971bcafd753e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x700, 0x8, 0x3, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x41, 0x0, [{0x5, 0xc, "28e8218b98e750dd10e9"}, {0x1, 0xd, "6c53d8c1371147f7aa138f"}, {0x2, 0xc, "b999e7a0eb49db70051d"}, {0x7, 0x10, "9d058553571e3fcc45cca370ef53"}, {0x2, 0x6, "09716984"}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x9, [0xf981, 0x0, 0x8]}, @lsrr={0x83, 0x27, 0x2f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @empty, @local, @multicast2, @private=0xa010101, @loopback, @rand_addr=0x64010101]}]}}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r1 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x9, 0x80140) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x8, 0x80, 0x10000, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x80000001, 0x9}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0xff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x2c, r2}, {0x100000001, 0x100000001, 0x3, 0x1, 0x2, 0x8, 0x5, 0x6}, {0x64d, 0x6, 0x800, 0xe54}, 0xa3f8, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3503, 0x4, 0x1, 0x75, 0x1000, 0x2, 0x7ff}}, 0xe8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x4, 0x10010, r1, 0x100000000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000600)=0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x81, 0x3f, 0x3, 0x8, 0x0, 0x8, 0x4082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000640), 0xe}, 0x6, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x10, 0x0, 0x1000, 0x0, 0x44b}, r3, 0xe, r1, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @local}, &(0x7f0000000780)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000007c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r7 = signalfd4(r4, &(0x7f0000000840)={[0xffffffffffffa868]}, 0x8, 0x80000) dup2(r6, r7) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x802038, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) sendto(r7, &(0x7f00000009c0)="29f70c6f85c4e6687421252414ed8178bbb8c4bc8535f2846ea266dfa1390c29064c54b9956af6d32f", 0x29, 0x4000000, &(0x7f0000000a00)=@rc={0x1f, @any, 0x1}, 0x80) sendmsg$inet6(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="1d349ea05adbf8a02d786081d885b7ba60c00a29af6b3389661e44fc8e58980b31411009bc01f3d37b5ca706169e2288aa4592a6ebf933c1d56db4bae6e3bc6017ea210d850432f79daf26bbabc75bdf2c0219751f3eccf9188092dfce3a7b5947fb51717945c30aac8b", 0x6a}], 0x1, &(0x7f0000000b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x76c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dstopts={{0x88, 0x29, 0x37, {0x73, 0xd, '\x00', [@generic={0x6, 0x69, "3679f1fe6b3ce6c76dafcf7d98044e237bbe41be4a5a227b20c07f5626343bebde8e7a209f128dc5215e5ed77042bc0ee75a9c3f0330bbce4da08e649867b7d44f8a4f8cdcbd307bd2a3e4d4be0af9471b57ac66f4365e0fbfddf69f76ae22053ea5c1556fdfff68aa"}, @pad1]}}}], 0xb8}, 0x40) 23:00:06 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0xfc, 0x12}, 'port1\x00', 0x20, 0x140000, 0x689c, 0x40, 0x4, 0x5, 0x401, 0x0, 0x6, 0x40}) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x1, 0x1}, {0xb3, 0x81}, 0x200, 0x5, 0x1}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x0, 0x0, 0xfff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x0, 0xf1}, 'port1\x00', 0x4, 0x20004, 0x8, 0x900, 0xfffffffd, 0x2, 0xa7e, 0x0, 0x7, 0x76}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f0000000340), 0x2, 0x62000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000380)={0x80000001, 0x3, 0x0, 'queue1\x00', 0x80000001}) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x200001, 0x20) r3 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/snd_hda_intel', 0xa58000, 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r5 = dup2(r1, r1) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f00000004c0)=0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000500)={0x50002004}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000580)={0x8, 0x0, 0x1f, 0x9, 0xbd}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/user\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000600)) 23:00:06 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x15, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x2004c851) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={r0, 0xfffffffffffffffa, 0x1, 0x100000000}) connect$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0xffc0}, 0xe) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x2040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = dup2(r0, r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x22c44b03ebf12f78}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20040040) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x92b, 0x80000000, 0x9, 0x0, 0x1f}, {0x1, 0x8000, 0x100000000, 0x87, 0xbc8e, 0xffffffffffffff65}], ['\x00']}) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2fc, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe87}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7873}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x225}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5ea}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xec5}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b30}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd8, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0xd8}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000d00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800, 0x2}, 0xe) r6 = memfd_secret(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000d40)=0x1) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000d80)=@gcm_256={{0x303}, "cbe9dac22d0616af", "53bf91aef6d5a0c8641081704cf25dcbd43d7d6173a304be13b4b4921d7b3674", "360c709a", "012b3d0ee60bcc87"}, 0x38) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x188, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40da}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x496ec74f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44916f8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13bc152b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x962d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5810ca9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x215a6835}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffe01}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb540db8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e8dba94}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ab48f9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7713}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da9205f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb628}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20bd076b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d8c8064}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67209460}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5137}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9bbcdd9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4224}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61dae227}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76f6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1726}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1daf6928}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x989e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29b1ddc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f7813c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x346}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35765566}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b99b5b1}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x46004}, 0x20000004) 23:00:06 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x504, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000095}, 0x4000044) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x6a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x118, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44010) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0xc008840) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x48500349}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x8c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x120}, 0x1, 0x0, 0x0, 0x8008008}, 0x40000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000104) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000bc0), r9) 23:00:06 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000040)={0x2, 0xffffffffffff1a44, @start={0x0, 0x1, "41fe6f114dc6063f4581fd589df2ed7d6c2084557a6d2f72931585384a886b3fb9d7aaea145ace702f25e4d6a051ad6340dcd74f4e90b58acd20e4fef34cd39437865a4131ddd37cd41c01e9a962cc02eb26b43d8fa7c8b57fad58ae2523bf7d430152ec3a3d42c3aa9b4b0effb7299997808c9afc74741d5a44a57fd05812d92abd13f7f4d3fdc020e7600f26eb744c3d996182b1794012d1bc4e37145dfe53d530f113533584133550f94db76c3441a95250c02350b5fa7f86a543bae73106ba93b0f614a2851ad4899a629c6020166bbaa060d8767d74bc6de69ff5d962b894db0241f0f9b00566003f69435dd4e97a2b1f81973e711b305c18928c4fe9552572ce8cf84ff1f06562c9ffae6bfc0f5454090e63313a5aa2220ce18c3e14ed8b27aa5c5d4ed1a2d0b6212788fe28c84bb4487d8914f10125ed3854e0db4727d8e5ed4ef2d0389bcf6eb39a76203b21efe2b0f438b2c314b45c1f47518e034dc51098a2cc190fa18fdc8e7a2b68439d837e47f9551645a4c76af9c966bc56b9ac11848d7aa588d9bcf9f22c57c6348059f196ecfef6dd5812dd12c793689c69f3f566e4bc8a0e6b14b6b86e1fb4995effb32989df1664839709f49c25bcf5cd2cf4e9eca679d2c575bfcccd4e1e443bc68e1806985fa56860873e621d804287ef3e65ad657b593689f612776370c79e73471c3f9dbbf9b06aaed2cf36a483f16d9da2578262f87d5d2bd5d279dea4e49810b5e479caee7dc92177594b7a97940540cdd3cb86cc2df17c96858d6cbc1713836bf1e77e48641c8bab9d11c8163c15cce9d49f9effb1bceaf21c8acb2709ae2bbed2b315510e6ab66842833aa87c1f5ef3febb3ff20995b1b4bd3a3e0b706d49651210fc8ba3b61515d90396a8fd742d695c53248674caac40991a142096968461d31e2f3056f9a0f8e6782b5a6b07b432c8c9d173b17513c6bc295f6b8890a733f68b853f8e196c64dd91de31dd5f51a063c722da0f1ee217f4534e568c4db88fe6611b972d091a3e9c2561f86ff8da860cd99620c550c197644e91cc7f2151c01726a58d2bf2d72e27d462c49dce655b707521ce2e0064fb8a3b6ae62c44be5ec6a8375d7803026e8fbaaae45e784806ca87ffe4c307638414b96b90024fa6a1a54a48fa899bd81c8b5ef02450f215c55bea9884af645bf4effbe6b29168354e801210ba2f0dd57c7e6c73204d7b7db8b622a405b77133b516ae804afdd1296d572ff599942ba29340fc4f2b979718a6c361e29e5c59d83d9ed72b5ff3b1bdaaf3704425ac6103002075623cf97c84d354a456cbffc4ac3b6e06b34d4a4eb8a86b7b8de5280d945b174a2dad30992849000f9b26ce6ba7e69045d57cb45ba74bf6790cc6a17917ac7eb0aa08039ed246098ce9f45326fc47956259e252608fc68403b6ef32a362882acdebfbbf75", "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"}, [0x0, 0x2, 0x1, 0x8, 0x8000000000000, 0x0, 0x862, 0x5, 0xff, 0x9, 0x1, 0x6, 0x100, 0x9a6, 0x1, 0x1, 0x3, 0xffff, 0x2, 0x1ff, 0x81, 0x5, 0x4, 0x8, 0x20, 0x800, 0x0, 0x1, 0x8, 0x0, 0x100000000, 0x5, 0x0, 0x80, 0x0, 0x4, 0x2, 0x92ab, 0x4, 0x9, 0xffff, 0xfff, 0x1, 0x3b0c86e1, 0x3, 0x6, 0x400, 0x6, 0x2, 0x4, 0x1, 0x2, 0xffffffff, 0xffffffffffffff9f, 0x6, 0x7, 0x10000, 0x1000, 0x2f, 0x2, 0x1f, 0x7, 0x10001, 0xffffffff]}) sendfile(r0, r0, &(0x7f0000000a80)=0x4, 0x95) pwritev(r0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="58fe78bd767aea25f5b469708755328c6b273eb1670e56487ee5c40addae4234f6cd9e5963a023ff8e5c41e5d3beb294560e2fcf31a46a26f058f9f45ba564bc0c5544c82ce7747211a9e62c5cc2c93514f52d092c4690c3039e9a17b8a1e7b19ea685a645821a98432d438ca6ea39c0653ad1d6b047f6258b02f6505aa5df38cd1e04735698beece6d13684a775fa5620ad4bee42f697d33a8890e7a7d22a357f0477184139ad0c41bc45445c8049631fe8bb7e24e53e5348f734f463f4fb876bb7595d1d", 0xc5}, {&(0x7f0000000bc0)="b4d449787acc97793f19fe08abed5860a2a6a01d31dfd5db5a77d3243f3b3da5fb297febb58924ec9acee6196caf10319f7ff3859d75f703b86285c9f4bbbf24f15c713c06a496431b6141509025f60cf3dda9789d754ed56ae0506ddcadb468116d2431f62125181d3166bcb31052a9025de78825f3f16f4926bb2353d0a7b4581597db39ddc9ae5b030829f762e4aef8c3f01a2576fc66858fc496e4c36f1c73643994a1725f69171f49a976610488d084d76638a68ff41136aff6a732cb821f7c875900c696a8c035dfabd29e4c6a5a1ed0c24cbc9d0a8d5d4c7c9405966e910228e945957196788d98867953", 0xee}, {&(0x7f0000000cc0)="4b13ba95beeddcbbceda25b0b06a90a70de84ce60729f2e3f6669cc8af924a8f85926666cebb75e3899323390b57e27751de6af7b35dbe453fc6515cd8f21227ad7245bf61f5cbd189e95c5a57621ff2cc89fcc81dd008b2787d1379cc32e801819609580121587e79992180291b89f9d03729d608ea076db5295ef049defa0d2ad3461ab17921", 0x87}, {&(0x7f0000000d80)="0627cec73c6bb431bb51baf1c1576f7caf95d310c83e6285ba96a1", 0x1b}, {&(0x7f0000000dc0)="d3c07ea4e288da63613478705702688dc4412ca53a0bed02386e1642e4a65637b578ac49996092e41269ab25eb3ae5024106e19b1258bcda1870e3ff6482a2fe05fd0b9347115d13404b2d8416f1b100ba6679c224c8990c2c19e18a2c46103cfe33de0894ec29eccbd8b9a5cf7f53168da58b6da7d6f5929d5d42f2c63ff710e769bc34879b781bc50939dc6125dc232f78d519d1de916a0839863d21e8dcc2bd57078a09e433ce6df1cec508", 0xad}], 0x5, 0x87, 0x2) signalfd4(r0, &(0x7f0000000f00)={[0x7]}, 0x8, 0x800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f40), 0x2c8841, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000f80)) r2 = inotify_init() sendfile(r2, r0, 0x0, 0x5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000fc0)='net/sockstat\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10004003}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x160, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x24008805) preadv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/159, 0x9f}], 0x1, 0xdf44, 0xf73b) r5 = socket$inet6(0xa, 0xa, 0x4) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000001380)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000014c0), 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r6) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001580)={{r2}, 0x0, 0x6, @inherit={0x60, &(0x7f0000001500)={0x0, 0x3, 0x21, 0x5, {0x0, 0x4, 0x2, 0x5, 0x3}, [0x1ff, 0x19f3, 0x1b070000000]}}, @name="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"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002580)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8001) [ 79.126362] audit: type=1400 audit(1663110006.572:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:00:06 executing program 1: fadvise64(0xffffffffffffffff, 0x7ff, 0x8, 0x4) r0 = dup(0xffffffffffffffff) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x1, 0x21c, 0x4800000000000, 0x7}) dup(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x184, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x147, 0x2a, [@random_vendor={0xdd, 0x67, "8a315db10d9bd55fcf3df688ba26262a3b40fbb323df263ea0067e5b5fb602e9670afb032252614168ebb397d18299ae41b356e3f4eeef2552e71b149a46e6bf9bd482833f71c7e4c947aecd6476f808a560d09318b130e445fd579e2aec2ae92e35d77d7dca8c"}, @challenge={0x10, 0x1, 0xe8}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x5b, 0x7, @device_a, 0x1, 0x10001, 0x401}}, @chsw_timing={0x68, 0x4, {0x3811, 0xff81}}, @random_vendor={0xdd, 0x35, "e0314f0055985c6dafb1a9d2064234849ae92c2344e9aa77fea42ad4336eb1760cd0e71976b58b122fc36ad3219c2fec2706308fed"}, @measure_req={0x26, 0x79, {0x4f, 0x1f, 0x4, "e68473e5ca8c08f97fdcbc122832269d6f99977500b288cb9ec51d92a036ed3c971b570488111f081bd13aa8d111c11347e9430b7a2c54ea286c0d3749ce43f31e1cd2cd6029c0ac78ee64d20a0fff18f685f083a7c26bb433f980982a66f30c035bb5cb009c3c3ffd59c7159162607a54d686aefb21"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$9p_unix(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x879020, &(0x7f0000000440)={'trans=unix,', {[{@posixacl}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@cache_mmap}, {@loose}], [{@obj_user}, {@smackfsfloor={'smackfsfloor', 0x3d, '#('}}, {@subj_user={'subj_user', 0x3d, '$#'}}, {@uid_lt}]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'wg1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) fcntl$setflags(r3, 0x2, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) r5 = perf_event_open(&(0x7f00000005c0)={0x5, 0x80, 0x1b, 0x9, 0x9e, 0x6, 0x0, 0x3f, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6, @perf_config_ext={0xdac, 0x200}, 0x344, 0x5, 0x7, 0x7, 0x0, 0x4, 0x4, 0x0, 0x6, 0x0, 0x401}, r4, 0x7, r1, 0x11) r6 = fcntl$dupfd(r5, 0x0, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x8010, r0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800006, 0x10, r0, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000700)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000006c0)}, 0x1e33) 23:00:06 executing program 2: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x101000, 0x110, 0xc}, 0x18) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x624e81, 0x152) openat(r1, &(0x7f0000000180)='./file0\x00', 0x100, 0x70) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) r4 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x200000, 0x1e0) write$binfmt_aout(r1, &(0x7f0000000240)={{0x108, 0xf9, 0x3, 0x91, 0x45, 0x20, 0x1c2, 0x197}, "881bd48e29b84a0507c62318d50404ce33f7629db632b31dec45451918bbc4282b75d9e5d5b8bdfbf0f948c8e8c2e8687f3ddb82dcba3afea8211c3f98a0ef82f6d9954723326c45992250083e379334bbc16f215c44aba01a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x679) setxattr$trusted_overlay_origin(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), &(0x7f0000000940), 0x2, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000980)) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1000) openat(r4, &(0x7f0000000a80)='./file0\x00', 0x400, 0x20) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) close_range(r2, r5, 0x0) r6 = creat(&(0x7f0000000ac0)='./file0\x00', 0x84) openat(r6, &(0x7f0000000b00)='./file0\x00', 0x105000, 0x4) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x80101, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000bc0)={0x24, 0xfffffff9, 0x725, 0x7fffffff, 0x3}) sendfile(r8, r1, &(0x7f0000000c00)=0x4, 0x3) [ 80.349841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.351711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.352343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.353607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.355164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.355859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.356718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.357291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.359613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.362431] Bluetooth: hci1: HCI_REQ-0x0c1a [ 80.369179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.374908] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.376372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.390227] Bluetooth: hci0: HCI_REQ-0x0c1a [ 80.398351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.400175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.401960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.410035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.411485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.413550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.418389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.421478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.428601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.437114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.438345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.444987] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.445021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.447695] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.447812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.452028] Bluetooth: hci4: HCI_REQ-0x0c1a [ 80.468281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.469562] Bluetooth: hci3: HCI_REQ-0x0c1a [ 80.470154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.471201] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.472768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.484492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.500997] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.502269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.511691] Bluetooth: hci5: HCI_REQ-0x0c1a [ 80.549940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.551584] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.556051] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.558599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.560486] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 80.562001] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.565473] Bluetooth: hci7: HCI_REQ-0x0c1a [ 80.592750] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 80.593445] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.596600] Bluetooth: hci6: HCI_REQ-0x0c1a [ 82.428147] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 82.428879] Bluetooth: hci0: command 0x0409 tx timeout [ 82.429217] Bluetooth: hci1: command 0x0409 tx timeout [ 82.491683] Bluetooth: hci3: command 0x0409 tx timeout [ 82.492251] Bluetooth: hci4: command 0x0409 tx timeout [ 82.555813] Bluetooth: hci5: command 0x0409 tx timeout [ 82.619744] Bluetooth: hci6: command 0x0409 tx timeout [ 82.620715] Bluetooth: hci7: command 0x0409 tx timeout [ 84.475766] Bluetooth: hci1: command 0x041b tx timeout [ 84.476309] Bluetooth: hci0: command 0x041b tx timeout [ 84.539684] Bluetooth: hci4: command 0x041b tx timeout [ 84.540146] Bluetooth: hci3: command 0x041b tx timeout [ 84.603727] Bluetooth: hci5: command 0x041b tx timeout [ 84.667933] Bluetooth: hci7: command 0x041b tx timeout [ 84.668586] Bluetooth: hci6: command 0x041b tx timeout [ 85.525949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.534119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.535783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.543182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.554805] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.559244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.570680] Bluetooth: hci2: HCI_REQ-0x0c1a [ 86.523716] Bluetooth: hci0: command 0x040f tx timeout [ 86.524205] Bluetooth: hci1: command 0x040f tx timeout [ 86.587676] Bluetooth: hci3: command 0x040f tx timeout [ 86.588249] Bluetooth: hci4: command 0x040f tx timeout [ 86.651710] Bluetooth: hci5: command 0x040f tx timeout [ 86.715679] Bluetooth: hci6: command 0x040f tx timeout [ 86.716138] Bluetooth: hci7: command 0x040f tx timeout [ 87.611704] Bluetooth: hci2: command 0x0409 tx timeout [ 88.571685] Bluetooth: hci1: command 0x0419 tx timeout [ 88.572273] Bluetooth: hci0: command 0x0419 tx timeout [ 88.635708] Bluetooth: hci4: command 0x0419 tx timeout [ 88.636308] Bluetooth: hci3: command 0x0419 tx timeout [ 88.699725] Bluetooth: hci5: command 0x0419 tx timeout [ 88.763826] Bluetooth: hci7: command 0x0419 tx timeout [ 88.764260] Bluetooth: hci6: command 0x0419 tx timeout [ 89.659723] Bluetooth: hci2: command 0x041b tx timeout [ 91.707701] Bluetooth: hci2: command 0x040f tx timeout [ 93.755754] Bluetooth: hci2: command 0x0419 tx timeout [ 133.635222] audit: type=1400 audit(1663110061.081:7): avc: denied { open } for pid=3720 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 23:01:01 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, 0x0, 0x6, 0x9, 0x0, 0x6032, 0x10000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5e8631c70058aed1, 0x8000, 0x7, 0x48b8, {{0x4e, 0x4, 0x0, 0x7, 0x138, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@loopback, 0x3f}, {@remote, 0x9e}, {@multicast2, 0x26}]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "77c05465f18508"}, {0x1, 0x10, "b63729d5ea4fd6b63d1bcba58266"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x5, [{@broadcast, 0x3f}, {@multicast1}, {@loopback, 0x7}, {@multicast1, 0x1000}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "cf69f633b76f9f1e6e44ad"}, {0x7, 0xa, "c04dfedfb3250445"}]}, @timestamp_prespec={0x44, 0x3c, 0x9e, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x66e}, {@remote, 0x4}, {@remote, 0x7a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @cipso={0x86, 0x3a, 0x66642f271aa6cc9b, [{0x1, 0x10, "31a625ca32e8aafce58a8a5c4cb3"}, {0x0, 0x12, "f2f90ff8fe4b351ad77bcb4917a3e561"}, {0x5, 0x12, "833885c0ec64261c49675d93228f3faf"}]}, @end, @generic={0x83, 0xd, "e7cf0092c9971bcafd753e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x700, 0x8, 0x3, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x41, 0x0, [{0x5, 0xc, "28e8218b98e750dd10e9"}, {0x1, 0xd, "6c53d8c1371147f7aa138f"}, {0x2, 0xc, "b999e7a0eb49db70051d"}, {0x7, 0x10, "9d058553571e3fcc45cca370ef53"}, {0x2, 0x6, "09716984"}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x9, [0xf981, 0x0, 0x8]}, @lsrr={0x83, 0x27, 0x2f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @empty, @local, @multicast2, @private=0xa010101, @loopback, @rand_addr=0x64010101]}]}}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r1 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x9, 0x80140) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x8, 0x80, 0x10000, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x80000001, 0x9}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0xff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x2c, r2}, {0x100000001, 0x100000001, 0x3, 0x1, 0x2, 0x8, 0x5, 0x6}, {0x64d, 0x6, 0x800, 0xe54}, 0xa3f8, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3503, 0x4, 0x1, 0x75, 0x1000, 0x2, 0x7ff}}, 0xe8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x4, 0x10010, r1, 0x100000000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000600)=0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x81, 0x3f, 0x3, 0x8, 0x0, 0x8, 0x4082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000640), 0xe}, 0x6, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x10, 0x0, 0x1000, 0x0, 0x44b}, r3, 0xe, r1, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @local}, &(0x7f0000000780)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000007c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r7 = signalfd4(r4, &(0x7f0000000840)={[0xffffffffffffa868]}, 0x8, 0x80000) dup2(r6, r7) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x802038, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) sendto(r7, &(0x7f00000009c0)="29f70c6f85c4e6687421252414ed8178bbb8c4bc8535f2846ea266dfa1390c29064c54b9956af6d32f", 0x29, 0x4000000, &(0x7f0000000a00)=@rc={0x1f, @any, 0x1}, 0x80) sendmsg$inet6(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="1d349ea05adbf8a02d786081d885b7ba60c00a29af6b3389661e44fc8e58980b31411009bc01f3d37b5ca706169e2288aa4592a6ebf933c1d56db4bae6e3bc6017ea210d850432f79daf26bbabc75bdf2c0219751f3eccf9188092dfce3a7b5947fb51717945c30aac8b", 0x6a}], 0x1, &(0x7f0000000b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x76c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dstopts={{0x88, 0x29, 0x37, {0x73, 0xd, '\x00', [@generic={0x6, 0x69, "3679f1fe6b3ce6c76dafcf7d98044e237bbe41be4a5a227b20c07f5626343bebde8e7a209f128dc5215e5ed77042bc0ee75a9c3f0330bbce4da08e649867b7d44f8a4f8cdcbd307bd2a3e4d4be0af9471b57ac66f4365e0fbfddf69f76ae22053ea5c1556fdfff68aa"}, @pad1]}}}], 0xb8}, 0x40) 23:01:01 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, 0x0, 0x6, 0x9, 0x0, 0x6032, 0x10000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5e8631c70058aed1, 0x8000, 0x7, 0x48b8, {{0x4e, 0x4, 0x0, 0x7, 0x138, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@loopback, 0x3f}, {@remote, 0x9e}, {@multicast2, 0x26}]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "77c05465f18508"}, {0x1, 0x10, "b63729d5ea4fd6b63d1bcba58266"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x5, [{@broadcast, 0x3f}, {@multicast1}, {@loopback, 0x7}, {@multicast1, 0x1000}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "cf69f633b76f9f1e6e44ad"}, {0x7, 0xa, "c04dfedfb3250445"}]}, @timestamp_prespec={0x44, 0x3c, 0x9e, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x66e}, {@remote, 0x4}, {@remote, 0x7a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @cipso={0x86, 0x3a, 0x66642f271aa6cc9b, [{0x1, 0x10, "31a625ca32e8aafce58a8a5c4cb3"}, {0x0, 0x12, "f2f90ff8fe4b351ad77bcb4917a3e561"}, {0x5, 0x12, "833885c0ec64261c49675d93228f3faf"}]}, @end, @generic={0x83, 0xd, "e7cf0092c9971bcafd753e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x700, 0x8, 0x3, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x41, 0x0, [{0x5, 0xc, "28e8218b98e750dd10e9"}, {0x1, 0xd, "6c53d8c1371147f7aa138f"}, {0x2, 0xc, "b999e7a0eb49db70051d"}, {0x7, 0x10, "9d058553571e3fcc45cca370ef53"}, {0x2, 0x6, "09716984"}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x9, [0xf981, 0x0, 0x8]}, @lsrr={0x83, 0x27, 0x2f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @empty, @local, @multicast2, @private=0xa010101, @loopback, @rand_addr=0x64010101]}]}}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r1 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x9, 0x80140) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x8, 0x80, 0x10000, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x80000001, 0x9}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0xff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x2c, r2}, {0x100000001, 0x100000001, 0x3, 0x1, 0x2, 0x8, 0x5, 0x6}, {0x64d, 0x6, 0x800, 0xe54}, 0xa3f8, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3503, 0x4, 0x1, 0x75, 0x1000, 0x2, 0x7ff}}, 0xe8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x4, 0x10010, r1, 0x100000000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000600)=0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x81, 0x3f, 0x3, 0x8, 0x0, 0x8, 0x4082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000640), 0xe}, 0x6, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x10, 0x0, 0x1000, 0x0, 0x44b}, r3, 0xe, r1, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @local}, &(0x7f0000000780)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000007c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r7 = signalfd4(r4, &(0x7f0000000840)={[0xffffffffffffa868]}, 0x8, 0x80000) dup2(r6, r7) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x802038, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) sendto(r7, &(0x7f00000009c0)="29f70c6f85c4e6687421252414ed8178bbb8c4bc8535f2846ea266dfa1390c29064c54b9956af6d32f", 0x29, 0x4000000, &(0x7f0000000a00)=@rc={0x1f, @any, 0x1}, 0x80) sendmsg$inet6(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="1d349ea05adbf8a02d786081d885b7ba60c00a29af6b3389661e44fc8e58980b31411009bc01f3d37b5ca706169e2288aa4592a6ebf933c1d56db4bae6e3bc6017ea210d850432f79daf26bbabc75bdf2c0219751f3eccf9188092dfce3a7b5947fb51717945c30aac8b", 0x6a}], 0x1, &(0x7f0000000b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x76c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dstopts={{0x88, 0x29, 0x37, {0x73, 0xd, '\x00', [@generic={0x6, 0x69, "3679f1fe6b3ce6c76dafcf7d98044e237bbe41be4a5a227b20c07f5626343bebde8e7a209f128dc5215e5ed77042bc0ee75a9c3f0330bbce4da08e649867b7d44f8a4f8cdcbd307bd2a3e4d4be0af9471b57ac66f4365e0fbfddf69f76ae22053ea5c1556fdfff68aa"}, @pad1]}}}], 0xb8}, 0x40) 23:01:01 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, 0x0, 0x6, 0x9, 0x0, 0x6032, 0x10000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5e8631c70058aed1, 0x8000, 0x7, 0x48b8, {{0x4e, 0x4, 0x0, 0x7, 0x138, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@loopback, 0x3f}, {@remote, 0x9e}, {@multicast2, 0x26}]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "77c05465f18508"}, {0x1, 0x10, "b63729d5ea4fd6b63d1bcba58266"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x5, [{@broadcast, 0x3f}, {@multicast1}, {@loopback, 0x7}, {@multicast1, 0x1000}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "cf69f633b76f9f1e6e44ad"}, {0x7, 0xa, "c04dfedfb3250445"}]}, @timestamp_prespec={0x44, 0x3c, 0x9e, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x66e}, {@remote, 0x4}, {@remote, 0x7a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @cipso={0x86, 0x3a, 0x66642f271aa6cc9b, [{0x1, 0x10, "31a625ca32e8aafce58a8a5c4cb3"}, {0x0, 0x12, "f2f90ff8fe4b351ad77bcb4917a3e561"}, {0x5, 0x12, "833885c0ec64261c49675d93228f3faf"}]}, @end, @generic={0x83, 0xd, "e7cf0092c9971bcafd753e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x700, 0x8, 0x3, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x41, 0x0, [{0x5, 0xc, "28e8218b98e750dd10e9"}, {0x1, 0xd, "6c53d8c1371147f7aa138f"}, {0x2, 0xc, "b999e7a0eb49db70051d"}, {0x7, 0x10, "9d058553571e3fcc45cca370ef53"}, {0x2, 0x6, "09716984"}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x9, [0xf981, 0x0, 0x8]}, @lsrr={0x83, 0x27, 0x2f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @empty, @local, @multicast2, @private=0xa010101, @loopback, @rand_addr=0x64010101]}]}}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r1 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x9, 0x80140) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x8, 0x80, 0x10000, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x80000001, 0x9}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0xff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x2c, r2}, {0x100000001, 0x100000001, 0x3, 0x1, 0x2, 0x8, 0x5, 0x6}, {0x64d, 0x6, 0x800, 0xe54}, 0xa3f8, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3503, 0x4, 0x1, 0x75, 0x1000, 0x2, 0x7ff}}, 0xe8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x4, 0x10010, r1, 0x100000000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000600)=0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x81, 0x3f, 0x3, 0x8, 0x0, 0x8, 0x4082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000640), 0xe}, 0x6, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x10, 0x0, 0x1000, 0x0, 0x44b}, r3, 0xe, r1, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @local}, &(0x7f0000000780)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000007c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r7 = signalfd4(r4, &(0x7f0000000840)={[0xffffffffffffa868]}, 0x8, 0x80000) dup2(r6, r7) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x802038, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) sendto(r7, &(0x7f00000009c0)="29f70c6f85c4e6687421252414ed8178bbb8c4bc8535f2846ea266dfa1390c29064c54b9956af6d32f", 0x29, 0x4000000, &(0x7f0000000a00)=@rc={0x1f, @any, 0x1}, 0x80) sendmsg$inet6(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="1d349ea05adbf8a02d786081d885b7ba60c00a29af6b3389661e44fc8e58980b31411009bc01f3d37b5ca706169e2288aa4592a6ebf933c1d56db4bae6e3bc6017ea210d850432f79daf26bbabc75bdf2c0219751f3eccf9188092dfce3a7b5947fb51717945c30aac8b", 0x6a}], 0x1, &(0x7f0000000b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x76c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dstopts={{0x88, 0x29, 0x37, {0x73, 0xd, '\x00', [@generic={0x6, 0x69, "3679f1fe6b3ce6c76dafcf7d98044e237bbe41be4a5a227b20c07f5626343bebde8e7a209f128dc5215e5ed77042bc0ee75a9c3f0330bbce4da08e649867b7d44f8a4f8cdcbd307bd2a3e4d4be0af9471b57ac66f4365e0fbfddf69f76ae22053ea5c1556fdfff68aa"}, @pad1]}}}], 0xb8}, 0x40) 23:01:01 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, 0x0, 0x6, 0x9, 0x0, 0x6032, 0x10000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5e8631c70058aed1, 0x8000, 0x7, 0x48b8, {{0x4e, 0x4, 0x0, 0x7, 0x138, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@loopback, 0x3f}, {@remote, 0x9e}, {@multicast2, 0x26}]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "77c05465f18508"}, {0x1, 0x10, "b63729d5ea4fd6b63d1bcba58266"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x5, [{@broadcast, 0x3f}, {@multicast1}, {@loopback, 0x7}, {@multicast1, 0x1000}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "cf69f633b76f9f1e6e44ad"}, {0x7, 0xa, "c04dfedfb3250445"}]}, @timestamp_prespec={0x44, 0x3c, 0x9e, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x66e}, {@remote, 0x4}, {@remote, 0x7a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @cipso={0x86, 0x3a, 0x66642f271aa6cc9b, [{0x1, 0x10, "31a625ca32e8aafce58a8a5c4cb3"}, {0x0, 0x12, "f2f90ff8fe4b351ad77bcb4917a3e561"}, {0x5, 0x12, "833885c0ec64261c49675d93228f3faf"}]}, @end, @generic={0x83, 0xd, "e7cf0092c9971bcafd753e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x700, 0x8, 0x3, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x41, 0x0, [{0x5, 0xc, "28e8218b98e750dd10e9"}, {0x1, 0xd, "6c53d8c1371147f7aa138f"}, {0x2, 0xc, "b999e7a0eb49db70051d"}, {0x7, 0x10, "9d058553571e3fcc45cca370ef53"}, {0x2, 0x6, "09716984"}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x9, [0xf981, 0x0, 0x8]}, @lsrr={0x83, 0x27, 0x2f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @empty, @local, @multicast2, @private=0xa010101, @loopback, @rand_addr=0x64010101]}]}}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r1 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x9, 0x80140) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x8, 0x80, 0x10000, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x80000001, 0x9}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0xff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x2c, r2}, {0x100000001, 0x100000001, 0x3, 0x1, 0x2, 0x8, 0x5, 0x6}, {0x64d, 0x6, 0x800, 0xe54}, 0xa3f8, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3503, 0x4, 0x1, 0x75, 0x1000, 0x2, 0x7ff}}, 0xe8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x4, 0x10010, r1, 0x100000000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000600)=0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x81, 0x3f, 0x3, 0x8, 0x0, 0x8, 0x4082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000640), 0xe}, 0x6, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x10, 0x0, 0x1000, 0x0, 0x44b}, r3, 0xe, r1, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @local}, &(0x7f0000000780)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000007c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r7 = signalfd4(r4, &(0x7f0000000840)={[0xffffffffffffa868]}, 0x8, 0x80000) dup2(r6, r7) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x802038, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) sendto(r7, &(0x7f00000009c0)="29f70c6f85c4e6687421252414ed8178bbb8c4bc8535f2846ea266dfa1390c29064c54b9956af6d32f", 0x29, 0x4000000, &(0x7f0000000a00)=@rc={0x1f, @any, 0x1}, 0x80) 23:01:01 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, 0x0, 0x6, 0x9, 0x0, 0x6032, 0x10000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5e8631c70058aed1, 0x8000, 0x7, 0x48b8, {{0x4e, 0x4, 0x0, 0x7, 0x138, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@loopback, 0x3f}, {@remote, 0x9e}, {@multicast2, 0x26}]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "77c05465f18508"}, {0x1, 0x10, "b63729d5ea4fd6b63d1bcba58266"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x5, [{@broadcast, 0x3f}, {@multicast1}, {@loopback, 0x7}, {@multicast1, 0x1000}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "cf69f633b76f9f1e6e44ad"}, {0x7, 0xa, "c04dfedfb3250445"}]}, @timestamp_prespec={0x44, 0x3c, 0x9e, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x66e}, {@remote, 0x4}, {@remote, 0x7a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @cipso={0x86, 0x3a, 0x66642f271aa6cc9b, [{0x1, 0x10, "31a625ca32e8aafce58a8a5c4cb3"}, {0x0, 0x12, "f2f90ff8fe4b351ad77bcb4917a3e561"}, {0x5, 0x12, "833885c0ec64261c49675d93228f3faf"}]}, @end, @generic={0x83, 0xd, "e7cf0092c9971bcafd753e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x700, 0x8, 0x3, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x41, 0x0, [{0x5, 0xc, "28e8218b98e750dd10e9"}, {0x1, 0xd, "6c53d8c1371147f7aa138f"}, {0x2, 0xc, "b999e7a0eb49db70051d"}, {0x7, 0x10, "9d058553571e3fcc45cca370ef53"}, {0x2, 0x6, "09716984"}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x9, [0xf981, 0x0, 0x8]}, @lsrr={0x83, 0x27, 0x2f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @empty, @local, @multicast2, @private=0xa010101, @loopback, @rand_addr=0x64010101]}]}}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r1 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x9, 0x80140) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x8, 0x80, 0x10000, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x80000001, 0x9}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0xff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x2c, r2}, {0x100000001, 0x100000001, 0x3, 0x1, 0x2, 0x8, 0x5, 0x6}, {0x64d, 0x6, 0x800, 0xe54}, 0xa3f8, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3503, 0x4, 0x1, 0x75, 0x1000, 0x2, 0x7ff}}, 0xe8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x4, 0x10010, r1, 0x100000000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000600)=0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x81, 0x3f, 0x3, 0x8, 0x0, 0x8, 0x4082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000640), 0xe}, 0x6, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x10, 0x0, 0x1000, 0x0, 0x44b}, r3, 0xe, r1, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @local}, &(0x7f0000000780)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000007c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r7 = signalfd4(r4, &(0x7f0000000840)={[0xffffffffffffa868]}, 0x8, 0x80000) dup2(r6, r7) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x802038, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) 23:01:01 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x200, 0xb0) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20c0, 0x141) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x100c0, 0xc0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x40091, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="8751252b39c0f0a3727a0077010000000000000010000000", @ANYRES32=r2, @ANYBLOB="593000606000000000000000000068f55187"]) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x8, 0x0, 0x8000000) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x3140001, &(0x7f00000003c0)=ANY=[@ANYBLOB='size=6p7,hash,smackfs|oot=,subj_user=]{@,\x00']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r1, 0x0, 0xfffffdef) 23:01:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x24203, 0x1c8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x11, r2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) 23:01:01 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1, 0x0, 0x6, 0x9, 0x0, 0x6032, 0x10000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5e8631c70058aed1, 0x8000, 0x7, 0x48b8, {{0x4e, 0x4, 0x0, 0x7, 0x138, 0x67, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x3, [{@loopback, 0x3f}, {@remote, 0x9e}, {@multicast2, 0x26}]}, @end, @cipso={0x86, 0x21, 0x3, [{0x5, 0x9, "77c05465f18508"}, {0x1, 0x10, "b63729d5ea4fd6b63d1bcba58266"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x5, [{@broadcast, 0x3f}, {@multicast1}, {@loopback, 0x7}, {@multicast1, 0x1000}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0xd, "cf69f633b76f9f1e6e44ad"}, {0x7, 0xa, "c04dfedfb3250445"}]}, @timestamp_prespec={0x44, 0x3c, 0x9e, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x66e}, {@remote, 0x4}, {@remote, 0x7a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @lsrr={0x83, 0x1f, 0xb4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @cipso={0x86, 0x3a, 0x66642f271aa6cc9b, [{0x1, 0x10, "31a625ca32e8aafce58a8a5c4cb3"}, {0x0, 0x12, "f2f90ff8fe4b351ad77bcb4917a3e561"}, {0x5, 0x12, "833885c0ec64261c49675d93228f3faf"}]}, @end, @generic={0x83, 0xd, "e7cf0092c9971bcafd753e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x700, 0x8, 0x3, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x41, 0x0, [{0x5, 0xc, "28e8218b98e750dd10e9"}, {0x1, 0xd, "6c53d8c1371147f7aa138f"}, {0x2, 0xc, "b999e7a0eb49db70051d"}, {0x7, 0x10, "9d058553571e3fcc45cca370ef53"}, {0x2, 0x6, "09716984"}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x9, [0xf981, 0x0, 0x8]}, @lsrr={0x83, 0x27, 0x2f, [@remote, @dev={0xac, 0x14, 0x14, 0x20}, @empty, @empty, @local, @multicast2, @private=0xa010101, @loopback, @rand_addr=0x64010101]}]}}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r1 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x9, 0x80140) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x8, 0x80, 0x10000, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x80000001, 0x9}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0xff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x2c, r2}, {0x100000001, 0x100000001, 0x3, 0x1, 0x2, 0x8, 0x5, 0x6}, {0x64d, 0x6, 0x800, 0xe54}, 0xa3f8, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3503, 0x4, 0x1, 0x75, 0x1000, 0x2, 0x7ff}}, 0xe8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000005c0)) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x4, 0x10010, r1, 0x100000000) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000600)=0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000700)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x81, 0x3f, 0x3, 0x8, 0x0, 0x8, 0x4082, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000640), 0xe}, 0x6, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x10, 0x0, 0x1000, 0x0, 0x44b}, r3, 0xe, r1, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @local}, &(0x7f0000000780)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000007c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r7 = signalfd4(r4, &(0x7f0000000840)={[0xffffffffffffa868]}, 0x8, 0x80000) dup2(r6, r7) [ 134.392492] loop1: detected capacity change from 0 to 40 [ 134.444603] audit: type=1400 audit(1663110061.890:8): avc: denied { kernel } for pid=3782 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.477638] ------------[ cut here ]------------ [ 134.477659] [ 134.477662] ====================================================== [ 134.477666] WARNING: possible circular locking dependency detected [ 134.477670] 6.0.0-rc5-next-20220913 #1 Not tainted [ 134.477677] ------------------------------------------------------ [ 134.477680] syz-executor.1/3784 is trying to acquire lock: [ 134.477686] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 134.477723] [ 134.477723] but task is already holding lock: [ 134.477726] ffff88800d4d7020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.477754] [ 134.477754] which lock already depends on the new lock. [ 134.477754] [ 134.477757] [ 134.477757] the existing dependency chain (in reverse order) is: [ 134.477760] [ 134.477760] -> #3 (&ctx->lock){....}-{2:2}: [ 134.477774] _raw_spin_lock+0x2a/0x40 [ 134.477792] __perf_event_task_sched_out+0x53b/0x18d0 [ 134.477804] __schedule+0xedd/0x2470 [ 134.477814] schedule+0xda/0x1b0 [ 134.477824] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.477844] syscall_exit_to_user_mode+0x19/0x40 [ 134.477863] do_syscall_64+0x48/0x90 [ 134.477877] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.477894] [ 134.477894] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 134.477908] _raw_spin_lock_nested+0x30/0x40 [ 134.477923] raw_spin_rq_lock_nested+0x1e/0x30 [ 134.477936] task_fork_fair+0x63/0x4d0 [ 134.477953] sched_cgroup_fork+0x3d0/0x540 [ 134.477967] copy_process+0x3f9e/0x6df0 [ 134.477978] kernel_clone+0xe7/0x890 [ 134.477987] user_mode_thread+0xad/0xf0 [ 134.477997] rest_init+0x24/0x250 [ 134.478014] arch_call_rest_init+0xf/0x14 [ 134.478033] start_kernel+0x4c1/0x4e6 [ 134.478051] secondary_startup_64_no_verify+0xe0/0xeb [ 134.478065] [ 134.478065] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 134.478078] _raw_spin_lock_irqsave+0x39/0x60 [ 134.478093] try_to_wake_up+0xab/0x1920 [ 134.478107] up+0x75/0xb0 [ 134.478118] __up_console_sem+0x6e/0x80 [ 134.478134] console_unlock+0x46a/0x590 [ 134.478151] vt_ioctl+0x2822/0x2ca0 [ 134.478163] tty_ioctl+0x7c4/0x1700 [ 134.478174] __x64_sys_ioctl+0x19a/0x210 [ 134.478190] do_syscall_64+0x3b/0x90 [ 134.478203] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.478220] [ 134.478220] -> #0 ((console_sem).lock){....}-{2:2}: [ 134.478233] __lock_acquire+0x2a02/0x5e70 [ 134.478250] lock_acquire+0x1a2/0x530 [ 134.478266] _raw_spin_lock_irqsave+0x39/0x60 [ 134.478281] down_trylock+0xe/0x70 [ 134.478293] __down_trylock_console_sem+0x3b/0xd0 [ 134.478310] vprintk_emit+0x16b/0x560 [ 134.478326] vprintk+0x84/0xa0 [ 134.478343] _printk+0xba/0xf1 [ 134.478361] report_bug.cold+0x72/0xab [ 134.478373] handle_bug+0x3c/0x70 [ 134.478385] exc_invalid_op+0x14/0x50 [ 134.478399] asm_exc_invalid_op+0x16/0x20 [ 134.478415] group_sched_out.part.0+0x2c7/0x460 [ 134.478440] ctx_sched_out+0x8f1/0xc10 [ 134.478450] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.478462] __schedule+0xedd/0x2470 [ 134.478472] schedule+0xda/0x1b0 [ 134.478481] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.478500] syscall_exit_to_user_mode+0x19/0x40 [ 134.478517] do_syscall_64+0x48/0x90 [ 134.478530] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.478547] [ 134.478547] other info that might help us debug this: [ 134.478547] [ 134.478550] Chain exists of: [ 134.478550] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 134.478550] [ 134.478565] Possible unsafe locking scenario: [ 134.478565] [ 134.478567] CPU0 CPU1 [ 134.478570] ---- ---- [ 134.478572] lock(&ctx->lock); [ 134.478578] lock(&rq->__lock); [ 134.478584] lock(&ctx->lock); [ 134.478590] lock((console_sem).lock); [ 134.478596] [ 134.478596] *** DEADLOCK *** [ 134.478596] [ 134.478598] 2 locks held by syz-executor.1/3784: [ 134.478605] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 134.478630] #1: ffff88800d4d7020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.478658] [ 134.478658] stack backtrace: [ 134.478661] CPU: 0 PID: 3784 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220913 #1 [ 134.478674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.478682] Call Trace: [ 134.478685] [ 134.478690] dump_stack_lvl+0x8b/0xb3 [ 134.478704] check_noncircular+0x263/0x2e0 [ 134.478721] ? format_decode+0x26c/0xb50 [ 134.478737] ? print_circular_bug+0x450/0x450 [ 134.478754] ? enable_ptr_key_workfn+0x20/0x20 [ 134.478768] ? __lockdep_reset_lock+0x180/0x180 [ 134.478785] ? format_decode+0x26c/0xb50 [ 134.478800] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 134.478818] __lock_acquire+0x2a02/0x5e70 [ 134.478840] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.478863] lock_acquire+0x1a2/0x530 [ 134.478880] ? down_trylock+0xe/0x70 [ 134.478894] ? rcu_read_unlock+0x40/0x40 [ 134.478912] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.478933] ? vprintk+0x84/0xa0 [ 134.478952] _raw_spin_lock_irqsave+0x39/0x60 [ 134.478967] ? down_trylock+0xe/0x70 [ 134.478981] down_trylock+0xe/0x70 [ 134.478995] ? vprintk+0x84/0xa0 [ 134.479012] __down_trylock_console_sem+0x3b/0xd0 [ 134.479030] vprintk_emit+0x16b/0x560 [ 134.479047] ? lock_downgrade+0x6d0/0x6d0 [ 134.479066] vprintk+0x84/0xa0 [ 134.479084] _printk+0xba/0xf1 [ 134.479102] ? record_print_text.cold+0x16/0x16 [ 134.479122] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 134.479136] ? lock_downgrade+0x6d0/0x6d0 [ 134.479154] ? report_bug.cold+0x66/0xab [ 134.479168] ? group_sched_out.part.0+0x2c7/0x460 [ 134.479179] report_bug.cold+0x72/0xab [ 134.479194] handle_bug+0x3c/0x70 [ 134.479208] exc_invalid_op+0x14/0x50 [ 134.479222] asm_exc_invalid_op+0x16/0x20 [ 134.479240] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.479253] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.479264] RSP: 0018:ffff888042c57c48 EFLAGS: 00010006 [ 134.479274] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.479281] RDX: ffff888042c73580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.479289] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 134.479297] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d4d7000 [ 134.479304] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.479316] ? group_sched_out.part.0+0x2c7/0x460 [ 134.479329] ? group_sched_out.part.0+0x2c7/0x460 [ 134.479341] ctx_sched_out+0x8f1/0xc10 [ 134.479354] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.479369] ? lock_is_held_type+0xd7/0x130 [ 134.479388] ? __perf_cgroup_move+0x160/0x160 [ 134.479399] ? set_next_entity+0x304/0x550 [ 134.479417] ? update_curr+0x267/0x740 [ 134.479436] ? lock_is_held_type+0xd7/0x130 [ 134.479455] __schedule+0xedd/0x2470 [ 134.479468] ? io_schedule_timeout+0x150/0x150 [ 134.479480] ? __x64_sys_futex_time32+0x480/0x480 [ 134.479494] schedule+0xda/0x1b0 [ 134.479505] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.479526] syscall_exit_to_user_mode+0x19/0x40 [ 134.479544] do_syscall_64+0x48/0x90 [ 134.479559] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.479576] RIP: 0033:0x7ff2337f7b19 [ 134.479585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.479596] RSP: 002b:00007ff230d6d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.479607] RAX: 0000000000000001 RBX: 00007ff23390af68 RCX: 00007ff2337f7b19 [ 134.479614] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff23390af6c [ 134.479622] RBP: 00007ff23390af60 R08: 000000000000000e R09: 0000000000000000 [ 134.479629] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ff23390af6c [ 134.479636] R13: 00007ffe676dbbff R14: 00007ff230d6d300 R15: 0000000000022000 [ 134.479649] [ 134.537795] WARNING: CPU: 0 PID: 3784 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 134.538495] Modules linked in: [ 134.538739] CPU: 0 PID: 3784 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220913 #1 [ 134.539344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.540178] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.540587] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.541935] RSP: 0018:ffff888042c57c48 EFLAGS: 00010006 [ 134.542341] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.542883] RDX: ffff888042c73580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.543417] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 134.543955] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d4d7000 [ 134.544488] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.545016] FS: 00007ff230d6d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 134.545617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.546051] CR2: 00005558cb0b2ae0 CR3: 0000000041d46000 CR4: 0000000000350ef0 [ 134.546596] Call Trace: [ 134.546792] [ 134.546967] ctx_sched_out+0x8f1/0xc10 [ 134.547267] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.547660] ? lock_is_held_type+0xd7/0x130 [ 134.547994] ? __perf_cgroup_move+0x160/0x160 [ 134.548331] ? set_next_entity+0x304/0x550 [ 134.548660] ? update_curr+0x267/0x740 [ 134.548965] ? lock_is_held_type+0xd7/0x130 [ 134.549297] __schedule+0xedd/0x2470 [ 134.549587] ? io_schedule_timeout+0x150/0x150 [ 134.549934] ? __x64_sys_futex_time32+0x480/0x480 [ 134.550301] schedule+0xda/0x1b0 [ 134.550563] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.550944] syscall_exit_to_user_mode+0x19/0x40 [ 134.551307] do_syscall_64+0x48/0x90 [ 134.551599] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.551999] RIP: 0033:0x7ff2337f7b19 [ 134.552285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.553645] RSP: 002b:00007ff230d6d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.554212] RAX: 0000000000000001 RBX: 00007ff23390af68 RCX: 00007ff2337f7b19 [ 134.554749] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff23390af6c [ 134.555286] RBP: 00007ff23390af60 R08: 000000000000000e R09: 0000000000000000 [ 134.555823] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ff23390af6c [ 134.556353] R13: 00007ffe676dbbff R14: 00007ff230d6d300 R15: 0000000000022000 [ 134.556893] [ 134.557073] irq event stamp: 3728 [ 134.557330] hardirqs last enabled at (3727): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 134.558045] hardirqs last disabled at (3728): [] __schedule+0x1225/0x2470 [ 134.558672] softirqs last enabled at (3364): [] __irq_exit_rcu+0x11b/0x180 [ 134.559318] softirqs last disabled at (3355): [] __irq_exit_rcu+0x11b/0x180 [ 134.559962] ---[ end trace 0000000000000000 ]--- [ 134.787560] syz-executor.1: attempt to access beyond end of device [ 134.787560] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 134.788579] Buffer I/O error on dev loop1, logical block 10, lost async page write VM DIAGNOSIS: 23:01:02 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888042c57698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff230d6d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005558cb0b2ae0 CR3=0000000041d46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000003c2c0 RBX=ffff88806cf3c2c0 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84de5ba0 RDI=ffffffff84de5be0 RBP=ffff888007c4f780 RSP=ffff888042cf7b50 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000200 R14=ffff88801bf9d040 R15=000000000003c2e0 RIP=ffffffff84242842 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f88799e0540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8879b7b4a1 CR3=000000004287c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM01=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 2d646c6f2074736f 0065736100006266 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000