Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15519' (ECDSA) to the list of known hosts. 2022/10/04 00:37:50 fuzzer started 2022/10/04 00:37:50 dialing manager at localhost:35095 syzkaller login: [ 36.267206] cgroup: Unknown subsys name 'net' [ 36.355099] cgroup: Unknown subsys name 'rlimit' 2022/10/04 00:38:03 syscalls: 2215 2022/10/04 00:38:03 code coverage: enabled 2022/10/04 00:38:03 comparison tracing: enabled 2022/10/04 00:38:03 extra coverage: enabled 2022/10/04 00:38:03 setuid sandbox: enabled 2022/10/04 00:38:03 namespace sandbox: enabled 2022/10/04 00:38:03 Android sandbox: enabled 2022/10/04 00:38:03 fault injection: enabled 2022/10/04 00:38:03 leak checking: enabled 2022/10/04 00:38:03 net packet injection: enabled 2022/10/04 00:38:03 net device setup: enabled 2022/10/04 00:38:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 00:38:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 00:38:03 USB emulation: enabled 2022/10/04 00:38:03 hci packet injection: enabled 2022/10/04 00:38:03 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 00:38:03 802.15.4 emulation: enabled 2022/10/04 00:38:03 fetching corpus: 50, signal 19483/21367 (executing program) 2022/10/04 00:38:03 fetching corpus: 100, signal 28440/32044 (executing program) 2022/10/04 00:38:03 fetching corpus: 150, signal 38830/44051 (executing program) 2022/10/04 00:38:03 fetching corpus: 200, signal 48451/55184 (executing program) 2022/10/04 00:38:04 fetching corpus: 250, signal 56263/64461 (executing program) 2022/10/04 00:38:04 fetching corpus: 300, signal 60892/70586 (executing program) 2022/10/04 00:38:04 fetching corpus: 350, signal 64514/75632 (executing program) 2022/10/04 00:38:04 fetching corpus: 400, signal 70505/82908 (executing program) 2022/10/04 00:38:04 fetching corpus: 450, signal 72259/86113 (executing program) 2022/10/04 00:38:04 fetching corpus: 500, signal 74191/89420 (executing program) 2022/10/04 00:38:04 fetching corpus: 550, signal 77713/94170 (executing program) 2022/10/04 00:38:04 fetching corpus: 600, signal 80559/98294 (executing program) 2022/10/04 00:38:04 fetching corpus: 650, signal 84235/103187 (executing program) 2022/10/04 00:38:05 fetching corpus: 700, signal 86549/106711 (executing program) 2022/10/04 00:38:05 fetching corpus: 750, signal 87960/109476 (executing program) 2022/10/04 00:38:05 fetching corpus: 800, signal 91392/113991 (executing program) 2022/10/04 00:38:05 fetching corpus: 850, signal 93597/117390 (executing program) 2022/10/04 00:38:05 fetching corpus: 900, signal 95471/120480 (executing program) 2022/10/04 00:38:05 fetching corpus: 950, signal 97333/123476 (executing program) 2022/10/04 00:38:05 fetching corpus: 1000, signal 100601/127681 (executing program) 2022/10/04 00:38:05 fetching corpus: 1050, signal 103898/131868 (executing program) 2022/10/04 00:38:06 fetching corpus: 1100, signal 108173/136903 (executing program) 2022/10/04 00:38:06 fetching corpus: 1150, signal 111549/141153 (executing program) 2022/10/04 00:38:06 fetching corpus: 1200, signal 112599/143326 (executing program) 2022/10/04 00:38:06 fetching corpus: 1250, signal 113891/145691 (executing program) 2022/10/04 00:38:06 fetching corpus: 1300, signal 115425/148247 (executing program) 2022/10/04 00:38:06 fetching corpus: 1350, signal 117309/151021 (executing program) 2022/10/04 00:38:06 fetching corpus: 1400, signal 119646/154192 (executing program) 2022/10/04 00:38:06 fetching corpus: 1450, signal 120797/156313 (executing program) 2022/10/04 00:38:06 fetching corpus: 1500, signal 121866/158401 (executing program) 2022/10/04 00:38:07 fetching corpus: 1550, signal 124115/161441 (executing program) 2022/10/04 00:38:07 fetching corpus: 1600, signal 125130/163466 (executing program) 2022/10/04 00:38:07 fetching corpus: 1650, signal 125987/165323 (executing program) 2022/10/04 00:38:07 fetching corpus: 1700, signal 127177/167468 (executing program) 2022/10/04 00:38:07 fetching corpus: 1750, signal 128597/169766 (executing program) 2022/10/04 00:38:07 fetching corpus: 1800, signal 130764/172668 (executing program) 2022/10/04 00:38:07 fetching corpus: 1850, signal 132091/174833 (executing program) 2022/10/04 00:38:07 fetching corpus: 1900, signal 134998/178150 (executing program) 2022/10/04 00:38:07 fetching corpus: 1950, signal 136127/180110 (executing program) 2022/10/04 00:38:08 fetching corpus: 2000, signal 137332/182195 (executing program) 2022/10/04 00:38:08 fetching corpus: 2050, signal 138173/183918 (executing program) 2022/10/04 00:38:08 fetching corpus: 2100, signal 138933/185627 (executing program) 2022/10/04 00:38:08 fetching corpus: 2150, signal 139856/187387 (executing program) 2022/10/04 00:38:08 fetching corpus: 2200, signal 141498/189692 (executing program) 2022/10/04 00:38:08 fetching corpus: 2250, signal 143444/192142 (executing program) 2022/10/04 00:38:08 fetching corpus: 2300, signal 145665/194779 (executing program) 2022/10/04 00:38:09 fetching corpus: 2350, signal 146880/196654 (executing program) 2022/10/04 00:38:09 fetching corpus: 2400, signal 147793/198403 (executing program) 2022/10/04 00:38:09 fetching corpus: 2450, signal 149787/200822 (executing program) 2022/10/04 00:38:09 fetching corpus: 2500, signal 150163/202109 (executing program) 2022/10/04 00:38:09 fetching corpus: 2550, signal 151443/204010 (executing program) 2022/10/04 00:38:09 fetching corpus: 2600, signal 151978/205460 (executing program) 2022/10/04 00:38:09 fetching corpus: 2650, signal 152895/207101 (executing program) 2022/10/04 00:38:09 fetching corpus: 2700, signal 153640/208679 (executing program) 2022/10/04 00:38:09 fetching corpus: 2750, signal 154471/210284 (executing program) 2022/10/04 00:38:09 fetching corpus: 2800, signal 155398/211944 (executing program) 2022/10/04 00:38:10 fetching corpus: 2850, signal 156184/213407 (executing program) 2022/10/04 00:38:10 fetching corpus: 2900, signal 157314/215144 (executing program) 2022/10/04 00:38:10 fetching corpus: 2950, signal 158229/216679 (executing program) 2022/10/04 00:38:10 fetching corpus: 3000, signal 159287/218307 (executing program) 2022/10/04 00:38:10 fetching corpus: 3050, signal 160700/220160 (executing program) 2022/10/04 00:38:10 fetching corpus: 3100, signal 161448/221558 (executing program) 2022/10/04 00:38:10 fetching corpus: 3150, signal 162623/223263 (executing program) 2022/10/04 00:38:11 fetching corpus: 3200, signal 163784/224933 (executing program) 2022/10/04 00:38:11 fetching corpus: 3250, signal 164854/226509 (executing program) 2022/10/04 00:38:11 fetching corpus: 3300, signal 165964/228115 (executing program) 2022/10/04 00:38:11 fetching corpus: 3350, signal 166769/229578 (executing program) 2022/10/04 00:38:11 fetching corpus: 3400, signal 167585/231019 (executing program) 2022/10/04 00:38:11 fetching corpus: 3450, signal 169099/232844 (executing program) 2022/10/04 00:38:11 fetching corpus: 3500, signal 170403/234447 (executing program) 2022/10/04 00:38:11 fetching corpus: 3550, signal 171262/235829 (executing program) 2022/10/04 00:38:12 fetching corpus: 3600, signal 172038/237146 (executing program) 2022/10/04 00:38:12 fetching corpus: 3650, signal 173401/238753 (executing program) 2022/10/04 00:38:12 fetching corpus: 3700, signal 174141/240063 (executing program) 2022/10/04 00:38:12 fetching corpus: 3750, signal 175453/241621 (executing program) 2022/10/04 00:38:12 fetching corpus: 3800, signal 176019/242759 (executing program) 2022/10/04 00:38:12 fetching corpus: 3850, signal 176849/244055 (executing program) 2022/10/04 00:38:12 fetching corpus: 3900, signal 178024/245493 (executing program) 2022/10/04 00:38:12 fetching corpus: 3950, signal 178664/246657 (executing program) 2022/10/04 00:38:13 fetching corpus: 4000, signal 179474/247911 (executing program) 2022/10/04 00:38:13 fetching corpus: 4050, signal 180537/249277 (executing program) 2022/10/04 00:38:13 fetching corpus: 4100, signal 181335/250527 (executing program) 2022/10/04 00:38:13 fetching corpus: 4150, signal 181781/251626 (executing program) 2022/10/04 00:38:13 fetching corpus: 4200, signal 182667/252833 (executing program) 2022/10/04 00:38:13 fetching corpus: 4250, signal 183451/254029 (executing program) 2022/10/04 00:38:13 fetching corpus: 4300, signal 184100/255121 (executing program) 2022/10/04 00:38:13 fetching corpus: 4350, signal 184544/256174 (executing program) 2022/10/04 00:38:14 fetching corpus: 4400, signal 185444/257414 (executing program) 2022/10/04 00:38:14 fetching corpus: 4450, signal 186271/258615 (executing program) 2022/10/04 00:38:14 fetching corpus: 4500, signal 186914/259665 (executing program) 2022/10/04 00:38:14 fetching corpus: 4550, signal 187966/260964 (executing program) 2022/10/04 00:38:14 fetching corpus: 4600, signal 189452/262366 (executing program) 2022/10/04 00:38:14 fetching corpus: 4650, signal 190021/263417 (executing program) 2022/10/04 00:38:14 fetching corpus: 4700, signal 190667/264472 (executing program) 2022/10/04 00:38:14 fetching corpus: 4750, signal 191199/265479 (executing program) 2022/10/04 00:38:15 fetching corpus: 4800, signal 191670/266416 (executing program) 2022/10/04 00:38:15 fetching corpus: 4850, signal 192171/267383 (executing program) 2022/10/04 00:38:15 fetching corpus: 4900, signal 193108/268608 (executing program) 2022/10/04 00:38:15 fetching corpus: 4950, signal 193817/269640 (executing program) 2022/10/04 00:38:15 fetching corpus: 5000, signal 194784/270711 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/271491 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/272235 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/273014 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/273801 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/274574 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/275312 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/276070 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/276836 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/277602 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/278353 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/279090 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/279818 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/280639 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/281415 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/282142 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/282899 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/283637 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/284395 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/285193 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/285972 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/286731 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/287479 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/288225 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/288993 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/289738 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/290504 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/291250 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/291971 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/292733 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/293492 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/294256 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/295015 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/295787 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/296527 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/297265 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/298037 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/298803 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/299541 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/300340 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/301078 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/301812 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/302596 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/303346 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/304097 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/304865 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/305621 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/306425 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/307168 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/307919 (executing program) 2022/10/04 00:38:15 fetching corpus: 5001, signal 194785/308657 (executing program) 2022/10/04 00:38:16 fetching corpus: 5001, signal 194785/309414 (executing program) 2022/10/04 00:38:16 fetching corpus: 5001, signal 194785/310185 (executing program) 2022/10/04 00:38:16 fetching corpus: 5001, signal 194785/310975 (executing program) 2022/10/04 00:38:16 fetching corpus: 5001, signal 194785/311696 (executing program) 2022/10/04 00:38:16 fetching corpus: 5001, signal 194785/312074 (executing program) 2022/10/04 00:38:16 fetching corpus: 5001, signal 194785/312074 (executing program) 2022/10/04 00:38:18 starting 8 fuzzer processes 00:38:18 executing program 0: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x10001, 0x284000) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x62, 0x0, 0x4, "b180f11071da5b017d3e8f9aed71e72f", "cb05b8b656b9b2c80dae5d924b54e51f50caa29ce107287c2c2de094b024163665d1cd427aca089019fe291e6b4c9dd87704bc97a42dc75e94cf04027725ac9bccb93fa560449589d7c42e63a4"}, 0x62, 0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) sendfile(r1, r0, 0x0, 0x1ff) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000008c0), &(0x7f0000000900)=0xc) r2 = dup2(0xffffffffffffffff, r1) recvmsg$unix(r2, &(0x7f0000000fc0)={&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f00000009c0)=""/148, 0x94}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000b00)=""/34, 0x22}, {&(0x7f0000000b40)=""/251, 0xfb}, {&(0x7f0000000c40)=""/37, 0x25}, {&(0x7f0000000c80)=""/113, 0x71}, {&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f0000000d80)=""/181, 0xb5}], 0x8, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f0000001000)={'ah\x00'}, &(0x7f0000001040)=0x1e) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000001080)=0x8) r9 = open$dir(&(0x7f00000010c0)='./file0\x00', 0x20900, 0x1c5) ioctl$AUTOFS_IOC_SETTIMEOUT(r9, 0x80049367, &(0x7f0000001100)=0xd7f) r10 = open(&(0x7f0000001140)='./file0\x00', 0x4000, 0x1) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000001180)) dup2(r3, r4) pipe(&(0x7f00000011c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000001200)={{0x1, 0x1, 0x18, r10, {0x80}}, './file0\x00'}) close_range(0xffffffffffffffff, r11, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, 0x3f7, 0x800, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) 00:38:18 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="236602ce354f7959babf49f0f2b4c95a479a91be8d1934da466755", 0x1b, 0xa}], 0x202800, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@map_acorn}], [{@pcr={'pcr', 0x3d, 0x39}}, {@euid_gt={'euid>', 0xee01}}, {@euid_gt={'euid>', r0}}]}) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=0x2d, 0x8, 0x1) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@random={'osx.', 'map=normal'}, &(0x7f0000000500)='pcr', 0x3, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0xd2, 0x4, 0x3, "0cb9f67b0ac3336c461ab8914b521352", "41c6cd8c87e25c9563076ca557ba22b93719fbad330cebcd0bb2f66ffcdb89d00b93f60f468b8da197e197123c8d5802aa50fa84926aa9a8283c5c060b63bfb03bdcbc0c8ea0f080a76be8f4cff6a8194dbadc1f04f651b289a57a24ec16e423a6874399f6c114a66565975032c8a7fa9836b3e5c79ac6790381b90a1f7b740ab3b76c43970794e97d387df456401c27ad67766ca4c08d7c3b37bcd455edf8b14d3335209f8fb8cc7226a0c703abb6259a277bf20c2521b69027c41766"}, 0xd2, 0x0) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000780)='\x00', 0x200001, 0x2) sendto$unix(r4, &(0x7f00000007c0)="030ab03cf470ea87ca19d619f8daf1ebd59b56b87657ffc339aca4a7a02285f96a4568bd0bbe61bbf3fdc46e13547ff708a94fee28880b0ec211cb6e61841dc035dd0d8a3f1a01a3", 0x48, 0x40001, 0x0, 0x0) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0}, &(0x7f00000009c0)=0xc) fstat(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000b80)=0xe8) recvmsg$unix(r4, &(0x7f0000002440)={&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000c40)=""/213, 0xd5}, {&(0x7f0000000d40)=""/255, 0xff}, {&(0x7f0000000e40)=""/145, 0x91}, {&(0x7f0000000f00)=""/80, 0x50}, {&(0x7f0000000f80)=""/215, 0xd7}, {&(0x7f0000001080)=""/42, 0x2a}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/236, 0xec}, {&(0x7f00000021c0)=""/249, 0xf9}, {&(0x7f00000022c0)}], 0xa, &(0x7f00000023c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x48}, 0x40012040) lsetxattr$system_posix_acl(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000002480)={{}, {0x1, 0x2}, [{0x2, 0x6, r5}, {0x2, 0x3, r0}, {0x2, 0x4, r6}, {0x2, 0x1, r1}, {0x2, 0x2, r3}, {0x2, 0x0, r7}, {0x2, 0x3, 0xee00}, {0x2, 0x1, r8}, {0x2, 0x7, r10}], {}, [{0x8, 0x2, r2}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x9}}, 0x7c, 0x1) mount$cgroup2(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x60001, &(0x7f0000002580)={[{@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_localevents}, {@subsystem='net_cls'}, {}, {}, {@memory_recursiveprot}, {@memory_recursiveprot}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@obj_user}, {@measure}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x20000800) recvmmsg$unix(r9, &(0x7f000000fac0)=[{{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000002680)=""/104, 0x68}, {&(0x7f0000002700)=""/81, 0x51}, {&(0x7f0000002780)=""/188, 0xbc}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/213, 0xd5}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/155, 0x9b}, {&(0x7f0000004a00)=""/155, 0x9b}], 0x8}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/251, 0xfb}, {&(0x7f0000005c40)=""/167, 0xa7}], 0x3}}, {{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005d40)=""/230, 0xe6}, {&(0x7f0000005e40)=""/223, 0xdf}, {&(0x7f0000005f40)=""/181, 0xb5}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/148, 0x94}], 0x5, &(0x7f0000007140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000071c0), 0x6e, &(0x7f0000008840)=[{&(0x7f0000007240)=""/141, 0x8d}, {&(0x7f0000007300)=""/108, 0x6c}, {&(0x7f0000007380)=""/71, 0x47}, {&(0x7f0000007400)=""/40, 0x28}, {&(0x7f0000007440)=""/80, 0x50}, {&(0x7f00000074c0)=""/223, 0xdf}, {&(0x7f00000075c0)=""/83, 0x53}, {&(0x7f0000007640)=""/4096, 0x1000}, {&(0x7f0000008640)=""/254, 0xfe}, {&(0x7f0000008740)=""/230, 0xe6}], 0xa, &(0x7f0000008900)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f0000009c40)=[{&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)=""/91, 0x5b}, {&(0x7f0000009ac0)=""/10, 0xa}, {&(0x7f0000009b00)=""/123, 0x7b}, {&(0x7f0000009b80)=""/190, 0xbe}], 0x5, &(0x7f0000009cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f000000b040)=[{&(0x7f0000009dc0)=""/94, 0x5e}, {&(0x7f0000009e40)=""/137, 0x89}, {&(0x7f0000009f00)=""/48, 0x30}, {&(0x7f0000009f40)=""/4096, 0x1000}, {&(0x7f000000af40)=""/186, 0xba}, {&(0x7f000000b000)=""/20, 0x14}], 0x6}}, {{&(0x7f000000b0c0), 0x6e, &(0x7f000000e500)=[{&(0x7f000000b140)=""/159, 0x9f}, {&(0x7f000000b200)=""/182, 0xb6}, {&(0x7f000000b2c0)=""/4096, 0x1000}, {&(0x7f000000c2c0)=""/246, 0xf6}, {&(0x7f000000c3c0)=""/4096, 0x1000}, {&(0x7f000000d3c0)=""/4096, 0x1000}, {&(0x7f000000e3c0)=""/106, 0x6a}, {&(0x7f000000e440)=""/92, 0x5c}, {&(0x7f000000e4c0)=""/16, 0x10}], 0x9, &(0x7f000000e5c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f000000e680)=[{&(0x7f000000e600)}, {&(0x7f000000e640)=""/29, 0x1d}], 0x2}}, {{&(0x7f000000e6c0), 0x6e, &(0x7f000000f800)=[{&(0x7f000000e740)=""/93, 0x5d}, {&(0x7f000000e7c0)=""/6, 0x6}, {&(0x7f000000e800)=""/4096, 0x1000}], 0x3, &(0x7f000000f840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f000000fa40)=[{&(0x7f000000f940)=""/47, 0x2f}, {&(0x7f000000f980)=""/179, 0xb3}], 0x2, &(0x7f000000fa80)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x10160, &(0x7f000000fd40)={0x77359400}) recvmmsg$unix(r11, &(0x7f0000012cc0)=[{{&(0x7f000000fd80)=@abs, 0x6e, &(0x7f000000fec0)=[{&(0x7f000000fe00)=""/144, 0x90}], 0x1, &(0x7f000000ff00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f000000ff40)=@abs, 0x6e, &(0x7f0000011340)=[{&(0x7f000000ffc0)=""/159, 0x9f}, {&(0x7f0000010080)=""/153, 0x99}, {&(0x7f0000010140)=""/132, 0x84}, {&(0x7f0000010200)=""/65, 0x41}, {&(0x7f0000010280)=""/131, 0x83}, {&(0x7f0000010340)=""/4096, 0x1000}], 0x6, &(0x7f00000113c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000114c0)=@abs, 0x6e, &(0x7f0000012900)=[{&(0x7f0000011540)=""/115, 0x73}, {&(0x7f00000115c0)=""/157, 0x9d}, {&(0x7f0000011680)=""/27, 0x1b}, {&(0x7f00000116c0)=""/155, 0x9b}, {&(0x7f0000011780)=""/4096, 0x1000}, {&(0x7f0000012780)=""/245, 0xf5}, {&(0x7f0000012880)=""/90, 0x5a}], 0x7, &(0x7f0000012980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000012a40)=@abs, 0x6e, &(0x7f0000012b80)=[{&(0x7f0000012ac0)=""/155, 0x9b}], 0x1, &(0x7f0000012bc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x4, 0x100, &(0x7f0000012dc0)) execveat(0xffffffffffffffff, &(0x7f0000012e40)='./file0\x00', &(0x7f0000013000)=[&(0x7f0000012e80)='iocharset', &(0x7f0000012ec0)='(*^\xed-\'\x00', &(0x7f0000012f00)='obj_user', &(0x7f0000012f40)='--$[{#,-,,N\xf7\x00', &(0x7f0000012f80)='^)%:.}[}\\[]/-&--}\x1c\x00', &(0x7f0000012fc0)='-:\x00'], &(0x7f00000130c0)=[&(0x7f0000013040)='memory_localevents', &(0x7f0000013080)='nsdelegate'], 0x800) [ 63.962598] audit: type=1400 audit(1664843898.434:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:38:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "75802bdd5c485b9e3a558ae74f689107"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="a08f33d54c98"}, @NL80211_ATTR_BSSID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004000) process_vm_writev(0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/38, 0x26}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/189, 0xbd}], 0x4, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x17c51ed2, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x80, 0x700, 0x6, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x20, 0x60000, 0x25, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x10000, 0x8, 0x3ff}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000cc0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000dc0)={'ip6gre0\x00', &(0x7f0000000d40)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x0, 0xd3e, 0x2, @local, @private0, 0x10, 0x700, 0x7ff, 0x1}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001000)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1a4, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6a7d939d7ad330b4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x4040081) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'sit0\x00', r5, 0x2f, 0x6f, 0xff, 0x0, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x7, 0xc7d2, 0xffff}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001180)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000001280)=0xe8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001a80)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a40)={&(0x7f00000012c0)={0x754, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x160, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f800000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1dc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!^%:&.\'\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x468, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "c7690899527ceeed74b5d9c914a80f"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}]}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '}#\x91^+\',-.@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&\\*}\x9a^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+%{\\@:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^(/\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^$}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\!\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$^*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7673f932}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3dcb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd963}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xd0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '))\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0f67}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '<)^$.:.^\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x754}, 0x1, 0x0, 0x0, 0x48058}, 0x20000000) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001ac0)={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x3ff, 0x7f, 0xb7a, 0x180, 0x7d5, 0xa0040, r6}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 00:38:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6d, 0x3b}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x50}}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd8e}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1308}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x96d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x4e2df5460ec903e2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40008c1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}}, 0x800) r5 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x1, 0x214001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x8001) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000000880)=""/226, 0xe2}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/72, 0x48}, {&(0x7f0000001a80)=""/6, 0x6}, {&(0x7f0000001ac0)=""/233, 0xe9}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/144, 0x90}, {&(0x7f0000002c80)=""/176, 0xb0}], 0x9) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000002f40)={&(0x7f0000002f00)=""/21, 0x15, 0x7, 0x1}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c4c7a265a022a69ebbc8506dbc"}]}, 0x44}}, 0x4000080) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4) 00:38:18 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x12180) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x10000010}) fallocate(r0, 0x4, 0x4, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x1, 0x4, 0x6, 0x3, 0x6, [{0x5, 0x1, 0x5, '\x00', 0x800}, {0x3b54, 0x6, 0x2734, '\x00', 0x102}, {0x4, 0x100000000, 0x7f, '\x00', 0x503}, {0x8, 0xfffffffffffffffd, 0x77a, '\x00', 0x800}, {0x3, 0xf4, 0x3bb, '\x00', 0x808}, {0x7f, 0x6, 0x4, '\x00', 0x4}]}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x2, 0x0, 0x1, 0x1, 0x1}}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x2008}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000380)={0x1, 0x800, 0xa4, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000400)={0x4, 0x4, 0x7f2, 0x0, 0xf}) fcntl$addseals(r0, 0x409, 0x6) r4 = dup2(r3, r0) fcntl$addseals(r0, 0x409, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x1713}}, './file0\x00'}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000004c0)) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000500)={0x1f, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}, {{0x2, 0x4e20, @loopback}}}, 0x108) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000640)={0x8000, 0xffffffff, 0x9, 0xffffffff, 0x4, "d909ffbc9bc2c4a0562a19722f01a0d3bf2105"}) 00:38:18 executing program 5: ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x34, 0x1f, 0x4, 0xa, 0xa, 0x1, 0x4, 0x2a, 0x1}}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x57, &(0x7f0000000040)="72c59e88cd086b96247227c493df395eb017a8166de86f07251eefddea27afbce81dd8bef8b086eb5176615f556b7e661c4aae26fa583ce4de1838afe37f44998efd92a4f2deabd03cae3c2550d53d6ba30311f457c0b8", 0x7d, 0x0, &(0x7f00000000c0)="02dd981c0e299fef7614e5485568ef310cc7c0ca8a2a238115f1ec047460f89fc7d298957561042fa4398b6fd1c969553bf56f821ddc1f452b29e51d93db6c59282c4088600883091621d50875907aaf01080d88f8bc79acc326b9ecc6529c0b82a3dcc95888100c5cac79341745092fcc5eaeb6bb2f532f5592abed5f"}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) syncfs(r1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1759) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000002c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = dup3(r2, r3, 0x80000) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x1, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x20008080) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x4, 0x1, 0x202, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000780), 0x80000001, 0x80) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f00000007c0)={0x2, 0x5}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x5, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x0, 0x1000, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x51) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:38:18 executing program 6: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3f, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3b}, 0x8, 0x1, 0x2, 0x2, 0x0, 0xff}, 0x20) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xac4, 0x2, 0x75c9dfda066672e8, 0x9, 0x0, 0xffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local, 0x2, 0x1, 0x2, 0x4, 0x6, 0x9}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0xa, 0x20, 0x4, 0x7, 0x21, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x1, 0x9, 0x800}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @rand_addr, @remote}, &(0x7f0000000640)=0xc) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000001c0)="e15e0f96d9361259f7b9b6b7652a8fa5bb31c914240f87260f644c27177c5e24def9021b0687308dbffad622b1426482fa8ad665b1d86ee60bd221942d17638e572ceb08d0b849d3e988030a5ba73753088b3334e531a500dbd53a8bc6ba0c38c5b990d02ff214c11c2e8600184f3c95f18588795706b450bebbc517af05aede6100a67561aaa7b7bfdc1413938c2d0aa2", 0x91}, {&(0x7f0000000280)="f44da39809c2dcee4278fbc4f36302a84d59", 0x12}, {&(0x7f00000002c0)="14f931bdb163d35e4f51", 0xa}, {&(0x7f0000000300)="2ccacc2091f5dd132054a1cb9dee28eb32af9b5557484425025a1d5d25bdb7d83f0823de4198dad1e1a208372f7439ba1b8994f7cee981991143874809914140ce1e527ad95c52dfe85e7c44120fd5b7bd5d43cd6aeffb693522e158b6fc9c41c9db3b6181600143828efa535e7cb5b5dcf09cd4b3ef4a40af43f66102ff14a2bff8efe7b4f7d33d87fffead154c55b0c6222cdc9567dd1ee079b35c92ea95936020d3df23943c650d653e9c389d5f294f19e8a8e81c99c424a901d028cc", 0xbe}, {&(0x7f00000003c0)="fbf03f72d01e6f957278f13ea19c31b354b972cd9dfebe46c2d8948297d3c37ef04baf356421f98be1f2ccd38f16ae9b61c48c77590f7cb38a79a8ff0907f965e283ec92715da2a98d72f3a55bd4b9e1f0ac1cca3b814b23de5914d6d7baf70e96de92a7adeb34aecfb7bd231a4fb2765af513494fcd1f6cebafd35e7a09be118605c42212049fec561ce19307fd2d1af7f9809759736507ee6f29782597679f42283324b09d16e316a35d3e3bea339616900380f7f17acee860917eb98c80f1e0f6ec2be3014af3903fec6a71847c68e1545f4c9f0f6e199ea032eaf3878f5d4cb665d3812c66afc1d7c3f26b20a8", 0xef}], 0x5, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @loopback}}}], 0x40}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000700)={@empty, 0x6, 0x0, 0x0, 0x2, 0x6, 0x6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6_vti0\x00', r3, 0x6, 0x24, 0x2, 0xfffffff8, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0x9, 0x6}}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000840)={0x7dc}, 0x4) r5 = syz_open_dev$vcsu(&(0x7f0000000880), 0x5, 0x60c00) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000008c0)={r4, @empty, @broadcast}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000900)=0x80, 0x0) getsockopt$inet6_int(r5, 0x29, 0x51, &(0x7f0000000940), &(0x7f0000000980)=0x4) r7 = syz_io_uring_complete(0x0) dup2(r7, 0xffffffffffffffff) 00:38:18 executing program 7: prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 65.343475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.345412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.347880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.349165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.350421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.353123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.354368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.356382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.357719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.362251] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.382208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.387612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.392280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.402027] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.459109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.460486] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.461853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.464575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.469306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.471438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.476282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.479337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.481753] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.484188] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.486477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.488321] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.491509] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.492901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.496565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.497602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.498750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.502382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.504010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.505241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.506379] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.510596] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 65.511742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.512743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.514404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.515492] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.516855] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.522393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.524345] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.525679] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.525967] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.528418] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.541146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.561544] Bluetooth: hci5: HCI_REQ-0x0c1a [ 65.571867] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.412363] Bluetooth: hci0: command 0x0409 tx timeout [ 67.413214] Bluetooth: hci1: command 0x0409 tx timeout [ 67.413338] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 67.539933] Bluetooth: hci2: command 0x0409 tx timeout [ 67.603902] Bluetooth: hci6: command 0x0409 tx timeout [ 67.603936] Bluetooth: hci7: command 0x0409 tx timeout [ 67.604704] Bluetooth: hci5: command 0x0409 tx timeout [ 67.605584] Bluetooth: hci4: command 0x0409 tx timeout [ 69.460634] Bluetooth: hci1: command 0x041b tx timeout [ 69.460658] Bluetooth: hci0: command 0x041b tx timeout [ 69.588010] Bluetooth: hci2: command 0x041b tx timeout [ 69.651993] Bluetooth: hci5: command 0x041b tx timeout [ 69.652033] Bluetooth: hci7: command 0x041b tx timeout [ 69.652822] Bluetooth: hci4: command 0x041b tx timeout [ 69.653239] Bluetooth: hci6: command 0x041b tx timeout [ 71.507859] Bluetooth: hci1: command 0x040f tx timeout [ 71.508361] Bluetooth: hci0: command 0x040f tx timeout [ 71.636909] Bluetooth: hci2: command 0x040f tx timeout [ 71.699839] Bluetooth: hci7: command 0x040f tx timeout [ 71.699898] Bluetooth: hci6: command 0x040f tx timeout [ 71.700298] Bluetooth: hci5: command 0x040f tx timeout [ 71.700707] Bluetooth: hci4: command 0x040f tx timeout [ 72.723881] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 73.555908] Bluetooth: hci0: command 0x0419 tx timeout [ 73.556433] Bluetooth: hci1: command 0x0419 tx timeout [ 73.683883] Bluetooth: hci2: command 0x0419 tx timeout [ 73.747931] Bluetooth: hci4: command 0x0419 tx timeout [ 73.748377] Bluetooth: hci5: command 0x0419 tx timeout [ 73.748753] Bluetooth: hci6: command 0x0419 tx timeout [ 73.749169] Bluetooth: hci7: command 0x0419 tx timeout [ 75.333508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.336743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.338085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.341984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.345985] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.346944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.349577] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.395835] Bluetooth: hci3: command 0x0409 tx timeout [ 79.443954] Bluetooth: hci3: command 0x041b tx timeout [ 81.492126] Bluetooth: hci3: command 0x040f tx timeout [ 83.539829] Bluetooth: hci3: command 0x0419 tx timeout 00:39:11 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37303334343838373800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000004fe17b6ecf5c42eb82d5ba1095ba954b010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x643}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1600}, {&(0x7f0000010f00)="200000008cb1c9158cb1c91500000000d0f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d0f4655fd0f4655fd0f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f000000000000010004000000000000000100000021000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099aa5620000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3730333434383837382f66696c65302f66696c653000000000000000000000000000000000000000000000927823d7000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d3d99ad000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b0000000000000000000000000000000000000000000000000000004e2ca332000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xc0, 0x31e0}, {&(0x7f0000011600)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cfef66502000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000011700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f00000004c0)="000000000004020000000000000000000000000000000000000000000000009ec2f41b9d0b9676b892332364c2f2b6be54791fb46915bace9dc0608294714310b3c824f7cc55ede5243fe959ce54ae6dc8f5d693946819eb6b0af043121ca7e7069fae07e307186f7cca6c05f2e296616312ee5dd3e40fe2b92171800c529e03eb9b0f7f95bea19b9113be700c462dafe1cb6abc8d6cd92b8bb26adb7ce080151782879d7445e82495096a02532194b9315062f0050438b6c5419468db9253a735fda3e77802fbda17668266a1427e2e2d37132ed6a9dc72b8a3ddc3364c7686cf3c5fc3", 0xe4, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x7fff}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x8000}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f0000000040)={[{@quota}, {@bh}, {@block_validity}, {@debug}, {@grpid}, {@quota}, {@noinit_itable}, {@data_writeback}]}) r1 = dup(r0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x400, 0x80) [ 117.578155] loop2: detected capacity change from 0 to 512 [ 117.592538] EXT4-fs: Ignoring removed bh option [ 117.610951] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 117.628682] loop2: detected capacity change from 0 to 512 [ 117.629365] EXT4-fs: Ignoring removed bh option [ 117.642465] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal 00:39:12 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37303334343838373800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000004fe17b6ecf5c42eb82d5ba1095ba954b010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x643}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1600}, {&(0x7f0000010f00)="200000008cb1c9158cb1c91500000000d0f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d0f4655fd0f4655fd0f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f000000000000010004000000000000000100000021000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099aa5620000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3730333434383837382f66696c65302f66696c653000000000000000000000000000000000000000000000927823d7000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d3d99ad000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b0000000000000000000000000000000000000000000000000000004e2ca332000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xc0, 0x31e0}, {&(0x7f0000011600)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cfef66502000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000011700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f00000004c0)="000000000004020000000000000000000000000000000000000000000000009ec2f41b9d0b9676b892332364c2f2b6be54791fb46915bace9dc0608294714310b3c824f7cc55ede5243fe959ce54ae6dc8f5d693946819eb6b0af043121ca7e7069fae07e307186f7cca6c05f2e296616312ee5dd3e40fe2b92171800c529e03eb9b0f7f95bea19b9113be700c462dafe1cb6abc8d6cd92b8bb26adb7ce080151782879d7445e82495096a02532194b9315062f0050438b6c5419468db9253a735fda3e77802fbda17668266a1427e2e2d37132ed6a9dc72b8a3ddc3364c7686cf3c5fc3", 0xe4, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x7fff}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x8000}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f0000000040)={[{@quota}, {@bh}, {@block_validity}, {@debug}, {@grpid}, {@quota}, {@noinit_itable}, {@data_writeback}]}) r1 = dup(r0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x400, 0x80) 00:39:12 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x6, &(0x7f0000000600)=[{&(0x7f0000000080)="ce6f069c84f517a586808d51058dbb3cf12d5bea08e55fdca1f5121f91c39d5620de4c4a5415fe7beb3a1608c4ef2e58300a4db1b7c7cf6ef726545b1cf4edfeea30bfe1cee6f6c475107ae4064ae4f1e56e192e7ecd1851fd7786ae452ab6b4f0f91210262addfc9950732b7bc26d77a7108e05e33524d552ed93265db854e788b7e3ac47834cf4a41409c9e35a1ca78f62d024f0e8800b5c0fe577c00795cd8eb728e256f57071322703eb4a38e975ef04706817ca59a9b4fcd056991a00641621b81dbc2a21e9cea708943f76fe0ee69c8fd6d0c1590412e2b66acc0c8f21f2ea7741f6", 0xe5, 0x88}, {&(0x7f00000001c0)="ce52fe3aa08fd2676c0bc4914b6f03a59558bdfd93204f116c666a6bc2fa4f70caf1701eb45cc7db2fe5d1af447fdcb1889cb11910827dc591919a55b857145cb9c53e76ee2164e45cb0a1224a906fa2c717f7f2ff684ec25d4626895978bfdfe6a4bd3faadf9638fcb09212d0da679bbb280298373d254a22053622b67007137f6421b9efe8a4ba93f7e7055b646e8ddf155fadb03d0cc63d3d45cfb8002c509bea49ebcad10a1b675bd75e357a4af0adbbab7afedfa486a622a6ed23a4e8cc4dc27d6f83929ee3614a9dbdd96ec7c618698b0786f7068c0f41cd4a063b58ec3b941e47721a0ec1", 0xe8, 0x9}, {&(0x7f00000002c0)="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", 0xfc, 0x3}, {&(0x7f00000003c0)="4c01f4b99e5bb6d36ea95dccf719c297b386408a1b3e542164c4a10840653cddc57702777fe13f8bba9451903907a5244849368ecaac355a59c371ac73be47880188e6c1f8d1f2dd8edaed410a940c078751d5406558cbd99890785088d23563b7473d1d1d487be7b4fd33a4ab64ed9d5458c770ff31806b341e282aa6dd51e3a7b0364e4565d9f417602c8a4e3e0b35d3c820a20a0493ae32759f4087f0be89c666e00104b417c11ab4a057a5ed6ba815318e68285953d7a17c8f7dc31ab5dc011f15", 0xc3, 0xfffffffffffff801}, {&(0x7f00000004c0)="dabf0cc5c6e862d0b4b172ef3c2daad88156e42b6101cec7d0c20ec7509da37c4d02a2f8ab7824635072c700f67557e10f4a9e6e295719316a67a731e7619eb48f971eae16d3fed405b78e31a324a7bca4d46d12b266e411c260fb0e886889d48d28ba4c480aa05be12bdc48930218575270312bcf403c1bdaed03a55ffec999ae5366d074a3f482272b93717777e95c13e5c222218493892aadaa03e0c849bed7e18483d9d2adea76db0d4dfafe51d4dfa8c66b", 0xb4, 0x9}, {&(0x7f0000000580)="874878e60d19bc21abac7fe657554caa4d19f4c2886f2ace33436c2069d1ba6dbdb6f1e254f8be8f84edd4725e3ec5f09bc37736f1440723e0b3c953ddcffc2690c97dd676e9c3d2f200520e20b40ec08df99a8704798fd2d1a0f5bd10ae37e292531295ccb02eac43aea02453ef94bd5809", 0x72, 0x447f}], 0x20000, &(0x7f00000006c0)={[{@map_off}, {@unhide}, {@block={'block', 0x3d, 0x600}}, {@mode={'mode', 0x3d, 0xb6a}}], [{@uid_lt={'uid<', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}) mount$9p_rdma(0x0, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0, &(0x7f0000001840)) 00:39:12 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,cache=fscache,access=client,access=any,access=', @ANYRESDEC=0xee01, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',fscontext=staff_u,obj_user=environ\x00,subj_role=environ\x00,euid=', @ANYRESDEC=r5, @ANYBLOB="6ca29816a2e073fd8926be52595fd9a70d90b996f13395abe0caa70b758db068c2d58d21f84036a5b2e327235200000000000000004d82db1f1819fa5c9088df791a1687ea68fb283a220c21b996390393039996a37b28855c000b7aa34f57f2"]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x6, 0x692, 0x2, "31c2c1191811"}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) [ 118.056156] audit: type=1400 audit(1664843952.527:7): avc: denied { open } for pid=3724 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.057817] audit: type=1400 audit(1664843952.527:8): avc: denied { kernel } for pid=3724 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.076705] ------------[ cut here ]------------ [ 118.076724] [ 118.076727] ====================================================== [ 118.076730] WARNING: possible circular locking dependency detected [ 118.076734] 6.0.0-rc7-next-20220930 #1 Not tainted [ 118.076741] ------------------------------------------------------ [ 118.076744] syz-executor.2/3726 is trying to acquire lock: [ 118.076750] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 118.076792] [ 118.076792] but task is already holding lock: [ 118.076794] ffff88800d9c7820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.076820] [ 118.076820] which lock already depends on the new lock. [ 118.076820] [ 118.076823] [ 118.076823] the existing dependency chain (in reverse order) is: [ 118.076826] [ 118.076826] -> #3 (&ctx->lock){....}-{2:2}: [ 118.076839] _raw_spin_lock+0x2a/0x40 [ 118.076850] __perf_event_task_sched_out+0x53b/0x18d0 [ 118.076861] __schedule+0xedd/0x2470 [ 118.076875] schedule+0xda/0x1b0 [ 118.076888] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.076900] syscall_exit_to_user_mode+0x19/0x40 [ 118.076913] do_syscall_64+0x48/0x90 [ 118.076930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.076942] [ 118.076942] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 118.076956] _raw_spin_lock_nested+0x30/0x40 [ 118.076966] raw_spin_rq_lock_nested+0x1e/0x30 [ 118.076979] task_fork_fair+0x63/0x4d0 [ 118.076995] sched_cgroup_fork+0x3d0/0x540 [ 118.077008] copy_process+0x4183/0x6e20 [ 118.077019] kernel_clone+0xe7/0x890 [ 118.077028] user_mode_thread+0xad/0xf0 [ 118.077038] rest_init+0x24/0x250 [ 118.077049] arch_call_rest_init+0xf/0x14 [ 118.077066] start_kernel+0x4c6/0x4eb [ 118.077081] secondary_startup_64_no_verify+0xe0/0xeb [ 118.077094] [ 118.077094] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 118.077108] _raw_spin_lock_irqsave+0x39/0x60 [ 118.077118] try_to_wake_up+0xab/0x1930 [ 118.077131] up+0x75/0xb0 [ 118.077145] __up_console_sem+0x6e/0x80 [ 118.077160] console_unlock+0x46a/0x590 [ 118.077176] vt_ioctl+0x2822/0x2ca0 [ 118.077187] tty_ioctl+0x785/0x16b0 [ 118.077198] __x64_sys_ioctl+0x19a/0x210 [ 118.077211] do_syscall_64+0x3b/0x90 [ 118.077227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.077239] [ 118.077239] -> #0 ((console_sem).lock){....}-{2:2}: [ 118.077253] __lock_acquire+0x2a02/0x5e70 [ 118.077269] lock_acquire+0x1a2/0x530 [ 118.077284] _raw_spin_lock_irqsave+0x39/0x60 [ 118.077295] down_trylock+0xe/0x70 [ 118.077309] __down_trylock_console_sem+0x3b/0xd0 [ 118.077325] vprintk_emit+0x16b/0x560 [ 118.077341] vprintk+0x84/0xa0 [ 118.077357] _printk+0xba/0xf1 [ 118.077367] report_bug.cold+0x72/0xab [ 118.077383] handle_bug+0x3c/0x70 [ 118.077399] exc_invalid_op+0x14/0x50 [ 118.077416] asm_exc_invalid_op+0x16/0x20 [ 118.077427] group_sched_out.part.0+0x2c7/0x460 [ 118.077445] ctx_sched_out+0x8f1/0xc10 [ 118.077461] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.077472] __schedule+0xedd/0x2470 [ 118.077485] schedule+0xda/0x1b0 [ 118.077498] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.077509] syscall_exit_to_user_mode+0x19/0x40 [ 118.077521] do_syscall_64+0x48/0x90 [ 118.077538] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.077550] [ 118.077550] other info that might help us debug this: [ 118.077550] [ 118.077552] Chain exists of: [ 118.077552] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 118.077552] [ 118.077567] Possible unsafe locking scenario: [ 118.077567] [ 118.077569] CPU0 CPU1 [ 118.077571] ---- ---- [ 118.077573] lock(&ctx->lock); [ 118.077579] lock(&rq->__lock); [ 118.077585] lock(&ctx->lock); [ 118.077591] lock((console_sem).lock); [ 118.077596] [ 118.077596] *** DEADLOCK *** [ 118.077596] [ 118.077598] 2 locks held by syz-executor.2/3726: [ 118.077605] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 118.077633] #1: ffff88800d9c7820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.077659] [ 118.077659] stack backtrace: [ 118.077662] CPU: 1 PID: 3726 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 118.077674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.077682] Call Trace: [ 118.077685] [ 118.077689] dump_stack_lvl+0x8b/0xb3 [ 118.077707] check_noncircular+0x263/0x2e0 [ 118.077723] ? format_decode+0x26c/0xb50 [ 118.077739] ? print_circular_bug+0x450/0x450 [ 118.077755] ? simple_strtoul+0x30/0x30 [ 118.077770] ? __lockdep_reset_lock+0x180/0x180 [ 118.077786] ? format_decode+0x26c/0xb50 [ 118.077803] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 118.077821] __lock_acquire+0x2a02/0x5e70 [ 118.077842] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 118.077864] lock_acquire+0x1a2/0x530 [ 118.077880] ? down_trylock+0xe/0x70 [ 118.077897] ? lock_release+0x750/0x750 [ 118.077914] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 118.077935] ? vprintk+0x84/0xa0 [ 118.077952] _raw_spin_lock_irqsave+0x39/0x60 [ 118.077963] ? down_trylock+0xe/0x70 [ 118.077979] down_trylock+0xe/0x70 [ 118.077995] ? vprintk+0x84/0xa0 [ 118.078011] __down_trylock_console_sem+0x3b/0xd0 [ 118.078028] vprintk_emit+0x16b/0x560 [ 118.078045] ? lock_downgrade+0x6d0/0x6d0 [ 118.078063] vprintk+0x84/0xa0 [ 118.078080] _printk+0xba/0xf1 [ 118.078091] ? record_print_text.cold+0x16/0x16 [ 118.078105] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 118.078119] ? lock_downgrade+0x6d0/0x6d0 [ 118.078136] ? report_bug.cold+0x66/0xab [ 118.078154] ? group_sched_out.part.0+0x2c7/0x460 [ 118.078172] report_bug.cold+0x72/0xab [ 118.078190] handle_bug+0x3c/0x70 [ 118.078207] exc_invalid_op+0x14/0x50 [ 118.078225] asm_exc_invalid_op+0x16/0x20 [ 118.078238] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.078258] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.078269] RSP: 0018:ffff88800ffbfc48 EFLAGS: 00010006 [ 118.078278] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.078285] RDX: ffff88802de89ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 118.078293] RBP: ffff888015fa0000 R08: 0000000000000005 R09: 0000000000000001 [ 118.078300] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d9c7800 [ 118.078307] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 118.078317] ? group_sched_out.part.0+0x2c7/0x460 [ 118.078337] ? group_sched_out.part.0+0x2c7/0x460 [ 118.078357] ctx_sched_out+0x8f1/0xc10 [ 118.078376] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.078390] ? lock_is_held_type+0xd7/0x130 [ 118.078403] ? __perf_cgroup_move+0x160/0x160 [ 118.078414] ? set_next_entity+0x304/0x550 [ 118.078431] ? update_curr+0x267/0x740 [ 118.078449] ? lock_is_held_type+0xd7/0x130 [ 118.078463] __schedule+0xedd/0x2470 [ 118.078480] ? io_schedule_timeout+0x150/0x150 [ 118.078495] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 118.078510] ? __x64_sys_futex_time32+0x480/0x480 [ 118.078524] schedule+0xda/0x1b0 [ 118.078539] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.078551] syscall_exit_to_user_mode+0x19/0x40 [ 118.078564] do_syscall_64+0x48/0x90 [ 118.078582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.078595] RIP: 0033:0x7fdc022abb19 [ 118.078603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.078614] RSP: 002b:00007fdbff821218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.078624] RAX: 0000000000000001 RBX: 00007fdc023bef68 RCX: 00007fdc022abb19 [ 118.078631] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc023bef6c [ 118.078638] RBP: 00007fdc023bef60 R08: 000000000000000e R09: 0000000000000000 [ 118.078645] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fdc023bef6c [ 118.078652] R13: 00007ffc21749a9f R14: 00007fdbff821300 R15: 0000000000022000 [ 118.078665] [ 118.135169] WARNING: CPU: 1 PID: 3726 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 118.135864] Modules linked in: [ 118.136103] CPU: 1 PID: 3726 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 118.136690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.137504] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.137910] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.139222] RSP: 0018:ffff88800ffbfc48 EFLAGS: 00010006 [ 118.139615] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.140134] RDX: ffff88802de89ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 118.140649] RBP: ffff888015fa0000 R08: 0000000000000005 R09: 0000000000000001 [ 118.141163] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d9c7800 [ 118.141683] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 118.142208] FS: 00007fdbff821700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 118.142792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.143219] CR2: 00007f46814911f0 CR3: 000000001d86e000 CR4: 0000000000350ee0 [ 118.143737] Call Trace: [ 118.143929] [ 118.144102] ctx_sched_out+0x8f1/0xc10 [ 118.144396] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.144774] ? lock_is_held_type+0xd7/0x130 [ 118.145095] ? __perf_cgroup_move+0x160/0x160 [ 118.145430] ? set_next_entity+0x304/0x550 [ 118.145746] ? update_curr+0x267/0x740 [ 118.146040] ? lock_is_held_type+0xd7/0x130 [ 118.146349] __schedule+0xedd/0x2470 [ 118.146630] ? io_schedule_timeout+0x150/0x150 [ 118.146977] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 118.147374] ? __x64_sys_futex_time32+0x480/0x480 [ 118.147735] schedule+0xda/0x1b0 [ 118.147989] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.148341] syscall_exit_to_user_mode+0x19/0x40 [ 118.148687] do_syscall_64+0x48/0x90 [ 118.148973] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.149344] RIP: 0033:0x7fdc022abb19 [ 118.149615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.150881] RSP: 002b:00007fdbff821218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.151433] RAX: 0000000000000001 RBX: 00007fdc023bef68 RCX: 00007fdc022abb19 [ 118.151931] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc023bef6c [ 118.152434] RBP: 00007fdc023bef60 R08: 000000000000000e R09: 0000000000000000 [ 118.152937] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fdc023bef6c [ 118.153443] R13: 00007ffc21749a9f R14: 00007fdbff821300 R15: 0000000000022000 [ 118.153956] [ 118.154129] irq event stamp: 814 [ 118.154374] hardirqs last enabled at (813): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 118.155050] hardirqs last disabled at (814): [] __schedule+0x1225/0x2470 [ 118.155659] softirqs last enabled at (414): [] __irq_exit_rcu+0x11b/0x180 [ 118.156271] softirqs last disabled at (277): [] __irq_exit_rcu+0x11b/0x180 [ 118.156894] ---[ end trace 0000000000000000 ]--- [ 118.418651] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 00:39:13 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,cache=fscache,access=client,access=any,access=', @ANYRESDEC=0xee01, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',fscontext=staff_u,obj_user=environ\x00,subj_role=environ\x00,euid=', @ANYRESDEC=r5, @ANYBLOB="6ca29816a2e073fd8926be52595fd9a70d90b996f13395abe0caa70b758db068c2d58d21f84036a5b2e327235200000000000000004d82db1f1819fa5c9088df791a1687ea68fb283a220c21b996390393039996a37b28855c000b7aa34f57f2"]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x6, 0x692, 0x2, "31c2c1191811"}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 00:39:13 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,cache=fscache,access=client,access=any,access=', @ANYRESDEC=0xee01, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',fscontext=staff_u,obj_user=environ\x00,subj_role=environ\x00,euid=', @ANYRESDEC=r5, @ANYBLOB="6ca29816a2e073fd8926be52595fd9a70d90b996f13395abe0caa70b758db068c2d58d21f84036a5b2e327235200000000000000004d82db1f1819fa5c9088df791a1687ea68fb283a220c21b996390393039996a37b28855c000b7aa34f57f2"]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x6, 0x692, 0x2, "31c2c1191811"}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 00:39:13 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x3, 0x8001, 0x1, 'queue0\x00', 0x1}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4a) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000007c0)={0x7df}) close_range(r2, r1, 0x0) write$sndseq(r1, &(0x7f0000000440)=[{0x12, 0x1, 0x7, 0x6, @tick=0x6, {0x1, 0x4}, {0x0, 0x7}, @time=@tick=0x1}, {0x7f, 0x5, 0x5, 0xfd, @time={0xfffffc00}, {0x20, 0x3}, {0x9, 0x24}, @addr={0xfb, 0x4}}, {0x7, 0x3, 0x7f, 0x82, @tick=0x2, {0xc, 0x1}, {0x4}, @note={0x3f, 0xff, 0x2, 0x40, 0x9}}, {0xcc, 0x80, 0x3, 0x7, @tick=0xfffffffa, {0x20, 0x6}, {0x7, 0x7f}, @result={0xfffffffa, 0x80}}, {0x1, 0x3f, 0x3f, 0xfb, @time={0xad0, 0x7ff}, {0x2, 0x2}, {0x9, 0x7}, @note={0x9, 0xff, 0x0, 0x3f, 0x40}}, {0xce, 0xff, 0x8, 0xff, @tick, {0x8, 0x20}, {0x9}, @ext={0xcc, &(0x7f0000000040)="b85863394ac0e3731337e1ecc3535c4d6d1fd18e6a7e12e238110e308089764b75676b0aa5d705e9f4dc73c5ba8855db1f45d5b5398542a8454909a60e499eb38e244b7580b16041d36ef0e140dcd9d944299e237cba15f2ed8d9dd4df147884f678fe2de3c5002cc4368166feb4f8d3a5be6fdb5894c5a3904cef1046fed1dbed45418bf1b3829f690e0d6fe27468008317b652b0647ec3f0c5d4d2bdf1e6fe5caf2df1e9522560269a1ab11823f32e5386e44238338db3d22307385983ae9ba45a1733d5179cf7b340e468"}}, {0x5, 0x7f, 0xd7, 0x0, @tick=0x2, {0x9, 0xff}, {0x1, 0x3}, @time=@tick=0x4}, {0x7f, 0x1, 0x1, 0x8f, @tick=0x3, {0x4, 0x6b}, {0x3f, 0x20}, @ext={0xc7, &(0x7f0000000340)="db96f21e7dd1f3afb76391f96849366ce9d7e85bd34dc3b8afdb34aa6d5b3f1fb8fe19227100839580ea57b57072310f89dfd2d8fe116a40885e879ace8f58596fa1bb35654f4daa7e0579030ea082afc226cf4991ae263cf197b0f717c40de4307973ab26665f7df22f854f41953835d919842470e55bfdbfe50951594824e9ba194648947003564d2468e10e0c016123fb8ff89541c8b770d0131244c69491dab96a220cdc649c72c04a3be19e3f4d084ccaf1fd6b000b6a78d41ae111e2d66a0bf15b1d3ecf"}}, {0x40, 0x7, 0x6, 0x6, @time={0x20, 0x5}, {0x3d}, {0x42, 0x81}, @connect={{0x9c, 0x6}, {0x3f, 0x8b}}}, {0xf8, 0x81, 0x0, 0x3, @time={0x9, 0x401}, {0x76, 0x6}, {0x1f, 0x7f}, @connect={{0x9, 0x2}, {0x8, 0x6}}}], 0x118) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x85, @time}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000180)={0x4, 0x0, 0x6}) 00:39:13 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="00fbf60509d2a149fd4415c7eb677a5b4636793d2e847848781904000000c2b08aacac3433328173d0861b22ed067b49bb67940306ca116fdad3c5faa346e20775406e86c9e10af6588da9448ac2effbf9c314da3d416e4b182461ba029338c85552d9e6e5595de04ec055b23e82e644939271ed7aa51fd8f0563211f839595e195b929ecd8d3c9d473048271484cf4c2684e438dd446a0e1e6d086e7f63ae66680bf1eff6cb761cdad0ec32f30256c01fbd7f8ad9b774c70177f2b59747f5584ddf99f9a91c9ddc815dfc147c7b50d0001f826823a2ae3d125fa668d015c73b1cbbe0d4017f14140bd63714baccd9e6f764a4105e7e"], 0xf6, 0x2) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x7fb9}}, './file0\x00'}) ioctl$TIOCSBRK(r3, 0x5427) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) dup2(r1, r0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000018c0)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x17) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000080)={@mcast1, 0x0, r7}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @broadcast, r7}, 0xc) VM DIAGNOSIS: 00:39:12 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=ffff888098a73310 RCX=0000000080000000 RDX=ffff888015f41ac0 RSI=ffffffff81129d78 RDI=0000000000000006 RBP=ffff888018a73310 RSP=ffff88803ff9fc90 R8 =0000000000000006 R9 =ffff888018a73310 R10=ffff888098a73310 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8181d35e R14=00000000ffffff9c R15=ffff88800843f280 RIP=ffffffff81460c3d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f374b7fd540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffc5307e80 CR3=000000000df66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM01=0000000000000000 0000000000000000 00ff000000000000 0000000000ff0000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800ffbf690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006f R11=0000000000000001 R12=000000000000006f R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdbff821700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46814911f0 CR3=000000001d86e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000