Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:50745' (ECDSA) to the list of known hosts. 2022/09/29 04:15:28 fuzzer started 2022/09/29 04:15:28 dialing manager at localhost:45751 syzkaller login: [ 36.442743] cgroup: Unknown subsys name 'net' [ 36.561221] cgroup: Unknown subsys name 'rlimit' 2022/09/29 04:15:43 syscalls: 2215 2022/09/29 04:15:43 code coverage: enabled 2022/09/29 04:15:43 comparison tracing: enabled 2022/09/29 04:15:43 extra coverage: enabled 2022/09/29 04:15:43 setuid sandbox: enabled 2022/09/29 04:15:43 namespace sandbox: enabled 2022/09/29 04:15:43 Android sandbox: enabled 2022/09/29 04:15:43 fault injection: enabled 2022/09/29 04:15:43 leak checking: enabled 2022/09/29 04:15:43 net packet injection: enabled 2022/09/29 04:15:43 net device setup: enabled 2022/09/29 04:15:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/29 04:15:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/29 04:15:43 USB emulation: enabled 2022/09/29 04:15:43 hci packet injection: enabled 2022/09/29 04:15:43 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220928) 2022/09/29 04:15:43 802.15.4 emulation: enabled 2022/09/29 04:15:43 fetching corpus: 50, signal 27909/29635 (executing program) 2022/09/29 04:15:43 fetching corpus: 100, signal 39028/42286 (executing program) 2022/09/29 04:15:43 fetching corpus: 150, signal 48040/52658 (executing program) 2022/09/29 04:15:43 fetching corpus: 200, signal 54177/60094 (executing program) 2022/09/29 04:15:44 fetching corpus: 250, signal 60561/67629 (executing program) 2022/09/29 04:15:44 fetching corpus: 300, signal 66533/74704 (executing program) 2022/09/29 04:15:44 fetching corpus: 350, signal 70584/79847 (executing program) 2022/09/29 04:15:44 fetching corpus: 400, signal 76159/86329 (executing program) 2022/09/29 04:15:44 fetching corpus: 450, signal 80354/91429 (executing program) 2022/09/29 04:15:44 fetching corpus: 500, signal 83375/95384 (executing program) 2022/09/29 04:15:44 fetching corpus: 550, signal 85983/98899 (executing program) 2022/09/29 04:15:44 fetching corpus: 600, signal 88596/102316 (executing program) 2022/09/29 04:15:45 fetching corpus: 650, signal 92071/106497 (executing program) 2022/09/29 04:15:45 fetching corpus: 700, signal 94099/109297 (executing program) 2022/09/29 04:15:45 fetching corpus: 750, signal 96554/112427 (executing program) 2022/09/29 04:15:45 fetching corpus: 800, signal 99578/115997 (executing program) 2022/09/29 04:15:45 fetching corpus: 850, signal 103021/119880 (executing program) 2022/09/29 04:15:45 fetching corpus: 900, signal 105261/122744 (executing program) 2022/09/29 04:15:45 fetching corpus: 950, signal 109055/126779 (executing program) 2022/09/29 04:15:45 fetching corpus: 1000, signal 111606/129756 (executing program) 2022/09/29 04:15:46 fetching corpus: 1050, signal 112895/131736 (executing program) 2022/09/29 04:15:46 fetching corpus: 1100, signal 114887/134136 (executing program) 2022/09/29 04:15:46 fetching corpus: 1150, signal 118317/137678 (executing program) 2022/09/29 04:15:46 fetching corpus: 1200, signal 119992/139770 (executing program) 2022/09/29 04:15:46 fetching corpus: 1250, signal 121942/142049 (executing program) 2022/09/29 04:15:46 fetching corpus: 1300, signal 123570/144059 (executing program) 2022/09/29 04:15:46 fetching corpus: 1350, signal 125940/146570 (executing program) 2022/09/29 04:15:46 fetching corpus: 1400, signal 127470/148435 (executing program) 2022/09/29 04:15:47 fetching corpus: 1450, signal 130130/151079 (executing program) 2022/09/29 04:15:47 fetching corpus: 1500, signal 131353/152651 (executing program) 2022/09/29 04:15:47 fetching corpus: 1550, signal 133007/154527 (executing program) 2022/09/29 04:15:47 fetching corpus: 1600, signal 134326/156099 (executing program) 2022/09/29 04:15:47 fetching corpus: 1650, signal 135993/157915 (executing program) 2022/09/29 04:15:47 fetching corpus: 1700, signal 136847/159180 (executing program) 2022/09/29 04:15:47 fetching corpus: 1750, signal 138467/160918 (executing program) 2022/09/29 04:15:47 fetching corpus: 1800, signal 139621/162274 (executing program) 2022/09/29 04:15:47 fetching corpus: 1850, signal 141170/163934 (executing program) 2022/09/29 04:15:48 fetching corpus: 1900, signal 142207/165157 (executing program) 2022/09/29 04:15:48 fetching corpus: 1950, signal 143267/166441 (executing program) 2022/09/29 04:15:48 fetching corpus: 2000, signal 144577/167861 (executing program) 2022/09/29 04:15:48 fetching corpus: 2050, signal 146634/169700 (executing program) 2022/09/29 04:15:48 fetching corpus: 2100, signal 147532/170750 (executing program) 2022/09/29 04:15:48 fetching corpus: 2150, signal 148966/172196 (executing program) 2022/09/29 04:15:48 fetching corpus: 2200, signal 149673/173152 (executing program) 2022/09/29 04:15:48 fetching corpus: 2250, signal 150510/174158 (executing program) 2022/09/29 04:15:48 fetching corpus: 2300, signal 151313/175117 (executing program) 2022/09/29 04:15:49 fetching corpus: 2350, signal 152547/176286 (executing program) 2022/09/29 04:15:49 fetching corpus: 2400, signal 153646/177380 (executing program) 2022/09/29 04:15:49 fetching corpus: 2450, signal 154955/178601 (executing program) 2022/09/29 04:15:49 fetching corpus: 2500, signal 155853/179514 (executing program) 2022/09/29 04:15:49 fetching corpus: 2550, signal 157256/180673 (executing program) 2022/09/29 04:15:49 fetching corpus: 2600, signal 158429/181683 (executing program) 2022/09/29 04:15:49 fetching corpus: 2650, signal 159935/182863 (executing program) 2022/09/29 04:15:49 fetching corpus: 2700, signal 161160/183915 (executing program) 2022/09/29 04:15:50 fetching corpus: 2750, signal 162305/184845 (executing program) 2022/09/29 04:15:50 fetching corpus: 2800, signal 163181/185718 (executing program) 2022/09/29 04:15:50 fetching corpus: 2850, signal 165179/187019 (executing program) 2022/09/29 04:15:50 fetching corpus: 2900, signal 165717/187655 (executing program) 2022/09/29 04:15:50 fetching corpus: 2950, signal 166853/188501 (executing program) 2022/09/29 04:15:50 fetching corpus: 3000, signal 168181/189470 (executing program) 2022/09/29 04:15:50 fetching corpus: 3050, signal 169126/190202 (executing program) 2022/09/29 04:15:51 fetching corpus: 3100, signal 170393/191052 (executing program) 2022/09/29 04:15:51 fetching corpus: 3150, signal 171074/191653 (executing program) 2022/09/29 04:15:51 fetching corpus: 3200, signal 171534/192163 (executing program) 2022/09/29 04:15:51 fetching corpus: 3250, signal 172071/192700 (executing program) 2022/09/29 04:15:51 fetching corpus: 3300, signal 172677/193226 (executing program) 2022/09/29 04:15:51 fetching corpus: 3350, signal 173647/193851 (executing program) 2022/09/29 04:15:51 fetching corpus: 3400, signal 174213/194372 (executing program) 2022/09/29 04:15:51 fetching corpus: 3450, signal 175156/194959 (executing program) 2022/09/29 04:15:51 fetching corpus: 3500, signal 175723/195460 (executing program) 2022/09/29 04:15:51 fetching corpus: 3550, signal 176205/195936 (executing program) 2022/09/29 04:15:52 fetching corpus: 3600, signal 176939/196408 (executing program) 2022/09/29 04:15:52 fetching corpus: 3650, signal 178122/197003 (executing program) 2022/09/29 04:15:52 fetching corpus: 3700, signal 178732/197444 (executing program) 2022/09/29 04:15:52 fetching corpus: 3750, signal 179195/197816 (executing program) 2022/09/29 04:15:52 fetching corpus: 3800, signal 179990/198276 (executing program) 2022/09/29 04:15:52 fetching corpus: 3850, signal 180799/198736 (executing program) 2022/09/29 04:15:52 fetching corpus: 3900, signal 181303/199092 (executing program) 2022/09/29 04:15:52 fetching corpus: 3950, signal 182209/199569 (executing program) 2022/09/29 04:15:52 fetching corpus: 4000, signal 182565/199870 (executing program) 2022/09/29 04:15:52 fetching corpus: 4050, signal 183230/200235 (executing program) 2022/09/29 04:15:53 fetching corpus: 4100, signal 183682/200535 (executing program) 2022/09/29 04:15:53 fetching corpus: 4150, signal 184541/200885 (executing program) 2022/09/29 04:15:53 fetching corpus: 4200, signal 185370/201241 (executing program) 2022/09/29 04:15:53 fetching corpus: 4250, signal 186219/201542 (executing program) 2022/09/29 04:15:53 fetching corpus: 4300, signal 187424/201891 (executing program) 2022/09/29 04:15:53 fetching corpus: 4350, signal 187804/202115 (executing program) 2022/09/29 04:15:53 fetching corpus: 4400, signal 188309/202354 (executing program) 2022/09/29 04:15:53 fetching corpus: 4450, signal 189034/202625 (executing program) 2022/09/29 04:15:54 fetching corpus: 4500, signal 189709/202885 (executing program) 2022/09/29 04:15:54 fetching corpus: 4550, signal 190469/203135 (executing program) 2022/09/29 04:15:54 fetching corpus: 4600, signal 191622/203424 (executing program) 2022/09/29 04:15:54 fetching corpus: 4650, signal 192352/203732 (executing program) 2022/09/29 04:15:54 fetching corpus: 4700, signal 192906/203918 (executing program) 2022/09/29 04:15:54 fetching corpus: 4750, signal 194031/204135 (executing program) 2022/09/29 04:15:54 fetching corpus: 4800, signal 194418/204259 (executing program) 2022/09/29 04:15:54 fetching corpus: 4850, signal 195098/204408 (executing program) 2022/09/29 04:15:54 fetching corpus: 4900, signal 195886/204589 (executing program) 2022/09/29 04:15:55 fetching corpus: 4950, signal 196637/204713 (executing program) 2022/09/29 04:15:55 fetching corpus: 5000, signal 197245/204815 (executing program) 2022/09/29 04:15:55 fetching corpus: 5050, signal 197683/204895 (executing program) 2022/09/29 04:15:55 fetching corpus: 5100, signal 198202/204921 (executing program) 2022/09/29 04:15:55 fetching corpus: 5110, signal 198232/204921 (executing program) 2022/09/29 04:15:55 fetching corpus: 5110, signal 198232/204921 (executing program) 2022/09/29 04:15:57 starting 8 fuzzer processes 04:15:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x8091}, 0xc845) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x104, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x30}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x104}, 0x1, 0x0, 0x0, 0x61}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r5 = dup(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x840) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x3, 0x1, 0x4c, @remote, @mcast1, 0x80, 0x8, 0x81d2, 0x8}}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x20a, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c044) r8 = syz_open_dev$vcsn(&(0x7f0000000b80), 0x380000000, 0x10900) ioctl$RTC_VL_CLR(r8, 0x7014) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000c00)={{0x2, 0x7}, 0x100, './file0\x00'}) 04:15:57 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cab61d1739ab03fdf713fe9803611929acf9603033aa685ab9f55fb9b12fcaf404909dff5a40bd3568c50b9c5f314dbfee5bbea23bbeecfd1cc908c9de3657bc5582bbb3c12bec482604b222691cb6921af3050f1d4a5a8a7606f076edaccc092fa2c86173101a051689951867cc1979740fb99865c6853ae8ed0eb6a7f0a6877e2f2e3a0e50cb2073", 0x89}, {&(0x7f00000000c0)="3aba93f7728eaab1014dac11a5508c4f5fd669b060a1fb63aa72868adc755552c39c4e2cd85c5e863b3f029e5b188a4beaa10f487df03062dd4bd9df85ad1050479ea4d73cc3538815", 0x49}, {&(0x7f0000000140)="8a93e6a424b3bfc2619d1d4cd869916d73183783bead610047076397b826fbdb0f60fb26e45d37215500437cd6", 0x2d}, {&(0x7f0000000180)="bc8c08697e699ff18cdff2087003a0353ea90ee8e28b21a1562a8f4c41203bd6778c81a28d8861bd306792eaadfbcc1bd53bd5cf75caca39eec3e424ef876256779b164b7b89dc2527960198817a241673fa5bdd617f48eb6f0079dc2f17fdfe747091b58c585b094ca990b7f8b2427df78b3bd7ae5d59059dad61d549bdf39b97c97ad203f7d56eae32e3", 0x8b}, {&(0x7f0000000240)="4f4e1a304f23eea3aff713e052ef6467cc56d0b10dd4a95738", 0x19}, {&(0x7f0000000280)="8b33e1bef389476db309e21056dcf0c448e4d06dd85081e024d38e48575e1bed460888947e503e4efeacdefe25da6e09590a337a15e7eec683d5c20d22ffc10e64a5", 0x42}], 0x6, &(0x7f0000000380)=[@tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @hoplimit={{0x14, 0x29, 0x34, 0x5b3d}}, @rthdr={{0x18, 0x29, 0x39, {0x11, 0x0, 0x2, 0x8d}}}, @rthdrdstopts={{0xe0, 0x29, 0x37, {0x16, 0x18, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x1ff}, @generic={0x3, 0x93, "c96f53822f122054384e31c06ee4b8b8b1bfad08f0a14f647fbc5541b234b42f802ee622025812a7db45ae3b4485771c2971925e3e7aa8f5e5d030ad869872b6f3d42942e4564c5f9aeaa8eaf7b6e8aa4202289a08fc1d48605b4f9c9335ba1065a09258085ab32bf069e6a472a0617653cc52b940a535caea18f07039bff1435cc127fb817560681179a4fe44fcc30a12dd86"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x10, {0x0, 0x2, 0xff, 0x1, [0x1]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dstopts={{0x60, 0x29, 0x37, {0x0, 0x8, '\x00', [@ra={0x5, 0x2, 0x8000}, @calipso={0x7, 0x38, {0x1, 0xc, 0x8, 0x5, [0x8, 0xff, 0x4, 0x2, 0x68c, 0x8001]}}, @pad1]}}}], 0x1b8}, 0x84) r0 = openat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x1, 0x40, 0x12}, 0x18) r1 = accept$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000800)) open_by_handle_at(r0, &(0x7f0000000840)=@fuse={0xc, 0x81, {0x0, 0x1a66, 0x4}}, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000900)={'gre0\x00', r2, 0x8000, 0x8, 0x7f, 0x2408, {{0x30, 0x4, 0x0, 0x3e, 0xc0, 0x68, 0x200, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x44, 0xe5, 0x1, 0x1, [{@multicast2, 0x5}, {@multicast2}, {@private=0xa010100, 0xbd}, {@loopback, 0xffffffff}, {@local, 0x9}, {@multicast1, 0x3ff}, {@loopback, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x32, 0x3, 0x3, [{@rand_addr=0x64010101, 0xffffffff}, {@broadcast, 0x5}, {@multicast1, 0x101}]}, @end, @cipso={0x86, 0x2a, 0x3, [{0x8, 0x9, "2b61cc0849fa81"}, {0x6, 0x9, "379fea483fd973"}, {0x7, 0x12, "e940234c875a0b71a403e4332564b0d7"}]}, @rr={0x7, 0x1f, 0x27, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000b80)={&(0x7f0000000880), 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xf4, 0x0, 0x112, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getpeername$packet(r0, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) r7 = syz_open_dev$vcsa(&(0x7f0000000c40), 0xfffffffffffffc00, 0x8080) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000c80)={@rand_addr, @empty}, &(0x7f0000000cc0)=0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000d00)) r8 = syz_io_uring_complete(0x0) read$hiddev(r8, &(0x7f0000000f00)=""/218, 0xda) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000001000)={'ip6_vti0\x00', r6, 0x4, 0x18, 0x1a, 0x2, 0x7, @loopback, @loopback, 0x80, 0x80, 0x7fff, 0x7f}}) accept$inet(r0, &(0x7f00000010c0)={0x2, 0x0, @initdev}, &(0x7f0000001100)=0x10) r9 = accept4$inet6(r8, &(0x7f0000001140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001180)=0x1c, 0x180800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001240)={'ip6tnl0\x00', &(0x7f00000011c0)={'syztnl0\x00', r5, 0x2f, 0x1f, 0x3f, 0x2, 0x21, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x1, 0x3ff, 0x6}}) 04:15:57 executing program 4: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000000)="62bba593c9d658bad53a4dd416a49cde1c137e72e56e7c4b417d2938ef7ed97a7b5b2045b91580e3478302e6cd9fb7f8887d2b615aff2b8e60ce5016c5bde9d5037a45a1a5f490d556b25b72e09097fc0fba3fccf54216cb219c186add195f0a8e52043449ee1379a0bde42f6608f593d058f4f4ff9ab0ebc8f57f0ed21b4b0f9813d564054a2d5e4571934622918b9dabebe2543426b9fbc994", 0x9a) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic={0x3, 0x8, 0x6}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)="581601177551c0be34594ce5c0c9582b820c3e7782e441663a8de6425af53ecd67bc150f29b7c96ff875e21b4ac0fc2f814f7baebac9a55a7df5cc7a247864483428b3e04da79645fcca96d42bf2a368ea94eb8a9545792cd0f65f72ed2d76cee0daa2ff087bbed691295ce34b8687cb8fc5b97356062297d8b169ac1b33d78db6da7e6bdf7138f34f6a9c68caa8e2c5d5a7a8d3d319e0d4360c42210e08bd578a05e79e6f0ef2d10031b099fc8ddcda4ded9977386975e830055e292702cc57d2fd114f32042f", 0xc7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000200)) r1 = socket(0x9, 0xa, 0x2) bind(r1, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x2}, 0x80) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7f}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @ethernet={0x1, @broadcast}, 0x6, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='ip6gretap0\x00', 0xfffffffffffffff7, 0xfffffffffffffff9, 0x8}) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000380)=0xdd, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) accept4(r0, 0x0, &(0x7f0000000500), 0x80800) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x4, 0x3, 0x8, 0x7ff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x67, 0x10, 0x7, 0x4}}) sendmmsg$sock(r2, &(0x7f0000001940)=[{{&(0x7f0000000640)=@ll={0x11, 0x8, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000006c0)="41c2daa26e6dfcd1a88fc325b8", 0xd}, {&(0x7f0000000700)="ff66a8faf9178f802dde08672d523ec389154149c19eb29459e56654a07ed6d78614f1da21d0763b20983882f842202a4a3ac428d7e2f023154f3f65688862f848182825378d35ef", 0x48}, {&(0x7f0000000780)="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", 0xfe}, {&(0x7f0000000880)="ff5fc80a6ce9c559f4ee63e975f9afd99979ef148f6a97eac29d99692906a1a51a31eb503ade98d2ba8e75623a96c1da40e5e4fe604836cb39b6a3a88086ed63a2f38f67a66b45370647dbb87e9c9a701b2f858cd48250484de43e069b257a0b9b73ff5468b23ae9a9283d2f4cc841f3117f04cb41a4aab398daa712137a39a6df1006dc6e81a19f7cd35654de4584434a94a0a1bd6250e3048c0e0fdecac83a506958679e461146d2f20bf17a8b4cb7aa2bf88d1f64565a0094f4f17d6a394aa78acd8ea410fbd3d919d0fc8a82b5013d0ab454554dc98d30c75fddf87ea3affb987f824a57abea330d70185b191eb2e3573319c1abb1744127703a450044afb28a8f8bca0c77e8b4023ace48524abe470ea7c87014e4bf70836e90c77e61dc2bd83d7829d1b458897532f24f8f5a4224f00872652cb8baa231ca96fb7318b91c60102e3925710dad2adab8f8bfeb55ec05ecd77fce907cc53c37797a7c7a341781b8334862ed4ec79f0eab1cd1918b3946b478ae86404e3ca3aaa07492a3c4322f9a19f7a411b6a6394ef04bce07dc84748b1681ec7dec80dd3daa3f3191719247abaf53f84b3829c1d1a21abbc3757e2345a6ea19413ea98888bf69a1d5b8cae2e2e1968c77ee9068a3bb05b2944078d3c9bd82ccf70cb90878723d50a24c7201c33aff14a218c68b5335df8c6c40acb2bbfc17c86f951f89ae9e9379c5fb37503a8a350e6c396d7544ad7eb1ae95bca07e23aac80d5fa4ee86dd14032c5a28f0d6c0aa44e916c932fdca68c6bb12dda02c207896afe28c1b343e7661d406f812841e2d3c3841eb27e120318f7f693b67684203b36c7676d3e369ddfef7ebb4b40f58c14527846b2825ad73295613ad0696489edf4db0ec600937b1be77acbd2596ef564658faddb206e536356de3aa162efb622d6f4a6c4ae2cf763832a9d013db3181c62484335b96bb47d9a1aca017d47f32a440981d67c76dc795c75ee87d77ad582503eb66e7b8d488aa94e738cead238541400fc8387ab6353f5973517fb0373f246c74df105c56b7c193ede113a3819c50f7a6a4d59b32ffa8c7bdaa05195a42280e41872a7b282adf3070262fde5aee8b696cce6167c217b7fb56208a2f2234a69be77874ea105fca046a64dc442c0e73d219de2910f6490b76b7ab5d2276772481e3f0fd3390589413b85d2b2b46c9dfb179695b622620763f32f4caf2334e7b9b2178b1a22cbb27bc3ff95c7d806ca6059808d9b9ed2bd50682eceb7fbf195338d7251f5358c60c009b9cc598fc1c0f00fb2ca74802584fef8a44ba456720d33a1c754703da8e618e1eafbceb5bff1142e9c06bd51038c10eb82e594b1ce220f307372b13e43f592001a49df626339973408f11882c672c6ec716d2e8a4c797f7e6491728c6853c1bdde8dc953124bc10ec511dba9c88483326348dc3f779e78820687677b5eec31d45e0efab04748467b7ca0feae4caff97fa52091175e66679f9d5711c6c74acf7742ae948b2ee2bb354eff1e627610217776b28174340b08c99a5315ff083b54c226967593a3fe6b9a06c9e9bc6091e904a0898b5605535181eefad09e0d7cf0bfbd372ee9dfb5bda4010fe8fb72fe882e52fd01d28c556bdcfca06a421b4e6e7e422180bf856c836c4f25a5ec9b99b12f8ad21e4c5385450ec230dc77a91d7b92af1adfc491a8d49b1f058b0e0d9864d43d3bf15ada02796ae12e618483a8fd5bbbfc4a1eafb30d0df684063c5a3b605dd263b8d4c6c8c9350f295f6be62d40f19de45cd4ad136e264312ce69ffeb7e6ecf1c30e16f849414447e8d901762af5d33e090df59bba7fa68830e43f4bb52106c3589d042a786fcd9f82e4728e5ee7cfc9002c97b626754232502752accd1f49f3da2187d65b9f93644c489ee9f5eff88a0fa9b3933757316f40645e984a73f72783c19b634d2841cae7c6c6a63a8eb67ae7f2a4ebbea2e77f566f2098d3252b8503952244964353b4fb0fee813452e6c173fc2c9b97709bf8dafced2d2a9d9341458f821cd7ac26c226eab65dcd537024d868ada5e9ceb9478533e8f0d00aadf5e4e04bc5b6afc26292846c0895c647a0513f8254a5bf9f87cbd4431d4111c2a73e84ba3d3308f6ffbb982ad1a352a2a3bf37a95b6d88bff83b984e0e525e54d424aced1e0c5357ab350675018dd696a9dd1f0e283b3302af1cf811c384e3232d8a25ef158ec2b7d19c1423996bb7c6a4b97ed19d9db8ffdf27af4b9efd25fda2b2a5f42eae0dbf5a5b16ac8fc7ab0826890c4644e747f1b01fe9d0e71c1c24854e06239b1c58bfa8e7f65222b68f54e7d388351fca05f350b4cb90c63e35e1c08b5cd80a65b877589cc3e4cc8f484f15cdb6844ef7eb33449b2371f198abbe0ed8b73cdd283115cd57ca7fa3794c07fa9a7fce69d67818c45eedf4d4ed185c08da39bde3bd07bd6750660ab8fcccde20e381dca7a0f6bfc1f149b4548a7bf517bd7904d811748aa52cec882a052533dab236da8373f8fa505e8552c5e49cffc4878570feac59abcdc0b52926c77d5002d06dc77a68bd44b05c15e0fc4ed0a955bf8abf35bfe945e8c76533a09940a2e7ce742120e66e2bf73561b7da9e49de023106eb5d30eeab94d6e61120ae1603426ffd762b10133eeb41fa146476b49ccb349f048f852b8ed989215ffaddf05b2d9343a1dd1bc3e1ef8c26410844bc53ac84d7b2ae8f98a47634275aefad0effe1ec2313ff80a7eac780ef6fb1ecd93c2a37558cdfee8a507f8c3a0d67e19036cdb78c4b743459a05631b662c91670748abc36e21c921843008a24932e63a49344fa7e247c85a48714d771fedede2752e2b505c572eaf3abbbd1e0cae8a7713c6913ea159c49ad6d64a21919b2c89967796a3553b22f99bb213b15e31f1954c1d82c352a59cc66a13100a9a5fa31747234e31c337d2a2a1fd635c81e76c29570fa9441df65f55e7010bc0b8374b25be7e06c89b25528dc6ee68f5f335b2c41ed9d3adb6159e5f0e7e62c25f4647f03ea28ef5d1b827e68bf73f2b6fba23a0c5e79ea43c83fc287daabd29be4e3dd001de553825930a0d2947d03afbfadbf0b610d2b567450668e77cb2580c55715abb0b286e051c20c3f0145dd2d7e375df4ffc5377d997426df3b6f685d212a83051684d4da2768ccf301884c84d818596a574712f255ac228568f8cb1bead26444641fa0d3888a34fdfd23d7bb3d8e262d3d1f983954bd5e1d3847df42d26294667f152050c73dcd5f7ac42f22bc93ffcf9301f9399e2a2a485e190e30ead138765d9b12ea18e86189cdf2980b61a1c6109455b5bfc3d374eaec1120e91da8f1b8ac2e74981af0da7f049cfc45368999e6359917460c264e232dcc6ce22518f82c057522aad90db391bda79b564cbbe1cf05bb95b6d88340c2181b89d2b34972e4611d04aa7987280770a111053c7d2380e8ec5a74a3409ecbc9cadfbb895ef79d0d931316b4a53e11234eb137a1746d19ee20affd0b62d54b2a4340f291f5ecf9c033653c0d1f9fb5b9c591c858fe1ade33a9c876b8432baee28dae8e8c1cd5ad17dc1ec4a0e545c6fc9d1f250a97e063265142b3d209311fc57d12476d2a676358747525194247ae9dc581eca9b3f3cb3337a26cc4fb966eb5ac7b92ecd304735a5037db5631426d48e83da25f4d76cbba571a37669e8ce89da46396e93fc918f2495b7b32adc620a5bdf2ebd2c5192d22bf198935639d48e4a7b616f7fe22005fa0ce6bf83cbf094469e14f023e6db90531aa4c04a67354c3be5041517d2f5303e8d7c83402ae5f994de4a84876dee3dff65ee3106ee599182dad9479eed90b6154750dcacb1d0cb259291317b6a0e43a486e74709a9525f75074a69c20775841dd7dcb808aca95bf1df93b94cc024a73ab772e7ccfa779618b6076ab35ff38c4862c22a65815c02be63d6e3b4c2736ba423293140673bc92221ee57d20429115ad329376de483365a3aa917fca1f66288ff20e993f21831e0622a3162db90a500812cad491ef98f6023154ab463d5cbb6c428d8878b7ab6514042874c392dbea5b2aa3c19b9b8a0c7560a125106d07388a83af3890cbfe678400c44d672b99434210e0c603c2180d13c972aaf6ceb60258da6d9523851d22529acb203ab5ca55171cc334652f41475bc9b2e2178dc4a8b9a79a9ca8ec9b71ba360250392e8a12538f78d4eaeeea361572e31e13d50fa4789b823318ee4bd81e3b4e2b0fe2a55a5cf24882232b53cd93a6c0617df07c13d694564fc04de2b049efad8407b063677855f0b5a5d7181b72919df4cfb5e8251efbcf634423df8a0ba2c7cd32e935cacd59e6385318970b445abf59ea3930b1c5aa3df64b2a7376a5963c876bc4df9a8ecbff2e38f5db48b0ce7aa2310becb4187ecb0dff3fd225a590be7180f35539da31e273cd3eb348853a0fbf5527b92c2c0ffcacf3ba61071fbdcecc8d73c67badaf9cf1803f68c4e870aa7841325fd1e5aed4dc5d7178c588a5b646ae6a28063a34309ed891ce0660f5f919970570226f4e8261c14ecde6aaf2b2f2ac30800e0335d94862c9925963a509c76a67504a2bdcc4dc7233d391ed2b6ae2401434af73e394bff22132b5ba6e3e8d99c9e7d705a9f6eef678ee111ed4f73e91d0f465eb9fc858fe20e72f95f1382362eb905ac65c665f9b3eef45c8070b8ccdda163d9a2bc59b8051d539b41eb97d6d17247d3842c981cd790fe77feaf6e0d1437a0e2f912bc8c0e0e99070e02b0889b5388b12bc48cfd6b25667a9267ab0a26ad072e13b242322bf6bb86314cc0a98b7ae976b6d45e9e68ad1d5676ab72f02e73d665ec085dbf4272004b2b13c99ebf49c556ebc48dc13035e6ee78c87d7324c8267e4af8366ccf5687af6dc50fc840a259449c8bda85583f6e20b886abdab72f0cb4c120f1efd4b5b43474c17c25fb3690a92b26d6a136130165928f271f204ab935b0ca2c79e8b40e65b60d560b0f7178d89e179b7441044854f858f7843631efef3c8dd5c1e38bf4adad0b70fcc5579ad0d853b71459992a16697417251edfde3e93f31514e857504b8ac251f61dc7f8fd81d5fdd8acb2af475034ac9601372807081c5ecac2146a38d404c73d14e5651a285e0ec15a391327f1d6532b9ed1db0e00271eda6eecec9f8461a4a668a8fef6db19e6947024a765b2be2fff4ce817cf052a599017d96162f26c4a268339902119cb6d105679ec59aee38a75dcb8e2a216eeb81d2ee4c0e3d622eb9e31e009be5afbc82a59e1b0e0bb44dd1f0d94300c52b3b8be709cc7c1d1a47bfe4649e1ddb49be03d95e537a001518a436252f17b92ea4eea97b25198704a134a351d690422fe900391650c88c11a684cbd9fe51c2b98051481317a47a489f267eb3868e4d762a9eaaec1e693c8dc264404c637de2e6ce9e3ad7f2f646705eacd9a23829c0ad1ba38421176230228e6633968bf3736cdc52ffbc80e462b390e39247ea7729676fbb649b336577857fdd44c5b342f16bdedf0cfdd32723b841c81e4947e40c47620d2b963497d004d2e8247dc82a1b334c1fbb1d3bfe9514a84f17184cbabebad3731210651601260795e5e242c8933c6477b2eef70ea6c5f6c15d9556a0e6693dc1342956f535b712d023b491e2d70ad3df4210577e22d8bfe6899e71af6d0b142216b8de33e7d44a4aa721cbfddd6024b32af962052b3cae0398d27b9dd4020bb7f108ea0da50fdbd38026b9ba40c596b5f5a19147a5dc0e2a8ef16d47197f61d5d43ff6232ce4054a986e7fd2", 0x1000}], 0x4, &(0x7f00000018c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xaa}}, @mark={{0x14, 0x1, 0x24, 0xffff7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xe5}}], 0x78}}], 0x1, 0x4004054) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001980)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r4, &(0x7f0000001b00)={&(0x7f00000019c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001a00)="789e9e3abe652a93b51b2c30233d98b093a19bec43f52334c4a40da0477a10d6eae512", 0x23}], 0x1, &(0x7f0000001a80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x48}, 0x10) write$binfmt_elf32(r0, &(0x7f0000001b40)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x2, 0x9, 0x1e, 0x0, 0x3, 0x3e, 0x7, 0x0, 0x38, 0xb6, 0x1, 0x4, 0x20, 0x1, 0x8, 0x8, 0x7ff}, [{0x2, 0x3ff, 0x1, 0x5, 0x6, 0x5, 0x1, 0xffffd95c}], "79c31f63add0808d9483698a4f175c9ce5cf553f6c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x66d) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000022c0)={'syztnl0\x00', &(0x7f0000002240)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x96, 0x98d4, 0x24, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x10, 0x2, 0x3}}) 04:15:57 executing program 3: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000000040)={0x1100, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xe6, 0x45, "6b07df5644792e97920670bbeb3a856db62c29513c4e84bed65f51dbbadcabbc4e2bf53b867e46ef98e68d87d274d76d8c47023b9790a518d00f6d759480847d0318407bd202ef7c206fc950c4d0372aeced1e7f70e533aa1f462378dd05e22e1ebd5512badb53b31faf979224ba2a47bccd959caaeaa7f58a343c7153a3fd4da73197a40656cc1facba1d8aff41ffc27560f1ad36e6a139740dd21d8f32eafb4cb3eccc43fcefc55bedfd21a4139a546507d1fb1b1b9f32c7eef39a64d24b83b29f1b7296938de8f7b2c8157f0cb1f14236c0fce963b8b7f1c572bf4f5d6d52b67c"}]}, 0x1100}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x46}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x8871) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x1f0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff3}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd8}, {0x6, 0x11, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x100}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1c000}, 0xc0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001580), 0xc, &(0x7f0000001980)={&(0x7f00000015c0)={0x384, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xed, 0x3, "e1d943d94d8a6c3f1994acd807bf269c801eccf2e258de0ab95f37ca91b410946833f00fc2f037bc29591f9973e597311a93021f1f7ae9bd937afc012ac75bc46d242d3a5223be43b79a0da8e25a8a61128c61d116abf2064865da10b6876f500c84c64019eb25a3d19a3b1f3fab01447ee0bc61fa8f1c2c4f387f67680ba3f87a33b605b75a7abc01dcac215058b75ef6a66eb29033cdf66ce19c130b7efda6d1eb6341e48390342f45d6e7b268c9b59fc1169721e2933c2b5ba647d6d0fd7ab97ef4087b42c960ae042fe7cac5a590d6548ece8462e3114c4f06239299bf6e3850a141ed4bea3120"}, @TIPC_NLA_NODE_ID={0x74, 0x3, "f03703525dc5fa74e5ed2fc2088aa550390051e051ebb497b5cc361c74b24094a7c8fc188d8da463a08ac40e12c2d44e235860cc43b190d0d4484944cfb32ffbec24e61908a89a7ee7d3f865aae93613625285bc079f27b311e675ef0f482aace9535aa474aaa277f702918028bae586"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "8b4f205c2b4eff6bf0a100d420e4492c8810a2f8a1aabed35110dd034de8ff6ca563dda4"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a8fc64f8a6bd4be63575b8986647de2d3cad7eede78577cc15248974"}}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7d0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x70}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x56da}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1dfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf93}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff8000, @loopback, 0x4}}}}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_genetlink_get_family_id$gtp(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0x88, 0x0, 0x420, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x9080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xfc, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x78, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x60, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7f, 0x4}, {0x20, 0x7}, {0x61, 0x5}, {0xf9}, {0x20, 0x5}, {0x9, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x80}, {0x0, 0x5}, {0x1f, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x20, 0x4}, {0x45, 0x5}, {0x4, 0x4}, {0x80, 0x2}, {0x1, 0x5}, {0x5, 0x6}, {}], "965468ee71df5fe6"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0000}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000002580)={0xfffffffffffffffc, 0x0, &(0x7f0000002540)={&(0x7f00000022c0)={0x254, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb0fc}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb4c7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x82}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf3}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x67e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa7a}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1fffc000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008880}, 0x110) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8200200}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4018004) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000055c0)={{0x1, 0x1, 0x18, r2, {0x2bc}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000005700)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x8da10817329a3817}, 0xc, &(0x7f00000056c0)={&(0x7f0000005640)={0x68, r1, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 04:15:57 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x20004000) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x2004c800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xaec5, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1ba56141f7d045b1}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x2bc, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5cd57da578dc01d459ae4ddc7c607032"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "89b0f47fc6df89e96f68604f87f59a80"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2da6f36121eff614d3d1a9b5dc96a81a3f2b0486ce00ced886a9ed68042b4db4"}]}, @NL802154_ATTR_SEC_KEY={0xe4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79f013184bd92031436e95f91e0309e9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a97bcf26c002d0800c5c5e14a3e792a3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9dfe9adbe182702c3fd1d5479a9b3c041cfb023ffae1666f18bc24d783eefef9"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "54803e3ff188026110d7d485ab28e377"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x154, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "09bf6ad0d30f271d30f8bf1c1f78bef8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "18d937dd8098e06162b7c299324dd5b0"}, @NL802154_KEY_ATTR_ID={0xb4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x6c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b237b98c05e7512e9841de77e3f52043fa126db688553a5aecd483845e362198"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "254017adb89777c771490c260d93edc92d9a8ff9214499b52e77cb93324ab6d3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4f3d3848fdfc7831ad57256af0a5ecd631ed5de219468c9b02f1abfae80dcc95"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4044}, 0x40) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1c8, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe02}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x629}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74d3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1c8}}, 0x4040) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1d4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81ac}, {0x6, 0x11, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x3ebe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xffc1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdff}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = dup2(r1, r1) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x84002004}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3b}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) r6 = openat2(r5, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x101000, 0x14, 0x1}, 0x18) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}}, 0x8000) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000001140)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001180)={{0x1, 0x1, 0x18, r7, {0xfff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000011c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x86}}, './file0\x00'}) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xd0, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48040}, 0x4020840) 04:15:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "bffe6346206d6184193c018d9ece"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x8030}, 0x80) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x24e1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48001}, 0x8890) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48001}, 0xa082dfdfe942ba4b) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="5c0a3c1ee2f4"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x40044) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000008c0)={0x80000000}) readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/71, 0x47}, {&(0x7f0000000980)=""/122, 0x7a}, {&(0x7f0000000a00)=""/239, 0xef}], 0x3) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000b40)={'team_slave_0\x00', {0x2, 0x0, @initdev}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x6400269bbaae6f7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x74, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x99}, 0x20000000) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000e00)={0x0, @rand_addr, @initdev}, &(0x7f0000000e40)=0xc) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4040010) [ 65.082144] audit: type=1400 audit(1664424957.476:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:15:57 executing program 7: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004810) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x8, 0x6, 0x302, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20040014) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0xc008091}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044084}, 0x20008000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000940), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r6) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x55}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1f}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004e011}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000001c40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x154, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000811}, 0x4004000) 04:15:57 executing program 6: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x3}, {0x0, 0x2}, 0x8, 0x2, 0x60}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000080)={0x2, 0x5, 0x1, 'queue0\x00', 0x6d}) r0 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @aes128, 0x0, @desc4}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r2 = dup2(r0, r1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x6, 0x8, 0x100000001, 0x400}) recvmsg$unix(r2, &(0x7f0000001540)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/82, 0x52}], 0x4, &(0x7f0000001480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x82) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000001580)) r7 = signalfd(r4, &(0x7f00000015c0)={[0x6]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000001600)={0x5, 0x4, 0x1, 'queue1\x00', 0x9}) write$sndseq(r5, &(0x7f00000016c0)=[{0x4, 0x6, 0x1, 0x9, @tick=0x4a95, {}, {0x6, 0x2}, @time=@time={0x3}}, {0x3, 0x5, 0x80, 0x1f, @tick=0x200, {0x7, 0xfb}, {0x7, 0x6}, @time=@time={0x80000000, 0x479}}, {0x2, 0x8, 0x8, 0x2, @tick=0x9f, {0x7f}, {0x40, 0x3}, @raw32={[0x200, 0x3]}}, {0x5, 0x14, 0xff, 0x83, @time={0x9, 0x8}, {0xfa, 0x20}, {0x81, 0x11}, @connect={{0x2a, 0xa6}, {0x8, 0x41}}}, {0x1, 0x2, 0x1, 0x1, @time={0x0, 0x7}, {0x0, 0x87}, {0xe5, 0x70}, @time=@tick=0xff}, {0x3, 0x6, 0x4, 0x66, @tick=0x6, {0x1f, 0x3f}, {0x5, 0x3f}, @result={0x9f, 0x101}}, {0x20, 0x7, 0x23, 0xfa, @tick=0x80000000, {0xd3, 0x20}, {0x3, 0x3f}, @addr={0x1, 0x9}}, {0x1, 0xff, 0x35, 0x3, @tick=0x1, {0x1, 0x8a}, {0x40, 0xcb}, @note={0x33, 0x7f, 0x4, 0xff, 0x7}}], 0xe0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000017c0)={0x11, @broadcast, 0x4e24, 0x1, 'lc\x00', 0x14, 0x8, 0x7}, 0x2c) openat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x222200, 0x12c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001840)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/keys\x00', 0x0, 0x0) pipe(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001900)={0x0}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001d00)={r9, "8c79454df38770a7e2dfe5aa34ebf143"}) renameat(0xffffffffffffffff, &(0x7f0000002d40)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002dc0)='./file0\x00') [ 66.319685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.323218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.325060] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.328505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.339761] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.341108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.351530] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.398015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.408910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.410999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.412393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.413753] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.415097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.416184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.417397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.419543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.423604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.426025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.429362] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.430857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.431933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.433066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.434565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.439832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.440991] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.441424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.446754] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.455353] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.486702] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.488992] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.490814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.494460] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.503017] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.504634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.511850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.512878] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.543780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.544068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.546794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.548411] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.551698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.567511] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.568287] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.570700] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.571714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.572749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.574120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.578197] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.583416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.610445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.611111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.634653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.640081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.641494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.644164] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.652053] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.408044] Bluetooth: hci0: command 0x0409 tx timeout [ 68.470424] Bluetooth: hci1: command 0x0409 tx timeout [ 68.470504] Bluetooth: hci3: command 0x0409 tx timeout [ 68.471224] Bluetooth: hci5: command 0x0409 tx timeout [ 68.534359] Bluetooth: hci7: command 0x0409 tx timeout [ 68.598347] Bluetooth: hci6: command 0x0409 tx timeout [ 68.662361] Bluetooth: hci4: command 0x0409 tx timeout [ 68.662389] Bluetooth: hci2: command 0x0409 tx timeout [ 70.454497] Bluetooth: hci0: command 0x041b tx timeout [ 70.518386] Bluetooth: hci3: command 0x041b tx timeout [ 70.519437] Bluetooth: hci1: command 0x041b tx timeout [ 70.520099] Bluetooth: hci5: command 0x041b tx timeout [ 70.583403] Bluetooth: hci7: command 0x041b tx timeout [ 70.647340] Bluetooth: hci6: command 0x041b tx timeout [ 70.710411] Bluetooth: hci2: command 0x041b tx timeout [ 70.711753] Bluetooth: hci4: command 0x041b tx timeout [ 72.502366] Bluetooth: hci0: command 0x040f tx timeout [ 72.566351] Bluetooth: hci5: command 0x040f tx timeout [ 72.566831] Bluetooth: hci1: command 0x040f tx timeout [ 72.567314] Bluetooth: hci3: command 0x040f tx timeout [ 72.630309] Bluetooth: hci7: command 0x040f tx timeout [ 72.694316] Bluetooth: hci6: command 0x040f tx timeout [ 72.758346] Bluetooth: hci4: command 0x040f tx timeout [ 72.758809] Bluetooth: hci2: command 0x040f tx timeout [ 74.550304] Bluetooth: hci0: command 0x0419 tx timeout [ 74.614324] Bluetooth: hci3: command 0x0419 tx timeout [ 74.614797] Bluetooth: hci1: command 0x0419 tx timeout [ 74.615196] Bluetooth: hci5: command 0x0419 tx timeout [ 74.678953] Bluetooth: hci7: command 0x0419 tx timeout [ 74.742428] Bluetooth: hci6: command 0x0419 tx timeout [ 74.806312] Bluetooth: hci2: command 0x0419 tx timeout [ 74.806788] Bluetooth: hci4: command 0x0419 tx timeout 04:16:51 executing program 1: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x80, 0x0, 0x84, 0x0, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x58602, 0x0, 0x7, 0x6, 0x1000, 0xfff, 0x5, 0x0, 0xd4, 0x0, 0x7fffffff}, 0x0, 0x4, r0, 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 118.987921] audit: type=1400 audit(1664425011.382:7): avc: denied { open } for pid=3773 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.990289] audit: type=1400 audit(1664425011.382:8): avc: denied { kernel } for pid=3773 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.006049] ------------[ cut here ]------------ [ 119.006073] [ 119.006077] ====================================================== [ 119.006081] WARNING: possible circular locking dependency detected [ 119.006086] 6.0.0-rc7-next-20220928 #1 Not tainted [ 119.006092] ------------------------------------------------------ [ 119.006096] syz-executor.1/3776 is trying to acquire lock: [ 119.006103] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.006148] [ 119.006148] but task is already holding lock: [ 119.006152] ffff88800e337020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.006182] [ 119.006182] which lock already depends on the new lock. [ 119.006182] [ 119.006185] [ 119.006185] the existing dependency chain (in reverse order) is: [ 119.006189] [ 119.006189] -> #3 (&ctx->lock){....}-{2:2}: [ 119.006204] _raw_spin_lock+0x2a/0x40 [ 119.006217] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.006231] __schedule+0xedd/0x2470 [ 119.006252] preempt_schedule_common+0x45/0xc0 [ 119.006270] __cond_resched+0x17/0x30 [ 119.006288] __mutex_lock+0xa3/0x14d0 [ 119.006307] __do_sys_perf_event_open+0x1eec/0x32c0 [ 119.006322] do_syscall_64+0x3b/0x90 [ 119.006333] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.006348] [ 119.006348] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.006363] _raw_spin_lock_nested+0x30/0x40 [ 119.006376] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.006391] task_fork_fair+0x63/0x4d0 [ 119.006410] sched_cgroup_fork+0x3d0/0x540 [ 119.006425] copy_process+0x4183/0x6e20 [ 119.006437] kernel_clone+0xe7/0x890 [ 119.006447] user_mode_thread+0xad/0xf0 [ 119.006458] rest_init+0x24/0x250 [ 119.006472] arch_call_rest_init+0xf/0x14 [ 119.006493] start_kernel+0x4c6/0x4eb [ 119.006511] secondary_startup_64_no_verify+0xe0/0xeb [ 119.006526] [ 119.006526] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.006541] _raw_spin_lock_irqsave+0x39/0x60 [ 119.006554] try_to_wake_up+0xab/0x1930 [ 119.006568] up+0x75/0xb0 [ 119.006586] __up_console_sem+0x6e/0x80 [ 119.006603] console_unlock+0x46a/0x590 [ 119.006621] vprintk_emit+0x1bd/0x560 [ 119.006639] vprintk+0x84/0xa0 [ 119.006657] _printk+0xba/0xf1 [ 119.006672] kauditd_hold_skb.cold+0x3f/0x4e [ 119.006693] kauditd_send_queue+0x233/0x290 [ 119.006709] kauditd_thread+0x5da/0x9a0 [ 119.006724] kthread+0x2ed/0x3a0 [ 119.006741] ret_from_fork+0x22/0x30 [ 119.006754] [ 119.006754] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.006768] __lock_acquire+0x2a02/0x5e70 [ 119.006787] lock_acquire+0x1a2/0x530 [ 119.006804] _raw_spin_lock_irqsave+0x39/0x60 [ 119.006817] down_trylock+0xe/0x70 [ 119.006836] __down_trylock_console_sem+0x3b/0xd0 [ 119.006854] vprintk_emit+0x16b/0x560 [ 119.006872] vprintk+0x84/0xa0 [ 119.006890] _printk+0xba/0xf1 [ 119.006903] report_bug.cold+0x72/0xab [ 119.006913] handle_bug+0x3c/0x70 [ 119.006923] exc_invalid_op+0x14/0x50 [ 119.006934] asm_exc_invalid_op+0x16/0x20 [ 119.006949] group_sched_out.part.0+0x2c7/0x460 [ 119.006961] ctx_sched_out+0x8f1/0xc10 [ 119.006971] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.006985] __schedule+0xedd/0x2470 [ 119.007002] preempt_schedule_common+0x45/0xc0 [ 119.007020] __cond_resched+0x17/0x30 [ 119.007037] __mutex_lock+0xa3/0x14d0 [ 119.007056] __do_sys_perf_event_open+0x1eec/0x32c0 [ 119.007070] do_syscall_64+0x3b/0x90 [ 119.007080] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.007096] [ 119.007096] other info that might help us debug this: [ 119.007096] [ 119.007098] Chain exists of: [ 119.007098] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.007098] [ 119.007114] Possible unsafe locking scenario: [ 119.007114] [ 119.007116] CPU0 CPU1 [ 119.007119] ---- ---- [ 119.007122] lock(&ctx->lock); [ 119.007128] lock(&rq->__lock); [ 119.007135] lock(&ctx->lock); [ 119.007141] lock((console_sem).lock); [ 119.007147] [ 119.007147] *** DEADLOCK *** [ 119.007147] [ 119.007149] 2 locks held by syz-executor.1/3776: [ 119.007156] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.007190] #1: ffff88800e337020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.007219] [ 119.007219] stack backtrace: [ 119.007222] CPU: 0 PID: 3776 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220928 #1 [ 119.007236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.007244] Call Trace: [ 119.007248] [ 119.007252] dump_stack_lvl+0x8b/0xb3 [ 119.007265] check_noncircular+0x263/0x2e0 [ 119.007283] ? format_decode+0x26c/0xb50 [ 119.007303] ? print_circular_bug+0x450/0x450 [ 119.007322] ? enable_ptr_key_workfn+0x20/0x20 [ 119.007342] ? lock_release+0x547/0x750 [ 119.007361] ? format_decode+0x26c/0xb50 [ 119.007382] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.007401] __lock_acquire+0x2a02/0x5e70 [ 119.007425] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.007450] lock_acquire+0x1a2/0x530 [ 119.007469] ? down_trylock+0xe/0x70 [ 119.007490] ? lock_release+0x750/0x750 [ 119.007512] ? vprintk+0x84/0xa0 [ 119.007533] _raw_spin_lock_irqsave+0x39/0x60 [ 119.007546] ? down_trylock+0xe/0x70 [ 119.007566] down_trylock+0xe/0x70 [ 119.007586] ? vprintk+0x84/0xa0 [ 119.007605] __down_trylock_console_sem+0x3b/0xd0 [ 119.007624] vprintk_emit+0x16b/0x560 [ 119.007645] vprintk+0x84/0xa0 [ 119.007665] _printk+0xba/0xf1 [ 119.007679] ? record_print_text.cold+0x16/0x16 [ 119.007701] ? report_bug.cold+0x66/0xab [ 119.007713] ? group_sched_out.part.0+0x2c7/0x460 [ 119.007725] report_bug.cold+0x72/0xab [ 119.007738] handle_bug+0x3c/0x70 [ 119.007750] exc_invalid_op+0x14/0x50 [ 119.007762] asm_exc_invalid_op+0x16/0x20 [ 119.007778] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.007793] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.007805] RSP: 0018:ffff88801bcdf978 EFLAGS: 00010006 [ 119.007814] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.007822] RDX: ffff888020510000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 119.007830] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.007838] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800e337000 [ 119.007846] R13: ffff88806ce3d140 R14: ffffffff8547cf00 R15: 0000000000000002 [ 119.007858] ? group_sched_out.part.0+0x2c7/0x460 [ 119.007872] ? group_sched_out.part.0+0x2c7/0x460 [ 119.007887] ctx_sched_out+0x8f1/0xc10 [ 119.007901] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.007918] ? lock_is_held_type+0xd7/0x130 [ 119.007935] ? __perf_cgroup_move+0x160/0x160 [ 119.007948] ? set_next_entity+0x304/0x550 [ 119.007968] ? update_curr+0x267/0x740 [ 119.007989] ? lock_is_held_type+0xd7/0x130 [ 119.008006] __schedule+0xedd/0x2470 [ 119.008026] ? io_schedule_timeout+0x150/0x150 [ 119.008045] ? find_held_lock+0x2c/0x110 [ 119.008063] ? lock_is_held_type+0xd7/0x130 [ 119.008079] ? __cond_resched+0x17/0x30 [ 119.008098] preempt_schedule_common+0x45/0xc0 [ 119.008118] __cond_resched+0x17/0x30 [ 119.008136] __mutex_lock+0xa3/0x14d0 [ 119.008157] ? lock_is_held_type+0xd7/0x130 [ 119.008172] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 119.008189] ? mutex_lock_io_nested+0x1310/0x1310 [ 119.008209] ? lock_release+0x3b2/0x750 [ 119.008229] ? __up_read+0x192/0x730 [ 119.008245] ? up_write+0x520/0x520 [ 119.008261] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 119.008278] __do_sys_perf_event_open+0x1eec/0x32c0 [ 119.008297] ? perf_compat_ioctl+0x130/0x130 [ 119.008311] ? xfd_validate_state+0x59/0x180 [ 119.008337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 119.008353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 119.008372] do_syscall_64+0x3b/0x90 [ 119.008384] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.008400] RIP: 0033:0x7f56272edb19 [ 119.008409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.008420] RSP: 002b:00007f5624863188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.008431] RAX: ffffffffffffffda RBX: 00007f5627400f60 RCX: 00007f56272edb19 [ 119.008440] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 119.008448] RBP: 00007f5627347f6d R08: 0000000000000000 R09: 0000000000000000 [ 119.008455] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.008463] R13: 00007fff918d9f3f R14: 00007f5624863300 R15: 0000000000022000 [ 119.008477] [ 119.070676] WARNING: CPU: 0 PID: 3776 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 119.071360] Modules linked in: [ 119.071606] CPU: 0 PID: 3776 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220928 #1 [ 119.072206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.073052] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.073468] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.074837] RSP: 0018:ffff88801bcdf978 EFLAGS: 00010006 [ 119.075234] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.075761] RDX: ffff888020510000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 119.076296] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.076827] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800e337000 [ 119.077386] R13: ffff88806ce3d140 R14: ffffffff8547cf00 R15: 0000000000000002 [ 119.077912] FS: 00007f5624863700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 119.078507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.078946] CR2: 00007f35c47e9620 CR3: 000000001bd12000 CR4: 0000000000350ef0 [ 119.079489] Call Trace: [ 119.079683] [ 119.079862] ctx_sched_out+0x8f1/0xc10 [ 119.080161] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.080553] ? lock_is_held_type+0xd7/0x130 [ 119.080884] ? __perf_cgroup_move+0x160/0x160 [ 119.081228] ? set_next_entity+0x304/0x550 [ 119.081558] ? update_curr+0x267/0x740 [ 119.081858] ? lock_is_held_type+0xd7/0x130 [ 119.082188] __schedule+0xedd/0x2470 [ 119.082484] ? io_schedule_timeout+0x150/0x150 [ 119.082837] ? find_held_lock+0x2c/0x110 [ 119.083150] ? lock_is_held_type+0xd7/0x130 [ 119.083476] ? __cond_resched+0x17/0x30 [ 119.083786] preempt_schedule_common+0x45/0xc0 [ 119.084143] __cond_resched+0x17/0x30 [ 119.084441] __mutex_lock+0xa3/0x14d0 [ 119.084742] ? lock_is_held_type+0xd7/0x130 [ 119.085076] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 119.085477] ? mutex_lock_io_nested+0x1310/0x1310 [ 119.085846] ? lock_release+0x3b2/0x750 [ 119.086150] ? __up_read+0x192/0x730 [ 119.086442] ? up_write+0x520/0x520 [ 119.086728] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 119.087119] __do_sys_perf_event_open+0x1eec/0x32c0 [ 119.087505] ? perf_compat_ioctl+0x130/0x130 [ 119.087843] ? xfd_validate_state+0x59/0x180 [ 119.088192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 119.088585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 119.088975] do_syscall_64+0x3b/0x90 [ 119.089275] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.089667] RIP: 0033:0x7f56272edb19 [ 119.089951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.091292] RSP: 002b:00007f5624863188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.091857] RAX: ffffffffffffffda RBX: 00007f5627400f60 RCX: 00007f56272edb19 [ 119.092390] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 119.092928] RBP: 00007f5627347f6d R08: 0000000000000000 R09: 0000000000000000 [ 119.093476] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.094001] R13: 00007fff918d9f3f R14: 00007f5624863300 R15: 0000000000022000 [ 119.094583] [ 119.094780] irq event stamp: 908 [ 119.095109] hardirqs last enabled at (907): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 119.095809] hardirqs last disabled at (908): [] __schedule+0x1225/0x2470 [ 119.096442] softirqs last enabled at (778): [] __irq_exit_rcu+0x11b/0x180 [ 119.097091] softirqs last disabled at (711): [] __irq_exit_rcu+0x11b/0x180 [ 119.097746] ---[ end trace 0000000000000000 ]--- 04:16:51 executing program 1: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x4, 0x40, 0x7, 0x0, 0x910e, 0x509, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdb5d, 0x0, @perf_bp={&(0x7f0000000100)}, 0x18884, 0x4, 0x87, 0x6, 0xe94a, 0x401, 0x8, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x1, r2, 0xb) sendfile(r2, r3, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r1, &(0x7f00000007c0)={{0xcc, 0x6, 0x7, 0x5c, 0x62, 0x9, 0x1a3, 0x9}, "f84ee6171719f57d2ef460527a5a9f54d4c6340b810f8ea3d7d789f31376bbc54df2c9a738ec54d99d7cb9002f1b245610936f75834cc118f98393b60b3c3bd3cc71a71e3d961a918168d8b38955d6533aad01ac8ee0070648d903c7966b3e9bd17845a166cd63aaddb5b1fb695acddef126ceff33d4ca4d56b8da9803dd7dc928fb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5a2) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) [ 119.573085] audit: type=1400 audit(1664425011.967:9): avc: denied { write } for pid=3817 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.709771] syz-executor.1 (3818) used greatest stack depth: 24344 bytes left 04:16:52 executing program 1: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x4, 0x40, 0x7, 0x0, 0x910e, 0x509, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdb5d, 0x0, @perf_bp={&(0x7f0000000100)}, 0x18884, 0x4, 0x87, 0x6, 0xe94a, 0x401, 0x8, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x1, r2, 0xb) sendfile(r2, r3, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r1, &(0x7f00000007c0)={{0xcc, 0x6, 0x7, 0x5c, 0x62, 0x9, 0x1a3, 0x9}, "f84ee6171719f57d2ef460527a5a9f54d4c6340b810f8ea3d7d789f31376bbc54df2c9a738ec54d99d7cb9002f1b245610936f75834cc118f98393b60b3c3bd3cc71a71e3d961a918168d8b38955d6533aad01ac8ee0070648d903c7966b3e9bd17845a166cd63aaddb5b1fb695acddef126ceff33d4ca4d56b8da9803dd7dc928fb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5a2) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 04:16:53 executing program 1: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x4, 0x40, 0x7, 0x0, 0x910e, 0x509, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdb5d, 0x0, @perf_bp={&(0x7f0000000100)}, 0x18884, 0x4, 0x87, 0x6, 0xe94a, 0x401, 0x8, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x1, r2, 0xb) sendfile(r2, r3, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r1, &(0x7f00000007c0)={{0xcc, 0x6, 0x7, 0x5c, 0x62, 0x9, 0x1a3, 0x9}, "f84ee6171719f57d2ef460527a5a9f54d4c6340b810f8ea3d7d789f31376bbc54df2c9a738ec54d99d7cb9002f1b245610936f75834cc118f98393b60b3c3bd3cc71a71e3d961a918168d8b38955d6533aad01ac8ee0070648d903c7966b3e9bd17845a166cd63aaddb5b1fb695acddef126ceff33d4ca4d56b8da9803dd7dc928fb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5a2) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) VM DIAGNOSIS: 04:16:51 Registers: info registers vcpu 0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba131 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88801bcdf3c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000000000d R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba120 RIP=ffffffff823ba189 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5624863700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f35c47e9620 CR3=000000001bd12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffed1002bfa3ed RBX=00007fe0c7173000 RCX=0000000000000000 RDX=ffff888015fd1ac0 RSI=ffffffff81691abc RDI=0000000000000006 RBP=ffff88800d61eb98 RSP=ffff8880188df910 R8 =0000000000000006 R9 =00007fe0c7173000 R10=00007fe0c7173000 R11=0000000000000001 R12=ffff8880188dfcf8 R13=ffffea0000f9ed00 R14=dffffc0000000000 R15=00007fe0c7173000 RIP=ffffffff81691ac4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe0c76696f4 CR3=0000000015f02000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fe0c7678470 00007fe0c7677f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000