Warning: Permanently added '[localhost]:39194' (ECDSA) to the list of known hosts. 2022/09/30 07:59:38 fuzzer started 2022/09/30 07:59:39 dialing manager at localhost:40535 syzkaller login: [ 46.067424] cgroup: Unknown subsys name 'net' [ 46.194852] cgroup: Unknown subsys name 'rlimit' 2022/09/30 07:59:53 syscalls: 2215 2022/09/30 07:59:53 code coverage: enabled 2022/09/30 07:59:53 comparison tracing: enabled 2022/09/30 07:59:53 extra coverage: enabled 2022/09/30 07:59:53 setuid sandbox: enabled 2022/09/30 07:59:53 namespace sandbox: enabled 2022/09/30 07:59:53 Android sandbox: enabled 2022/09/30 07:59:53 fault injection: enabled 2022/09/30 07:59:53 leak checking: enabled 2022/09/30 07:59:53 net packet injection: enabled 2022/09/30 07:59:53 net device setup: enabled 2022/09/30 07:59:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 07:59:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 07:59:53 USB emulation: enabled 2022/09/30 07:59:53 hci packet injection: enabled 2022/09/30 07:59:53 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 07:59:53 802.15.4 emulation: enabled 2022/09/30 07:59:54 fetching corpus: 50, signal 23313/25108 (executing program) 2022/09/30 07:59:54 fetching corpus: 100, signal 40130/43384 (executing program) 2022/09/30 07:59:54 fetching corpus: 150, signal 47098/51769 (executing program) 2022/09/30 07:59:54 fetching corpus: 200, signal 50589/56686 (executing program) 2022/09/30 07:59:54 fetching corpus: 250, signal 57512/64800 (executing program) 2022/09/30 07:59:54 fetching corpus: 300, signal 63497/71904 (executing program) 2022/09/30 07:59:54 fetching corpus: 350, signal 67884/77371 (executing program) 2022/09/30 07:59:54 fetching corpus: 400, signal 71377/82011 (executing program) 2022/09/30 07:59:55 fetching corpus: 450, signal 74245/85977 (executing program) 2022/09/30 07:59:55 fetching corpus: 500, signal 77310/90038 (executing program) 2022/09/30 07:59:55 fetching corpus: 550, signal 83090/96485 (executing program) 2022/09/30 07:59:55 fetching corpus: 600, signal 85612/99936 (executing program) 2022/09/30 07:59:55 fetching corpus: 650, signal 88371/103572 (executing program) 2022/09/30 07:59:55 fetching corpus: 700, signal 92318/108158 (executing program) 2022/09/30 07:59:55 fetching corpus: 750, signal 94930/111547 (executing program) 2022/09/30 07:59:55 fetching corpus: 800, signal 97760/115029 (executing program) 2022/09/30 07:59:56 fetching corpus: 850, signal 99676/117817 (executing program) 2022/09/30 07:59:56 fetching corpus: 900, signal 101878/120702 (executing program) 2022/09/30 07:59:56 fetching corpus: 950, signal 105632/124863 (executing program) 2022/09/30 07:59:56 fetching corpus: 1000, signal 110298/129655 (executing program) 2022/09/30 07:59:56 fetching corpus: 1050, signal 111854/131819 (executing program) 2022/09/30 07:59:56 fetching corpus: 1100, signal 114361/134802 (executing program) 2022/09/30 07:59:56 fetching corpus: 1150, signal 116085/137097 (executing program) 2022/09/30 07:59:56 fetching corpus: 1200, signal 118464/139883 (executing program) 2022/09/30 07:59:56 fetching corpus: 1250, signal 119803/141853 (executing program) 2022/09/30 07:59:57 fetching corpus: 1300, signal 121461/144037 (executing program) 2022/09/30 07:59:57 fetching corpus: 1350, signal 122767/145879 (executing program) 2022/09/30 07:59:57 fetching corpus: 1400, signal 124109/147717 (executing program) 2022/09/30 07:59:57 fetching corpus: 1450, signal 125857/149868 (executing program) 2022/09/30 07:59:57 fetching corpus: 1500, signal 127327/151791 (executing program) 2022/09/30 07:59:57 fetching corpus: 1550, signal 128861/153698 (executing program) 2022/09/30 07:59:57 fetching corpus: 1600, signal 130353/155561 (executing program) 2022/09/30 07:59:57 fetching corpus: 1650, signal 131898/157410 (executing program) 2022/09/30 07:59:57 fetching corpus: 1700, signal 133022/158944 (executing program) 2022/09/30 07:59:58 fetching corpus: 1750, signal 134173/160591 (executing program) 2022/09/30 07:59:58 fetching corpus: 1800, signal 135331/162181 (executing program) 2022/09/30 07:59:58 fetching corpus: 1850, signal 136799/163869 (executing program) 2022/09/30 07:59:58 fetching corpus: 1900, signal 137955/165314 (executing program) 2022/09/30 07:59:58 fetching corpus: 1950, signal 138988/166680 (executing program) 2022/09/30 07:59:58 fetching corpus: 2000, signal 141052/168687 (executing program) 2022/09/30 07:59:58 fetching corpus: 2050, signal 142976/170566 (executing program) 2022/09/30 07:59:58 fetching corpus: 2100, signal 143965/171838 (executing program) 2022/09/30 07:59:59 fetching corpus: 2150, signal 145473/173446 (executing program) 2022/09/30 07:59:59 fetching corpus: 2200, signal 146721/174876 (executing program) 2022/09/30 07:59:59 fetching corpus: 2250, signal 148019/176280 (executing program) 2022/09/30 07:59:59 fetching corpus: 2300, signal 148785/177340 (executing program) 2022/09/30 07:59:59 fetching corpus: 2350, signal 150107/178744 (executing program) 2022/09/30 07:59:59 fetching corpus: 2400, signal 151287/180018 (executing program) 2022/09/30 07:59:59 fetching corpus: 2450, signal 151913/180979 (executing program) 2022/09/30 07:59:59 fetching corpus: 2500, signal 153303/182298 (executing program) 2022/09/30 08:00:00 fetching corpus: 2550, signal 154647/183590 (executing program) 2022/09/30 08:00:00 fetching corpus: 2600, signal 155379/184519 (executing program) 2022/09/30 08:00:00 fetching corpus: 2650, signal 156518/185635 (executing program) 2022/09/30 08:00:00 fetching corpus: 2700, signal 157243/186493 (executing program) 2022/09/30 08:00:00 fetching corpus: 2750, signal 158085/187465 (executing program) 2022/09/30 08:00:00 fetching corpus: 2800, signal 159311/188577 (executing program) 2022/09/30 08:00:00 fetching corpus: 2850, signal 160297/189540 (executing program) 2022/09/30 08:00:00 fetching corpus: 2900, signal 161156/190404 (executing program) 2022/09/30 08:00:00 fetching corpus: 2950, signal 162162/191335 (executing program) 2022/09/30 08:00:01 fetching corpus: 3000, signal 163079/192236 (executing program) 2022/09/30 08:00:01 fetching corpus: 3050, signal 163951/193132 (executing program) 2022/09/30 08:00:01 fetching corpus: 3100, signal 164577/193881 (executing program) 2022/09/30 08:00:01 fetching corpus: 3150, signal 165421/194668 (executing program) 2022/09/30 08:00:01 fetching corpus: 3200, signal 166109/195402 (executing program) 2022/09/30 08:00:01 fetching corpus: 3250, signal 166806/196147 (executing program) 2022/09/30 08:00:01 fetching corpus: 3300, signal 168152/197117 (executing program) 2022/09/30 08:00:01 fetching corpus: 3350, signal 169381/198024 (executing program) 2022/09/30 08:00:01 fetching corpus: 3400, signal 169977/198660 (executing program) 2022/09/30 08:00:02 fetching corpus: 3450, signal 170647/199337 (executing program) 2022/09/30 08:00:02 fetching corpus: 3500, signal 171173/199982 (executing program) 2022/09/30 08:00:02 fetching corpus: 3550, signal 172398/200756 (executing program) 2022/09/30 08:00:02 fetching corpus: 3600, signal 173203/201402 (executing program) 2022/09/30 08:00:02 fetching corpus: 3650, signal 173871/202024 (executing program) 2022/09/30 08:00:02 fetching corpus: 3700, signal 174686/202652 (executing program) 2022/09/30 08:00:02 fetching corpus: 3750, signal 175228/203205 (executing program) 2022/09/30 08:00:02 fetching corpus: 3800, signal 176022/203810 (executing program) 2022/09/30 08:00:02 fetching corpus: 3850, signal 176700/204363 (executing program) 2022/09/30 08:00:03 fetching corpus: 3900, signal 177209/204867 (executing program) 2022/09/30 08:00:03 fetching corpus: 3950, signal 178119/205480 (executing program) 2022/09/30 08:00:03 fetching corpus: 4000, signal 179140/206056 (executing program) 2022/09/30 08:00:03 fetching corpus: 4050, signal 180067/206609 (executing program) 2022/09/30 08:00:03 fetching corpus: 4100, signal 180784/207084 (executing program) 2022/09/30 08:00:03 fetching corpus: 4150, signal 181305/207514 (executing program) 2022/09/30 08:00:03 fetching corpus: 4200, signal 181816/207915 (executing program) 2022/09/30 08:00:03 fetching corpus: 4250, signal 182366/208381 (executing program) 2022/09/30 08:00:03 fetching corpus: 4300, signal 182984/208794 (executing program) 2022/09/30 08:00:04 fetching corpus: 4350, signal 183769/209255 (executing program) 2022/09/30 08:00:04 fetching corpus: 4400, signal 184335/209640 (executing program) 2022/09/30 08:00:04 fetching corpus: 4450, signal 185069/210040 (executing program) 2022/09/30 08:00:04 fetching corpus: 4500, signal 186274/210594 (executing program) 2022/09/30 08:00:04 fetching corpus: 4550, signal 186889/210948 (executing program) 2022/09/30 08:00:04 fetching corpus: 4600, signal 187680/211308 (executing program) 2022/09/30 08:00:04 fetching corpus: 4650, signal 188319/211639 (executing program) 2022/09/30 08:00:04 fetching corpus: 4700, signal 189012/211986 (executing program) 2022/09/30 08:00:05 fetching corpus: 4750, signal 189664/212302 (executing program) 2022/09/30 08:00:05 fetching corpus: 4800, signal 190220/212604 (executing program) 2022/09/30 08:00:05 fetching corpus: 4850, signal 190551/212883 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/213113 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/213340 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/213548 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/213763 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/213977 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/214181 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/214430 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/214645 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/214744 (executing program) 2022/09/30 08:00:05 fetching corpus: 4872, signal 190746/214744 (executing program) 2022/09/30 08:00:08 starting 8 fuzzer processes 08:00:08 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1b24c5d0d732981f}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x24004881) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x8000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x947f, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004048}, 0x400c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r1) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r2) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x20004840) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010) syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88888}, 0x20044000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a40), r1) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000ac0), r1) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x400c000) 08:00:08 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)="3a2ee42eadabf12eec85a33771c64cd2e0ddddef499c68a43b89c08b420fd2b764c7f8a88ffd821e3369c9388f4347b878fad30556f5eeb6d1dc69be2f38d2dce39fc22794fe6c5a84e9e1a1ce95f805577984e71a59e773d17fe85ac83caf129ffd2d665ef428d6ac3f448955f7ddd14a0032902ed41954216968edc18d4b110664d9", 0x83) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x6, 'caif0\x00', {0x9}, 0x9}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000140)={{0x3a, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4e21, 0x4, 'dh\x00', 0x4, 0x7fffffff, 0x1c}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x0, 0x0, 0x2, 0x4}}, 0x44) openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000200)=0x1ff, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x88040, 0x2c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000280)={0x0, 0x7, 0x0, [0x3, 0x80000001, 0x5, 0x1, 0x3], [0x7fffffff, 0x0, 0x20, 0x5, 0x1ceb8, 0x3f, 0x7933, 0x4, 0xfffffffffffffff7, 0xa4fc, 0x0, 0x101, 0x52f4, 0x3f, 0x1ff, 0x9, 0x60f, 0x7fff, 0xd1d1, 0x101, 0x9, 0x6, 0x4, 0x6, 0x6, 0x5, 0x7, 0xe383, 0x1, 0x6e, 0x401, 0x0, 0x4, 0x2, 0x4, 0x165, 0x8001, 0x2, 0x4, 0x9, 0x7, 0xffff, 0x7, 0x100000000000000, 0x2f0d5274, 0x0, 0x9, 0x9, 0xfff, 0x0, 0x80, 0x6, 0x4, 0xed, 0x9, 0x80000001, 0x9, 0xca3, 0x1, 0x2, 0x70, 0x728, 0xfabb, 0x1f0000, 0x3f, 0xfffffffffffffffe, 0x4, 0xc3, 0x1, 0x3, 0x80000001, 0xfa7, 0x7, 0x6, 0x4, 0x20, 0x8001, 0x6123, 0x400, 0x71, 0x101, 0x5, 0x7, 0x815, 0x9, 0x1, 0x81, 0x80000000, 0x80, 0xff, 0x8, 0x100, 0xf1f, 0x800, 0xfffffffffffeffff, 0x100000001, 0x82, 0x8b, 0x78, 0x7469, 0x6, 0x811, 0x1, 0x6, 0x8001, 0x3, 0x0, 0x40, 0x40, 0x4, 0x9, 0x7, 0x3, 0x1ff, 0x7ff, 0x7fffffff, 0x1, 0x100000000, 0x5, 0x3f, 0x4]}) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f00000006c0)="e8f729332abd9a1259ec1c625407ecbb71b5bfe578053581169471c849344a2b564f56849254c872915dfa472e9de4a372b58249405588b77085316d64bab19dff1d993cf587d36f5ddd5c48feaf87cafd8d76", 0x53}, {&(0x7f0000000740)="9da9ba7aa0491655ecbca78836ca6691e956811b51c349da2da4ffee944cde65a31dde40768b38dd032c796baeeac6b499a576678a41941ac8d4d98b0f1f8d507919b181de2a54dc7de0c5b073e80993fefb5770ff199c551436935c11c9896d72919f8e9ee9903f6270d45f19cd96808ca7f7f4746a129dd82e72b5eaae5be935714cf45833aed24db9954a8aa9d960388bcbe49aa0c128321c771d345c234a781a0479d9fb4634930786b8e57436a2304cda0c2621f36023a3cb666dd222db46e47b407351e7a01317cb4a81468c9707534383accd339e7fcf1e3cbb820a56931bc2cecd1b3f5a", 0xe8}, {&(0x7f0000000840)="154628c17244538d6a773c4ddfe65ab34103281187dbd825d0de5e6023cc571d96cded6d927a7586541e9dae4cf336449b7f22ebc72a5f84c9fc2f0d1fdce3b0a415502c2a432405f974159a26742492512d2cf621d83964c92e1308d7529e08b97c4073c5096d638c53b6097f6999ab", 0x70}, {&(0x7f00000008c0)="393995986b603c959252f30dbac5369145b9793b0da02e801199f91a63bb76e1d296073b5aa4295f5008157a8c3ad7ad3de9a87829978e75c6fbd9e7b0090595c8e4cef5694c25fa5a044d6a8891b8c9fbe2be0fe712a0ad0f7d83dce02e18dc522481bb", 0x64}], 0x4, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000980)={0x3, 0x0, 0x14}) r2 = accept4(r0, 0x0, &(0x7f00000009c0), 0x80800) fcntl$getown(r2, 0x9) r3 = syz_open_dev$vcsu(&(0x7f0000000a00), 0xd84, 0x220000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000a40), 0x2000, 0x0) pidfd_getfd(r3, r4, 0x0) r5 = socket(0x18, 0x5, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000a80)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000c00)={{0x2, 0x4e20, @local}, {0x6, @remote}, 0x40, {0x2, 0x4e20, @empty}, 'batadv0\x00'}) 08:00:08 executing program 3: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8005}, 0x801) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xf0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0xd8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x8, 0x7, 0x3]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c005}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044084}, 0x20000005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xa2d674da0d91ee4a}, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl0\x00', r1, 0x80, 0x7, 0x5, 0x5, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x65, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x4d, 0x3, 0x0, [{@multicast1, 0x800}, {@multicast2, 0x101}, {@empty, 0x18f}, {@rand_addr=0x64010101, 0x200}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xf0, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000010}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xdc, r0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffa}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4c620444}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x76}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x36}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x896f}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80000}, 0x11) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r6) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xb0, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x45}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdd}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000000) [ 74.795846] audit: type=1400 audit(1664524808.306:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:00:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x904, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48081}, 0x4c011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x80, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, "09f6451953b798eb"}, @NL80211_BAND_2GHZ={0x70, 0x0, "605d2b7bc1ba61ea90da901326eda987f296e5f0a8d4b47bd256f89ed3a56f791e24b94842978d0386b6306c350a678f045a0108ae17e15320dfaebbbb69bd11b6842666a5829cdcbd9615276b6bc775bb92c5316d8038eca44ed7dd4b1b67d7d93e36633e906d025aaac0d8"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4344f066288c"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x6cbde6ccb48a0019) r2 = openat$cgroup_subtree(r1, &(0x7f0000001680), 0x2, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000016c0)) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001700), 0x8000, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001740), 0x200000, 0x0) r6 = openat$cgroup(r1, &(0x7f0000002c80)='syz0\x00', 0x200002, 0x0) recvmmsg$unix(r1, &(0x7f00000095c0)=[{{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002e40)=""/76, 0x4c}, {&(0x7f0000002ec0)=""/142, 0x8e}, {&(0x7f0000002f80)=""/121, 0x79}, {&(0x7f0000003000)=""/88, 0x58}, {&(0x7f0000003080)=""/110, 0x6e}], 0x5, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000031c0), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003240)=""/176, 0xb0}, {&(0x7f0000003300)}, {&(0x7f0000003340)=""/35, 0x23}, {&(0x7f0000003380)=""/33, 0x21}], 0x4, &(0x7f0000003400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003580)=""/78, 0x4e}, {&(0x7f0000003600)=""/189, 0xbd}, {&(0x7f00000036c0)=""/183, 0xb7}, {&(0x7f0000003780)=""/251, 0xfb}, {&(0x7f0000003880)=""/79, 0x4f}, {&(0x7f0000003900)=""/172, 0xac}, {&(0x7f00000039c0)=""/15, 0xf}, {&(0x7f0000003a00)=""/254, 0xfe}], 0x8, &(0x7f0000003b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003d40)=""/96, 0x60}, {&(0x7f0000003dc0)=""/120, 0x78}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/229, 0xe5}], 0x4, &(0x7f0000004f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000005080), 0x6e, &(0x7f0000005240)=[{&(0x7f0000005100)=""/141, 0x8d}, {&(0x7f00000051c0)}, {&(0x7f0000005200)}], 0x3, &(0x7f0000005280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000053c0), 0x6e, &(0x7f0000005740)=[{&(0x7f0000005440)=""/244, 0xf4}, {&(0x7f0000005540)=""/203, 0xcb}, {&(0x7f0000005640)=""/252, 0xfc}], 0x3}}, {{&(0x7f0000005780)=@abs, 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000005800)=""/51, 0x33}, {&(0x7f0000005840)=""/204, 0xcc}, {&(0x7f0000005940)=""/14, 0xe}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/179, 0xb3}, {&(0x7f0000006a40)=""/143, 0x8f}, {&(0x7f0000006b00)=""/251, 0xfb}, {&(0x7f0000006c00)=""/19, 0x13}, {&(0x7f0000006c40)=""/10, 0xa}, {&(0x7f0000006c80)=""/1, 0x1}], 0xa, &(0x7f0000006d80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000006e00), 0x6e, &(0x7f0000007080)=[{&(0x7f0000006e80)=""/200, 0xc8}, {&(0x7f0000006f80)=""/57, 0x39}, {&(0x7f0000006fc0)=""/166, 0xa6}], 0x3}}, {{0x0, 0x0, &(0x7f0000009500)=[{&(0x7f00000070c0)=""/39, 0x27}, {&(0x7f0000007100)=""/4096, 0x1000}, {&(0x7f0000008100)=""/73, 0x49}, {&(0x7f0000008180)=""/69, 0x45}, {&(0x7f0000008200)=""/159, 0x9f}, {&(0x7f00000082c0)=""/230, 0xe6}, {&(0x7f00000083c0)=""/4096, 0x1000}, {&(0x7f00000093c0)}, {&(0x7f0000009400)=""/194, 0xc2}], 0x9}}], 0x9, 0x10000, &(0x7f0000009800)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000009840)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000009880)=0x0) getresgid(&(0x7f00000098c0), &(0x7f0000009900)=0x0, &(0x7f0000009940)) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000009ac0)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="6e38c5ef6a59ff28a120055d566f1b4b6108978e596e2610a097dcfef89de52fd4176b22c8e0f2fdcd8b763145ad2445f59694ad79ea5d1ac9b1c27f65719950eb76f906775a0373c75267143da550553c5b1d3d82ec343df3d0d7979ee4220d10b1ab9fd1019f6ce675154ea53f909c58d7a93480740d3d181a970ce381b31470db", 0x82}], 0x2, &(0x7f0000009980)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r3, r1, r4, r1]}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r5, r1, r1, r1, r6, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, r12}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r13]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x118, 0x20000010}, 0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000009b00)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000009b40), 0x0, 0x0) setns(r14, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000009b80)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x2, 0xffffffffffffff39, 0xa5b, 0x7, 0x16, 0x0, {0x3}}, 0xfffff801) 08:00:08 executing program 6: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xffff, 0xb6, 0x9, 0x1, 0x5}) r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) r1 = memfd_create(&(0x7f00000000c0)='nolazytime\x00', 0xe) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x2, r0, r1) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1d}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0xff, 0xfffffff7, 0x7f, 0x0, 0x8}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4, 0x3}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) fsmount(0xffffffffffffffff, 0x0, 0x8a) r5 = syz_open_dev$vcsn(&(0x7f0000000280), 0xaa, 0x40) fsmount(r5, 0x0, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000002c0)={0x0, 0x6, 0x82e5}) fgetxattr(0xffffffffffffffff, &(0x7f0000000a00)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000a40)=""/206, 0xce) 08:00:08 executing program 5: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/62, 0x3e, 0x1, &(0x7f0000000040)=""/171, 0xab}, &(0x7f0000000140)=0x40) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x8, &(0x7f0000ffb000/0x4000)=nil, 0x6) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_io_uring_setup(0x41ea, &(0x7f0000000200)={0x0, 0xbf48, 0x0, 0x2, 0x10}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x50, r1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000480)={0x1, 0x1, 0x1000, 0x5b, &(0x7f0000000300)="272e4d81602af569c5ebcdbe7af4726b89f610244a223c1870f2e5f7d9fd6cbf2532fe1d50334a64ebf7c61a713c08617e6afda5ff8a3ca75611e80922da13ac8914ea3a81da27d3de7d47ec5da28ea7a94cab304a6c3b0c91809c", 0xd4, 0x0, &(0x7f0000000380)="e7d9c5f50be5923d524401fe33dec4d914e2d48f73dc1a4e3ed5ab0c3456938e1753c699237b2a981004e0a8256d7e12fa5597c0005438e221174bd99c7045c7670bfb35c96a62eff27a3a3b2a2a498ca3fc1a784c6f160f9e1be380e6ec994341784ebb981c39ff9e362f7f204837f27db1fc771606493d11e3d2ddd2980ddad14457c36b5a7742456ed14fd627e65ad5cfb758a1ae971a597adeeea7b78e1e1b91218a35f0ad8d6e037a4f195336fff08897f4348ca0f971ddbd4fe7e6d8b0e48eca41d86c7b0bde4308861608dc9b0ea17cb2"}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x400000) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r3, r1, r4, r1], 0x4) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) write$sndseq(r4, &(0x7f0000000600)=[{0x1, 0xd6, 0x3, 0x5, @time={0x652cf52d, 0x1000}, {0x7c, 0x81}, {0x9, 0x71}, @queue={0x90, {0x3}}}, {0x2, 0x1, 0xff, 0x0, @tick=0xecdb, {0x8, 0xff}, {0x1, 0xf8}, @connect={{0x6, 0x7}, {0x6, 0x3}}}, {0x5, 0x40, 0x56, 0x8, @tick=0x9, {0x3, 0x8}, {0x1, 0x8}, @result={0xffff, 0x9f0}}, {0x1f, 0x2, 0x1, 0xfd, @time={0x5, 0x8001}, {0x20, 0x2}, {0x5, 0xfe}, @note={0xdc, 0x40, 0x0, 0x0, 0x5}}, {0x22, 0x4, 0x70, 0xff, @time={0xff, 0x9}, {0xf0, 0x7f}, {0x1f}, @ext={0x50, &(0x7f0000000580)="2137bd44384116ca07d8f0a1bc2a5255b0deaad18b1a3efe8ae3d6a47addad3a755e29ebfe3c24fbfb3c4d19975f86e93d3c992f89a7983535caafba354b02ad700b96e9018634cf7aa5bdfcce222f51"}}, {0x81, 0xf7, 0xa2, 0x8, @tick=0x81, {0x5, 0x2}, {0xc0, 0xab}, @control={0xaa, 0xe697, 0x2}}, {0x0, 0x40, 0x7, 0x2, @tick=0x400, {0xda, 0x4}, {0xf1, 0x2}, @raw32={[0x7fffffff, 0x6, 0xfff]}}, {0x1f, 0x80, 0x8, 0xff, @tick=0x1, {0xb1, 0x1}, {0x1c}, @addr={0x8, 0x16}}], 0xe0) shmat(r0, &(0x7f0000ffa000/0x6000)=nil, 0x2000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x40810, r1, 0x10000000) r6 = syz_open_dev$rtc(&(0x7f0000000700), 0x7ff, 0x101000) syz_io_uring_submit(r2, r5, &(0x7f0000000740)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r6, 0x9, {}, 0x2, 0x0, 0x1, {0x0, 0x0, r4}}, 0x73b6e64b) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 08:00:08 executing program 4: sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0xe}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x70a, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}}, 0x85) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4c010}, 0x4080) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x17c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40040c0) r4 = openat$cgroup_type(r1, &(0x7f00000008c0), 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000900)) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000d00)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4861}, 0x84) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r3) getsockname$packet(r1, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000013c0)={'syztnl0\x00', &(0x7f0000001340)={'ip6_vti0\x00', 0x0, 0x29, 0x9e, 0xff, 0x10000000, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, 0x80, 0x7800, 0x4, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002c80)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002a40)={0x1dc, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x85}, 0x4000) 08:00:08 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000000)=""/119, 0x77}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/9, 0x9}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000001400)=""/205, 0xcd}], 0x8, 0xfc, 0x8) r0 = perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0x3f, 0x43, 0x4, 0x1, 0x0, 0x0, 0xc00, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x400, 0x3, 0x9, 0x2, 0x8, 0x9, 0x7f, 0x0, 0x9, 0x0, 0x100000001}, 0x0, 0x2, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001840)={0x1, 0xdd, @start={0x0, 0x0, "ef0f0c1a699a89c7df6e94c0d902b0f84dca022ef7e23de3924a270c094dc0c47cdb3c26634516a1e6c49a66eaecd5ccbe24c70a20fa89fb192150ee0c95d0b02208484de3a53767f99c223b51d126f00a2287249043c4a5bd64f70bcc73d9ab2f2f370ff00538ef25d69e4583de7fdad8c2396c2c45a2054ae4cdeb42922cd49a8eb20009455ab46b4bab41d013f653097739b490f5b486aa92e9572f9a53630c29787f4eaff47d92db221aa521a95eefc64ea6e2e0a9aa5565b7c27be1e911a96a39550aa904a6b6f7833461b5a4b352eae133d7251dec9deb6a8bafc01b13fc7b88335d775fbcf4d7ef6fce8b227e6b0ad613d9506db36260ea0f3bb360fbcb8a892bb098ece529bb817e87ab4c0a7b3ade808c9a92658f3715d68ba12f159b8eb422826b9f03137365db9c1417c5d3a999eaab0eec6fb1f39e140541777fc76dd0ab1a496c49eacebea6e6cb430c6a7d1c64be1927f0f78614f6ed58da790fe314fbbd7c8118ed80edaaac9e9db99031ae2bebd593ec4469eadd1e583c47982287838521666c29771978136bc2471260164500eec930c5a20b286ee8b29d181f771aead8382063e87fa7138c68d206d2dc2bbfbe1dbc86d636e3706526febb9a71e11ee21e6b9ac09cbb41e63c5162d9648240e6b37a9bf1554b96fad52930f8975d6a2861e918ead0ad132a917d5e285998f2aba83dda1f7cd39753c471b637ec7b77a62f235274b9d5454753ba5959bd6d6268eae8c7bcee9803d8eaa8abf60a2bf338671320e2e7d99c6ebb5a1f99bfc45ee823dfae4225c099cffd583f09e8685116ca8af3a3ec22e3345d5ffb8ea91023f697c3c8312c36a18b5b331c779785fe48e0075e8b46edf89d50284412120cdefa5f1362158df6f86d621a95cc581170017679b0decfd5caf425fb6b5f2ca77e0f1d808e7a65260de31be4505aaef9eb3855c3cce8dd5cfa94d9bdc0a043085daf7ef5845af34b1aec3898013de1cd31f8ae4393251bb9c1ef3ffec1f5079e26c0e8685067abdf4e6ebbd6e015d96ec79a9a1fc64633255f8c4edea16aad27531eae0b7b0241ff48678d9da6d7a7a747e7293a19fd3a22f441b2b43805dece5c205084880a3734b62e59fd2593afc717670fa0df4af0504ea88c3d938c2ae250112405ff8a6d9799b782b8d5a8cd1d3cbea518b69eb2f34cbb4e6963151dc1b9bfc92cebdeb327d5443029ea85ba5aa910dcc17e4ab0b3e2ed95d66dfaf7232091ad703f7462d18f28b3ebb6f83494777efe7386c8f0290b0f3336c32eb703205c71286c4ef3d4164273ed683b0b47f1ea59074f4d204bf251ef86616dbe6c1312284d49e0decbb4d50ee8a1d49c0184dec76c767205a0eab7a6c8c9af69cda2c4e4f3ac7d033a12fe36d72048788dbf8d2d12df6ae0be4a10b5cd37f65ad95d91cb60c1d16fa10e112a67fd", "008b3f11f3faa9558bb039946f8302666665a3af104fe0aa871a406d4eaae7fdb17b8ceb4424c5791bf27fbbd68a15efaecae1aa913595874b23d1bc352be9940ab1fb3cf0cf3780c22b35e1e02e40c0c8e5fc7f3833714a47102d05a14f919467e8e21ca1a4b3f96f28fe8a82a7f31dc393f8a37d6de2b38ccc9641cd7826eb5b87a5cd52274dfe404b83d38576bd937c9b5dadb6ac898af909687340ab960819eae765cc5970d70974a26f7c124c2f3e89ad21397b83c2d74d840cfdf9f3bdb5f41a87d990ced76904fe52fab3e07afce4f22a810369fe0d4dd13c9521c1dacf193e94d27b52cd2e37f9a2374df0f69cdc0dbc8c4590eda166f50628e5f04512b35597499f2e6936e7cfea084121e1477f81c46ce746c342c3483ad25151335f15a837d42c09a29ac718016256480ebd99e4dd53f00313e7d7c95fd0aff9dd8a49eaa8f0c55af4139a017227e2533db3b9bd773e32ce7fe750c8dcb987d687a7f220157d7255668cf9c4660a801eeeb5b86d6a26d8d86a27c825241d326f0a85d234d8ee6ebd305c180a2acdf75b77fd808da458bfbee6b6c304587b5293fa5121b3144b69a0d5454872cb895d6c4fc8e317d2438081461b399d8cf4376cf53f1b4b2b6ce92f66af6d23f106f51c134e626459fb3b625e001cf0b54b2f4758f8fa5778f3722d750d4083956a4c25e2374041abe3c6506910a12562dd4395e2e1f6e45c09ad91823e91ec5673e75204583a019f78286ae33f44d070bfa442a6c00eebf7377287317be98b12ea3b1ef4f8430854b4d7671ba0d19e394adbe3089bebabc34833ae4e249da401562b89566f55aaac795f6668063d01ff8cab7a54c8f2cbb072e8875a3021e4385fbbee3ced4ba131655e1ddd80cc661310f17dcf6942a4b28eec51f45da784fbae33211ed4677cc60d84f509542dd53f56b78b6628f8bd7d7490408012eca5e586bc125cdf4da1ec47bdb4e7e6734d141b1af2d438aaffb877f779f06e1ac32034e7542f8938bec8984e9dbb3346aef0692ce1789bf430b781483aa3aa83ef762b08c2c4f356a70e257dfc277e76b4c44000553fcc1fa50d04549d59ddb211a1742972d36b8e171dd88d6f69d0c39dea5067a408f973c2da3047ffd3e83d97ca23a01e3f8bb2396dfaa070947f4d252034ac15ed0d36d8dbd007a595539a73d6873ad280e5a9a73809d82150b419a3cce747719b0ac4edf34ba8c99c50d5280940ae8dc2d449b63797b8abc91d795bb68ab1ef4d519582755d6e00b8a499cdc96a58ff3b694d20f7a2920038cb260754aba811ac68bf0f6d8b687908a355a0fc22a9f43e1fe66ffcaf421028d0dbc85e6c5c44ba4eff631e5e9d2340e0abd958943908a88da51426915061a0b9943fe152a4f1d901bd10ad37567ff9d33d717ce8c5a3def8289889773f2ff167aedb6bc8bf0314e5"}, [0x8, 0x3ff, 0x5, 0x8, 0x8, 0x7fff, 0x10000, 0x10001, 0x1, 0x80000000, 0x7fe, 0x8, 0x7ff, 0x5, 0xfffffffffffff001, 0x9, 0x20, 0x6, 0x9, 0x611, 0x320, 0x4, 0x4, 0x5, 0x7, 0x1, 0x1ff, 0xfffffffffffffff7, 0x6, 0x2, 0x800, 0x2, 0x8001, 0x0, 0xfb, 0xce95, 0x9, 0x6, 0x26f, 0x0, 0x2, 0x101, 0x6, 0x8f, 0x7, 0x1000, 0x4, 0x6, 0x4db8, 0x10000, 0x8, 0x9, 0x1, 0x200, 0x40, 0x1, 0xffff, 0x0, 0x5, 0x81, 0x6, 0x9c, 0x5, 0x4]}) r1 = timerfd_create(0x1, 0x800) write$binfmt_elf64(r1, &(0x7f0000002280)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xf5, 0x7, 0x1f, 0x9, 0x39289800afac7a, 0x3e, 0xfff, 0xce, 0x40, 0x223, 0x8001, 0x3ff, 0x38, 0x1, 0x0, 0xfff9, 0x20}, [{0x2, 0x300, 0x8001, 0x1, 0xfff, 0x1, 0x5, 0x5}, {0x4, 0x0, 0x1, 0x8, 0x3, 0x3, 0x8, 0x7}], "4ab246b2554f2ae0901ca56b00bf6b956be2c5a6f24fd56b8ce48e159a9661bc102edc492eb941a7309d1339ee18de071265fb5bb6a7529e9663d702cde374a0dd3e80258c8d35429dff604b17ddeed01494d8d56915fe1dbe8535c7e8d1e1e1bb3f5ebceb6cabf90ec9a74ef2519a3ddf3ffa12efe63174db20d7246c2cf94cada30955fc26531b7a4c395be4d381e4fcc22c380c62a597896c586738198254c502ff25d8dbafa89255384f327770294510", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb62) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000002e00)={0x100000001, {0x10, 0x0, 0x1f, 0x80000001, 0x5}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002e40)='syz0\x00', 0x200002, 0x0) read(r2, &(0x7f0000002e80)=""/4096, 0x1000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000003e80)='./file0\x00', 0x1, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000003ec0)={{r3}, "138f236ec97978d4a3775fac9fd3a642857f5c11fdffef6e2e014e63dba54890e91a8de30726c53fe09f36410e417794e48d3f434d771faa93c273f3fad1329c288a8694c238d27c8b921ffc5469a9dedcc79cf2e3b4ce65641b3b206242288dbf4ce594a858da6106f6f52e110f3349b8575b4d5da4a05b9b5846a0026e52ddb47de3e8b1398b13337cf7fbb2ddc09860e5351756fd10db6fa9cabd68f86bd3f828bc87b9c9ce03c26e0f4a8c37f73df93c033cf830e7e72c03de2adb0f853bbf8264e600ed2d8b2e05df65de330ea37c6cfda6ae9e5bbc7a6b452b45ea2940d3ebb5a1ebaa746cbd1d5303409dec1242a90a4f8e7a80eb5714cf839c42edca5878c2278da724cfb1cfa88f05436422c1a2c6a0a3e7b753e4ccb9a9f91193b16c7eb46f2d0de53f0069977584062b987cf8a138190a4f8de480115ff359f4be463add6924dd94c5169481df8865b4f8421bd95c004e1d6092252880b8649785270b80dd9a1452e19f53341a2774a824e875f437323fbbb263d3d96acfef4eb46e44e5918ffaa300a6b235357117032ab31d92e10570bfc0da1c4ed8dc6e1d1e554b51e01164c6b72962fb64fb473865e6e80eeefb94eaa6272f9b099639da0193f6635658737c214311d7600ed8d2b173cce5097d8a5a86f2671e61baa3350dc85448ac4e40f3940bace2b6558afa73bf06a1524d6fe022fdae6745bee5b194676417c6f0fdbb1b42b52dff07cdd534a024c547df400b6abc0f16277f3f8915e075f588c06248c84699425d8e6c986425c2c9caa61f8ef3ec13da2b1ca7431c7135f9fa6295b3ce8131bd8245d68f3ee6ddc7c9d44e23c5939bf0d97c23c0c787658aa2d57923c0d8f1d1c8545fa61d05831c7edd8a8280e3edb60fbf6f05913e7659fb5ef77f9c529914e8ac47833341ad883209afa537c21aa52f06a3b32bb439b25519d8ed4a52f919a242854cfae6f13e3594dfca2bd265825da624d5f7b2cc7cb746d6f5f09c1c5dac18ca829358ef43c0fbf8ce177989b2dace61b6862e56b49743089d8d02ea62d13f7b3c95f3fd6c9ea95e1b633dd5694aaec05ef39b7b8d5b1c1c72a3900df8f47cb523aad16aa010f6d8e5e81f20df090e8c0895b7050ac6340ccb3a6f9b75f55a8ee30582dd1ba4271b1fc2338cc48847b7ad6b50da63b5741b8b4b103f161ac908ba86c57b848874e2800be351b45ac432a1e7b6a9045471f91dd5943b2bf61de045826a4e062d8a8dcc078c929bcad9e711139cb9f34a8cc2c983ea7a633b16ea08818ae0ae7206ad84631c64f90842a005ca6d1e16ac109d74bbcc44f92e95ba9bf6468e95b2a437397f6f7b7ad206da0b740667cfd849e7c0697e067faad24e48be6da604aef7018859c476872d9c667ef0d73d80d3bb9ff875caafbf23f1d18c69a3c138ba0802c977aa51c33e3f5d9a92e145de7d036f1545c5393a6592e72645dbaa6a89f006c39ad22b168f2d57b6b6a134c1f88373f928faf681eee1e13d7c619d0f88508f93bda18efd2f99909bab5aca8a6ae41baf2b6e15421a13422a6d72f22cb124553d89fa7885d4007a9d21eadd42758530fec3c01051bc289a67420c7cf0e3947d63dae4ab63ab36a6f626f760d6c790d35513a0cfef2937714b37d56583996a1ab5b696c4a67fe25a0679b683da1108ba7c0695dae63eded1deeca734e8ebfa33630757bd1e76525582235cd1316b2cc7f711714143ce32adf710f822e5ad63cb67a45735163e1ad8e08734c6a262a6769edbf3d95e33741f99c09e60708a8260d6bb9070dfc6c7a4fd41a255165193f54d1c71c4f305c48c5880841f7a735ccd9ae8aa4897e08a68ded8115761b060e6f75fb630d82f59afea0fa5e4f4bcf1528a73b2acd04f4f97676cd216355291ed1d96a8045f3daad6268fa9c66933c9007eed01d860f1da7135c6e8004d48ce97f8ce96f26c028a23256e8c8bed394d6b191de3a0196048312f1f47174325f05fb8d37559a0be391aac78041304fde2b096899f655837e0e5dd9c11391af8b4f665c6f6addf6f889ce1ccf53b0b4ef489c65f584935aa707fb99595ac885ae41808f74382b33b5697d7ec7163ffbbf9f9ce84a30c0b1cb643c194c9eb6d72702c4e521eba702d2822596a67e339a8102ad9ba3fece1a1d37ae907dfb40c8028f71ca2ff899e7480629b44cf3808ba89cc74bd97ec96fae0cf005ee754f8c35a1d3719ef29f2692fd2264c7f150659b2e940bbd53e5d7496d8a0c24d26b8af5ce9c8552272d0c220db000b2e0bd13d555b65c7e76b439e9b446807d488446da3df4544263b3ef3d801b7117053893e4f9131cbfaad829a5a41dac6a34e8471ac46941313658efb4186ad91bc579f93b4831d596173893a4ed5c507438e7de81892db059fe17f6b7a0b524f8e3eeb3f4df27f603f7b81dfea26becca938b1917ff24c8670a9065d45d8c2c51285901dd748f2eda3a62deae24dbece4c472a8f8e4f0c6f549335438e017a96f94d84d78c26e3e516c43a53872f9c10ee42f441638c316e95252abf72b266913bc8a007b48bff745f1dfff0c90386f71500a4348180dee5fedbbac9a8d8dff981cd015b8fc2c18e4e06670c41105a5b132177accf50c433943471d2942f993e23bdb13b1032a458c5013897671d1da360445d6433a277d78cda70072af3c5ec274efba13b3ec7ef8cbd1cc85bb7dac868d203ea2446f1e8fcd2dcdc4a455180ab970b75c437b946c0e4b4de92a9f280a7f2aa3181d11ac55dc0b1331075646fcdacc246e9977fdcdeffd25addafd23b4fdc87b9d746c01652ac7e0c030f944b579771fefc980f30268a0a4e8e74f70adc55aa817d8f1b6847436467048fc5c2e251450c3f24d8abd5accb16286b9e8cd0144539cef2edd992f634c2f069fb914cfa91e8cb29ec8ab8cad09b3f2b48fc3dc4228420bc8343f613595688a1f0f75b14bc9e2d500582f20af8700c696ca9e5ee3f7288de14e048bf338f2e9b7ac13e4cca87d7a80b031f75d5454d7e3778f3303ed9322cd5a4e26376b8fa0261ecdc69ffe631a7600fc322d451d62b51ac401f1256be7257b7187e274c9b810459de6e2cb5d36401c7265a4772b4ea079ea76347675e8c8cdcb890a6d5b993b4218b7930ff8ce7990130a15e4c78787d38f8121a65252edba5181cf2ab5c94c1438ed91ad64b0812bac3d546d84dddd5389adc081e4591ab2395b5854bd53c05b4617ce85e059ae97cdcd07eb33cca9609515f3a5e9e1b29778c541845227aba2ccbbb54922b4d522d5514d51ee8af35a5c9fd8b10db17b05c34be28157301f05a82cde1facd13aa26e924fd3ca346703d3f85a34aed39bf5a16284d8672870066f66ac6cc986bc32ba58312bbbecaac6904338e2d140817a0294a3548f8b30f73419337f26532a035c2e2543fbc80fa77ed819e8166108d5eea7deb7c2ab625d279427aa1188000a5bd808a695cf5dd177b561bfb05979896fb982cdca24e282a5c589e579a03e551ddf0270df3d7361565e8de63a203be25dba1a8893f3d65a486f3b355a3ed1d676334e54d63365d291691c33f1d3df10e8da0b1901d9f5e80cfa551cc55ffd76b074a9318f4c7bcada60bad6a301f60473c8d048e28a03a64b514a623f51ef708775faff5f5f4b50a0852752bd9eb64a5d9d320d82d7dfa8d3c3bfb88a8ea47d6e63e0db78a6a0bcdb02c4f5e8ae87bf26a4e8b01cb6909528e8592e36fc6e59506e13e75f21014d07a3ca394be86445521d9450325ba5bf963951b59560092d06bfae5757440b04d37641858afe87597481b38dde1ac77558ba91fcbd26c928068e2eef8e696600ac1b9b4037f2d604964f10fb805d7b71b6345def2a4119bb80cd1dd795adac61c5a9b32d1836fa7c7b553a9210f55c3137e65ce0f0b02138148b0f37fb491eaa5c3984972c7fba436e58a8080cf67903b98424696a41f041868d513667b243e05e4160db059e2db90fcae1f4daba9e84827d60b3a51c92091e89bd97d07a5d93276cf79cc51d0c41024690b0b8ab63743e32329c134eba6287b20ab6eb603b5956945594119540ddd8c6b89e2f38f1e6d49998b54f9746457c2e802c8cb61725bb2c8e331fe993e71ea1f2760f0ad3ddf8ccfcfcee211b39a6af7f72eb25a6025f6efa5f771065cc78f930f5977659b321b195fe56b5a0f5fbc4657dc2451e9b7da2ff30d0592c6a8a8b5696180e6fc567487854d6e435805cd77adce83b140bb4ef272f2fabbb1c402421ad62d6a4d08b0928d970324a569a90a9366a10accb0941de735209961fdff332d1d36da6464e73e3a62f2c8a162b66ff3dc76ac7e0b91b33d4c2d3cb500b095b1b6b4a44f9a5e826ea7b43f34b98123bb1224e2be4e31053aae3e10eefc33912419ba6c4a5f252a251db96f3827440ab76e42e7e04dd4a66246fe25fa33c82cb1c80d1484853abb12af40f1c015271f837eaab03dc579f703bb735abba1e5c7772b6805c6286f58ebd94ff6a1b5d199141c55a5b7463201faa8ba46b78c6d8acf25acade89d60f2774ee1b8dd42059c4a99c483324b5e6a78e9cde74c79ad474822462ea4783c6c1263d3ea27cd8ae62b5b7195b77792171b43d3b3997adf137ad389dfaaa3506a4bc9f38d8c1dbfe8b78e16deb7856cc8eb3d8078bcee85e2e77512195f575ab4e9b9a2b219c9e0ee2c13b496e4251d9b41b98f53120654c628f9b32dc8e2506fa5e15dc9f4c2d18e0f0b907bc0aa369054f2175b06ea0d2b45cb67e8f53db4001545b1519136ac2610d9aaa5120ef86f9cec185ea51db2c58a86d6d223788f1b3c0766023e6308dc922ced4b19689c476b6c911b81bcc3466d2f2793f9649c8431558493eba43cbe447ed141383df8e9243daa1306c61fdda59fd38ce99a695cc32f94606e32ad18f98629624252e2ba3391a2ef9669ae8f7f3e29e3f07ce4eabe715d323f0e62b00f1484b88956411f9d11fc115c11ecb1471b08af75434662e6fe55864d0371d7412d2eea04a192f661bccf4f541bb1ce422ff3b210d29ecbae569790d77834dcbf0bc7fcd03a864dc2ee4b685bc17f4a4fadfab1ec58ada2e9b0fde858df7d0295abaaf4e816d4c362a09d0f8ef704ec643d76dd83703dc3285816bcc5b0f4a191e7d534988a5a9b3535de124e916ada4346b30e09f94d32d18eb5b9c15c8da5a2013354ddb52ccc686a441b02eef8ba9247d03de677eb0aef1fabc6d503e07f599111e6e22a6ad6326f65738f1e3561d7ffeb1ba15d671d07deace23a4bd0d64be786b3dabe40cca2c1558e94375e5ee0079aade77d0df56974836305bd89320d29ee67a86a73e8a631cb19d424d5d9db781a4be1f9af2cf8ed089ec72eab00ce9dc1bff5a745410aa1440c13ba8e41fceeda168765930a444375ac925ab8fc6806b226fe6f3d17b47c3de30a85c07cff053a6b750ca699b196d97235e5a8aaa5c143b1287f70c9e6bc64966238f2f8d51f8b559739811f8c552e292c4de0bc7a7b1b2d63ef392800a8d0d2aa4a93dc16a400358bf23f4354d8e8f7db2f7f97eef7dc973427958eec61e1c7bf1523b69f552efb362e25d2aec53338ddd47c08c622c291e81c0840fd067bb2b0e22e254bc1790623962a7f1be3c0f7a93c44453b82a4fd299acd030a1f3c52ffec105b5d22b9aa2c69d97dd308c493f19d13f18ace53b41684c47861fb90051fc904f66135bde7cc45eea43e2ac5b7bd11e31a58acba5288dae2d36aa2000f64e60b509fa129aa5a5e0308719f02b33ec0"}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000004ec0)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = signalfd(0xffffffffffffffff, &(0x7f0000004f00)={[0x6]}, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000005000)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x800}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000005040)=0x4af, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000005280)={r4, 0x11, 0x7f, 0x8}) clone3(&(0x7f00000052c0)={0x10c140400, &(0x7f0000005080), &(0x7f00000050c0), &(0x7f0000005100), {0x37}, &(0x7f0000005140), 0x0, &(0x7f0000005180)=""/159, &(0x7f0000005240), 0x0, {r8}}, 0x58) [ 76.118805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.121161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.123039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.126450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.128334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.129779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.134947] Bluetooth: hci1: HCI_REQ-0x0c1a [ 76.135448] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.155741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.163518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.168680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.172526] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.174849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.183394] Bluetooth: hci0: HCI_REQ-0x0c1a [ 76.230077] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.232629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.235456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.237067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.238509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.245476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.247626] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.249454] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.254488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.258135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.260000] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.261692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.262118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.275777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.277888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.280682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.283374] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.284928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.289100] Bluetooth: hci6: HCI_REQ-0x0c1a [ 76.291146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.297556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.300186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.301840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.303158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.310357] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.351122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.356157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.357182] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.364701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.366024] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 76.373594] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.374584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.378936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.387696] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.391675] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.186672] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 78.187127] Bluetooth: hci1: command 0x0409 tx timeout [ 78.252026] Bluetooth: hci0: command 0x0409 tx timeout [ 78.314722] Bluetooth: hci6: command 0x0409 tx timeout [ 78.315319] Bluetooth: hci3: command 0x0409 tx timeout [ 78.378332] Bluetooth: hci5: command 0x0409 tx timeout [ 78.443364] Bluetooth: hci7: command 0x0409 tx timeout [ 78.444087] Bluetooth: hci4: command 0x0409 tx timeout [ 80.234350] Bluetooth: hci1: command 0x041b tx timeout [ 80.298338] Bluetooth: hci0: command 0x041b tx timeout [ 80.362320] Bluetooth: hci3: command 0x041b tx timeout [ 80.363076] Bluetooth: hci6: command 0x041b tx timeout [ 80.426307] Bluetooth: hci5: command 0x041b tx timeout [ 80.491356] Bluetooth: hci4: command 0x041b tx timeout [ 80.492556] Bluetooth: hci7: command 0x041b tx timeout [ 82.282289] Bluetooth: hci1: command 0x040f tx timeout [ 82.346285] Bluetooth: hci0: command 0x040f tx timeout [ 82.410287] Bluetooth: hci6: command 0x040f tx timeout [ 82.410329] Bluetooth: hci3: command 0x040f tx timeout [ 82.474270] Bluetooth: hci5: command 0x040f tx timeout [ 82.539310] Bluetooth: hci7: command 0x040f tx timeout [ 82.539767] Bluetooth: hci4: command 0x040f tx timeout [ 83.562345] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 84.330365] Bluetooth: hci1: command 0x0419 tx timeout [ 84.394314] Bluetooth: hci0: command 0x0419 tx timeout [ 84.458313] Bluetooth: hci3: command 0x0419 tx timeout [ 84.458454] Bluetooth: hci6: command 0x0419 tx timeout [ 84.522354] Bluetooth: hci5: command 0x0419 tx timeout [ 84.586532] Bluetooth: hci4: command 0x0419 tx timeout [ 84.586983] Bluetooth: hci7: command 0x0419 tx timeout [ 86.210329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.213920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.215654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.228404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.243857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.257933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.266312] Bluetooth: hci2: HCI_REQ-0x0c1a [ 88.298319] Bluetooth: hci2: command 0x0409 tx timeout [ 90.346315] Bluetooth: hci2: command 0x041b tx timeout [ 92.395314] Bluetooth: hci2: command 0x040f tx timeout [ 94.442308] Bluetooth: hci2: command 0x0419 tx timeout [ 137.967442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.970406] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.971289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.980564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.981596] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.983501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.986143] Bluetooth: hci0: HCI_REQ-0x0c1a [ 138.171468] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.172972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.173712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.175477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.179330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.180057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.181668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.184590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.185480] Bluetooth: hci1: HCI_REQ-0x0c1a [ 138.185825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.188377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.189392] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.190101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.197268] Bluetooth: hci3: HCI_REQ-0x0c1a [ 138.453431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.455067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.456026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.458344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.459328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 138.460303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.461710] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.464182] Bluetooth: hci4: HCI_REQ-0x0c1a [ 138.464829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.476481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.478514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.480102] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 138.480872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 138.484171] Bluetooth: hci6: HCI_REQ-0x0c1a 08:01:13 executing program 1: syz_io_uring_setup(0x2e0c, &(0x7f0000002400), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r0 = inotify_init() finit_module(r0, &(0x7f0000000000)='\x00', 0x2) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/189) [ 140.010293] Bluetooth: hci0: command 0x0409 tx timeout 08:01:13 executing program 1: syz_io_uring_setup(0x57c1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x183}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) [ 140.202303] Bluetooth: hci3: command 0x0409 tx timeout [ 140.202366] Bluetooth: hci1: command 0x0409 tx timeout 08:01:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'caif0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0b5e683a14cab2735fc434572ca045d2366a88eaa225777903e231266ba38d"]}) socket$inet6_udplite(0xa, 0x2, 0x88) [ 140.458299] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 140.459540] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 140.524325] Bluetooth: hci4: command 0x0409 tx timeout [ 140.525686] Bluetooth: hci6: command 0x0409 tx timeout 08:01:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/75, 0x4b) syz_io_uring_setup(0x33d, &(0x7f0000000200)={0x0, 0x933d, 0x2, 0x2, 0x38a}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000800)) [ 140.666501] audit: type=1400 audit(1664524874.177:7): avc: denied { open } for pid=4000 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 140.669782] audit: type=1400 audit(1664524874.177:8): avc: denied { kernel } for pid=4000 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 140.694219] ------------[ cut here ]------------ [ 140.694252] [ 140.694256] ====================================================== [ 140.694262] WARNING: possible circular locking dependency detected [ 140.694269] 6.0.0-rc7-next-20220929 #1 Not tainted [ 140.694281] ------------------------------------------------------ [ 140.694286] syz-executor.1/4002 is trying to acquire lock: [ 140.694298] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 140.694364] [ 140.694364] but task is already holding lock: [ 140.694369] ffff88800e22dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 140.694417] [ 140.694417] which lock already depends on the new lock. [ 140.694417] [ 140.694422] [ 140.694422] the existing dependency chain (in reverse order) is: [ 140.694428] [ 140.694428] -> #3 (&ctx->lock){....}-{2:2}: [ 140.694453] _raw_spin_lock+0x2a/0x40 [ 140.694473] __perf_event_task_sched_out+0x53b/0x18d0 [ 140.694494] __schedule+0xedd/0x2470 [ 140.694520] schedule+0xda/0x1b0 [ 140.694544] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.694566] syscall_exit_to_user_mode+0x19/0x40 [ 140.694589] do_syscall_64+0x48/0x90 [ 140.694621] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.694644] [ 140.694644] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 140.694669] _raw_spin_lock_nested+0x30/0x40 [ 140.694689] raw_spin_rq_lock_nested+0x1e/0x30 [ 140.694712] task_fork_fair+0x63/0x4d0 [ 140.694743] sched_cgroup_fork+0x3d0/0x540 [ 140.694769] copy_process+0x4183/0x6e20 [ 140.694788] kernel_clone+0xe7/0x890 [ 140.694805] user_mode_thread+0xad/0xf0 [ 140.694824] rest_init+0x24/0x250 [ 140.694845] arch_call_rest_init+0xf/0x14 [ 140.694875] start_kernel+0x4c6/0x4eb [ 140.694901] secondary_startup_64_no_verify+0xe0/0xeb [ 140.694927] [ 140.694927] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 140.694952] _raw_spin_lock_irqsave+0x39/0x60 [ 140.694971] try_to_wake_up+0xab/0x1930 [ 140.694996] up+0x75/0xb0 [ 140.695021] __up_console_sem+0x6e/0x80 [ 140.695050] console_unlock+0x46a/0x590 [ 140.695079] vt_ioctl+0x2822/0x2ca0 [ 140.695100] tty_ioctl+0x785/0x16b0 [ 140.695119] __x64_sys_ioctl+0x19a/0x210 [ 140.695144] do_syscall_64+0x3b/0x90 [ 140.695175] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.695198] [ 140.695198] -> #0 ((console_sem).lock){....}-{2:2}: [ 140.695223] __lock_acquire+0x2a02/0x5e70 [ 140.695254] lock_acquire+0x1a2/0x530 [ 140.695282] _raw_spin_lock_irqsave+0x39/0x60 [ 140.695302] down_trylock+0xe/0x70 [ 140.695329] __down_trylock_console_sem+0x3b/0xd0 [ 140.695359] vprintk_emit+0x16b/0x560 [ 140.695389] vprintk+0x84/0xa0 [ 140.695418] _printk+0xba/0xf1 [ 140.695438] report_bug.cold+0x72/0xab [ 140.695468] handle_bug+0x3c/0x70 [ 140.695498] exc_invalid_op+0x14/0x50 [ 140.695529] asm_exc_invalid_op+0x16/0x20 [ 140.695550] group_sched_out.part.0+0x2c7/0x460 [ 140.695583] ctx_sched_out+0x8f1/0xc10 [ 140.695614] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.695634] __schedule+0xedd/0x2470 [ 140.695659] schedule+0xda/0x1b0 [ 140.695684] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.695704] syscall_exit_to_user_mode+0x19/0x40 [ 140.695727] do_syscall_64+0x48/0x90 [ 140.695757] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.695780] [ 140.695780] other info that might help us debug this: [ 140.695780] [ 140.695785] Chain exists of: [ 140.695785] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 140.695785] [ 140.695812] Possible unsafe locking scenario: [ 140.695812] [ 140.695817] CPU0 CPU1 [ 140.695821] ---- ---- [ 140.695825] lock(&ctx->lock); [ 140.695835] lock(&rq->__lock); [ 140.695855] lock(&ctx->lock); [ 140.695867] lock((console_sem).lock); [ 140.695877] [ 140.695877] *** DEADLOCK *** [ 140.695877] [ 140.695881] 2 locks held by syz-executor.1/4002: [ 140.695893] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 140.695948] #1: ffff88800e22dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 140.696001] [ 140.696001] stack backtrace: [ 140.696006] CPU: 0 PID: 4002 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220929 #1 [ 140.696031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 140.696046] Call Trace: [ 140.696053] [ 140.696060] dump_stack_lvl+0x8b/0xb3 [ 140.696093] check_noncircular+0x263/0x2e0 [ 140.696124] ? format_decode+0x26c/0xb50 [ 140.696153] ? print_circular_bug+0x450/0x450 [ 140.696185] ? enable_ptr_key_workfn+0x20/0x20 [ 140.696216] ? format_decode+0x26c/0xb50 [ 140.696245] ? memcpy+0x39/0x60 [ 140.696278] ? vsnprintf+0x4ba/0x1600 [ 140.696311] __lock_acquire+0x2a02/0x5e70 [ 140.696351] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 140.696392] lock_acquire+0x1a2/0x530 [ 140.696423] ? down_trylock+0xe/0x70 [ 140.696454] ? lock_release+0x750/0x750 [ 140.696492] ? vprintk+0x84/0xa0 [ 140.696525] _raw_spin_lock_irqsave+0x39/0x60 [ 140.696545] ? down_trylock+0xe/0x70 [ 140.696575] down_trylock+0xe/0x70 [ 140.696604] ? vprintk+0x84/0xa0 [ 140.696635] __down_trylock_console_sem+0x3b/0xd0 [ 140.696667] vprintk_emit+0x16b/0x560 [ 140.696702] vprintk+0x84/0xa0 [ 140.696734] _printk+0xba/0xf1 [ 140.696755] ? record_print_text.cold+0x16/0x16 [ 140.696784] ? report_bug.cold+0x66/0xab [ 140.696817] ? group_sched_out.part.0+0x2c7/0x460 [ 140.696851] report_bug.cold+0x72/0xab [ 140.696885] handle_bug+0x3c/0x70 [ 140.696917] exc_invalid_op+0x14/0x50 [ 140.696951] asm_exc_invalid_op+0x16/0x20 [ 140.696974] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 140.697016] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 140.697037] RSP: 0018:ffff888037de7c48 EFLAGS: 00010006 [ 140.697053] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.697067] RDX: ffff888032358000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 140.697081] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 140.697095] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800e22dc00 [ 140.697109] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 140.697129] ? group_sched_out.part.0+0x2c7/0x460 [ 140.697166] ? group_sched_out.part.0+0x2c7/0x460 [ 140.697203] ctx_sched_out+0x8f1/0xc10 [ 140.697239] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.697265] ? lock_is_held_type+0xd7/0x130 [ 140.697291] ? __perf_cgroup_move+0x160/0x160 [ 140.697310] ? set_next_entity+0x304/0x550 [ 140.697343] ? update_curr+0x267/0x740 [ 140.697377] ? lock_is_held_type+0xd7/0x130 [ 140.697403] __schedule+0xedd/0x2470 [ 140.697434] ? io_schedule_timeout+0x150/0x150 [ 140.697464] ? rcu_read_lock_sched_held+0x3e/0x80 [ 140.697502] schedule+0xda/0x1b0 [ 140.697529] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.697552] syscall_exit_to_user_mode+0x19/0x40 [ 140.697577] do_syscall_64+0x48/0x90 [ 140.697610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.697634] RIP: 0033:0x7f5009cffb19 [ 140.697649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.697669] RSP: 002b:00007f5007275218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.697689] RAX: 0000000000000001 RBX: 00007f5009e12f68 RCX: 00007f5009cffb19 [ 140.697703] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5009e12f6c [ 140.697716] RBP: 00007f5009e12f60 R08: 000000000000000e R09: 0000000000000000 [ 140.697729] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5009e12f6c [ 140.697743] R13: 00007ffdc78be91f R14: 00007f5007275300 R15: 0000000000022000 [ 140.697766] [ 140.796485] WARNING: CPU: 0 PID: 4002 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 140.797689] Modules linked in: [ 140.798111] CPU: 0 PID: 4002 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220929 #1 [ 140.799153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 140.800579] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 140.801285] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 140.803586] RSP: 0018:ffff888037de7c48 EFLAGS: 00010006 [ 140.804295] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.805209] RDX: ffff888032358000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 140.806131] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 140.807056] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800e22dc00 [ 140.807985] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 140.808905] FS: 00007f5007275700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 140.809925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.810669] CR2: 00007f8cd6646620 CR3: 000000003c154000 CR4: 0000000000350ef0 [ 140.811594] Call Trace: [ 140.811941] [ 140.812248] ctx_sched_out+0x8f1/0xc10 [ 140.812780] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.813458] ? lock_is_held_type+0xd7/0x130 [ 140.814032] ? __perf_cgroup_move+0x160/0x160 [ 140.814626] ? set_next_entity+0x304/0x550 [ 140.815200] ? update_curr+0x267/0x740 [ 140.815737] ? lock_is_held_type+0xd7/0x130 [ 140.816344] __schedule+0xedd/0x2470 [ 140.816858] ? io_schedule_timeout+0x150/0x150 [ 140.817518] ? rcu_read_lock_sched_held+0x3e/0x80 [ 140.818182] schedule+0xda/0x1b0 [ 140.818656] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.819318] syscall_exit_to_user_mode+0x19/0x40 [ 140.819962] do_syscall_64+0x48/0x90 [ 140.820476] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.821161] RIP: 0033:0x7f5009cffb19 [ 140.821658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.824244] RSP: 002b:00007f5007275218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.825252] RAX: 0000000000000001 RBX: 00007f5009e12f68 RCX: 00007f5009cffb19 [ 140.826207] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5009e12f6c [ 140.827155] RBP: 00007f5009e12f60 R08: 000000000000000e R09: 0000000000000000 [ 140.828120] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5009e12f6c [ 140.829069] R13: 00007ffdc78be91f R14: 00007f5007275300 R15: 0000000000022000 [ 140.830044] [ 140.830370] irq event stamp: 624 [ 140.830829] hardirqs last enabled at (623): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 140.832092] hardirqs last disabled at (624): [] __schedule+0x1225/0x2470 [ 140.833234] softirqs last enabled at (450): [] __irq_exit_rcu+0x11b/0x180 [ 140.834392] softirqs last disabled at (445): [] __irq_exit_rcu+0x11b/0x180 [ 140.835540] ---[ end trace 0000000000000000 ]--- [ 141.185237] hrtimer: interrupt took 18344 ns 08:01:14 executing program 1: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x21, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"00000000001b8c00"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/131, 0x83, 0x2020, &(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) 08:01:15 executing program 1: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x21, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"00000000001b8c00"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/131, 0x83, 0x2020, &(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) 08:01:15 executing program 1: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x21, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"00000000001b8c00"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/131, 0x83, 0x2020, &(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) 08:01:15 executing program 1: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x0, 0x21, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"00000000001b8c00"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/131, 0x83, 0x2020, &(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) [ 142.059287] Bluetooth: hci0: command 0x041b tx timeout [ 142.250462] Bluetooth: hci1: command 0x041b tx timeout [ 142.251302] Bluetooth: hci3: command 0x041b tx timeout [ 142.570471] Bluetooth: hci6: command 0x041b tx timeout [ 142.571256] Bluetooth: hci4: command 0x041b tx timeout [ 144.106259] Bluetooth: hci0: command 0x040f tx timeout [ 144.298319] Bluetooth: hci3: command 0x040f tx timeout [ 144.298332] Bluetooth: hci1: command 0x040f tx timeout [ 144.618267] Bluetooth: hci4: command 0x040f tx timeout [ 144.618286] Bluetooth: hci6: command 0x040f tx timeout [ 145.578304] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 146.026296] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 146.154291] Bluetooth: hci0: command 0x0419 tx timeout [ 146.346272] Bluetooth: hci3: command 0x0419 tx timeout [ 146.346744] Bluetooth: hci1: command 0x0419 tx timeout [ 146.666287] Bluetooth: hci6: command 0x0419 tx timeout [ 146.666714] Bluetooth: hci4: command 0x0419 tx timeout [ 149.930270] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 150.442303] Bluetooth: hci7: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 08:01:14 Registers: info registers vcpu 0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff888037de7690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005d R11=0000000000000001 R12=000000000000005d R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5007275700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8cd6646620 CR3=000000003c154000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f5009de67c0 00007f5009de67c8 YMM02=0000000000000000 0000000000000000 00007f5009de67e0 00007f5009de67c0 YMM03=0000000000000000 0000000000000000 00007f5009de67c8 00007f5009de67c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff888037c1fe00 RBX=0000000000000001 RCX=ffff888037c1fd98 RDX=0000000000000008 RSI=ffff888037c1fdf8 RDI=ffff888037c1f428 RBP=ffff888037c1f480 RSP=ffff888037c1f3a0 R8 =ffffffff85ed07e8 R9 =ffffffff85ed07ec R10=ffffed1006f83e92 R11=000000000003603d R12=ffff888037c1f469 R13=ffff888037c1f488 R14=ffff888037c1f428 R15=ffffffff85ed07ed RIP=ffffffff81119ff0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ae6535610 CR3=000000001d8b6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000