Warning: Permanently added '[localhost]:63051' (ECDSA) to the list of known hosts. 2022/09/30 12:33:17 fuzzer started 2022/09/30 12:33:18 dialing manager at localhost:40535 syzkaller login: [ 37.265837] cgroup: Unknown subsys name 'net' [ 37.342999] cgroup: Unknown subsys name 'rlimit' 2022/09/30 12:33:32 syscalls: 2215 2022/09/30 12:33:32 code coverage: enabled 2022/09/30 12:33:32 comparison tracing: enabled 2022/09/30 12:33:32 extra coverage: enabled 2022/09/30 12:33:32 setuid sandbox: enabled 2022/09/30 12:33:32 namespace sandbox: enabled 2022/09/30 12:33:32 Android sandbox: enabled 2022/09/30 12:33:32 fault injection: enabled 2022/09/30 12:33:32 leak checking: enabled 2022/09/30 12:33:32 net packet injection: enabled 2022/09/30 12:33:32 net device setup: enabled 2022/09/30 12:33:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 12:33:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 12:33:32 USB emulation: enabled 2022/09/30 12:33:32 hci packet injection: enabled 2022/09/30 12:33:32 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 12:33:32 802.15.4 emulation: enabled 2022/09/30 12:33:32 fetching corpus: 50, signal 24671/26443 (executing program) 2022/09/30 12:33:32 fetching corpus: 100, signal 36679/39997 (executing program) 2022/09/30 12:33:32 fetching corpus: 150, signal 46443/51180 (executing program) 2022/09/30 12:33:32 fetching corpus: 200, signal 52926/59026 (executing program) 2022/09/30 12:33:32 fetching corpus: 250, signal 56931/64428 (executing program) 2022/09/30 12:33:32 fetching corpus: 300, signal 62049/70776 (executing program) 2022/09/30 12:33:32 fetching corpus: 350, signal 66760/76679 (executing program) 2022/09/30 12:33:32 fetching corpus: 400, signal 70913/81927 (executing program) 2022/09/30 12:33:33 fetching corpus: 450, signal 74653/86723 (executing program) 2022/09/30 12:33:33 fetching corpus: 500, signal 80258/93244 (executing program) 2022/09/30 12:33:33 fetching corpus: 550, signal 82125/96215 (executing program) 2022/09/30 12:33:33 fetching corpus: 600, signal 87114/101974 (executing program) 2022/09/30 12:33:33 fetching corpus: 650, signal 90669/106371 (executing program) 2022/09/30 12:33:33 fetching corpus: 700, signal 93294/109872 (executing program) 2022/09/30 12:33:33 fetching corpus: 750, signal 95776/113201 (executing program) 2022/09/30 12:33:33 fetching corpus: 800, signal 99543/117579 (executing program) 2022/09/30 12:33:34 fetching corpus: 850, signal 101694/120596 (executing program) 2022/09/30 12:33:34 fetching corpus: 900, signal 103419/123157 (executing program) 2022/09/30 12:33:34 fetching corpus: 950, signal 105975/126341 (executing program) 2022/09/30 12:33:34 fetching corpus: 1000, signal 108736/129683 (executing program) 2022/09/30 12:33:34 fetching corpus: 1050, signal 110514/132242 (executing program) 2022/09/30 12:33:34 fetching corpus: 1100, signal 111792/134262 (executing program) 2022/09/30 12:33:34 fetching corpus: 1150, signal 113877/136930 (executing program) 2022/09/30 12:33:34 fetching corpus: 1200, signal 116068/139657 (executing program) 2022/09/30 12:33:34 fetching corpus: 1250, signal 117698/141916 (executing program) 2022/09/30 12:33:35 fetching corpus: 1300, signal 119508/144311 (executing program) 2022/09/30 12:33:35 fetching corpus: 1350, signal 120910/146316 (executing program) 2022/09/30 12:33:35 fetching corpus: 1400, signal 122062/148101 (executing program) 2022/09/30 12:33:35 fetching corpus: 1450, signal 124732/151024 (executing program) 2022/09/30 12:33:35 fetching corpus: 1500, signal 126064/152879 (executing program) 2022/09/30 12:33:35 fetching corpus: 1550, signal 127195/154597 (executing program) 2022/09/30 12:33:35 fetching corpus: 1600, signal 128734/156600 (executing program) 2022/09/30 12:33:35 fetching corpus: 1650, signal 130035/158430 (executing program) 2022/09/30 12:33:35 fetching corpus: 1700, signal 130922/159873 (executing program) 2022/09/30 12:33:36 fetching corpus: 1750, signal 132376/161768 (executing program) 2022/09/30 12:33:36 fetching corpus: 1800, signal 133286/163274 (executing program) 2022/09/30 12:33:36 fetching corpus: 1850, signal 134309/164778 (executing program) 2022/09/30 12:33:36 fetching corpus: 1900, signal 136523/167069 (executing program) 2022/09/30 12:33:36 fetching corpus: 1950, signal 138015/168843 (executing program) 2022/09/30 12:33:36 fetching corpus: 2000, signal 138831/170170 (executing program) 2022/09/30 12:33:36 fetching corpus: 2050, signal 140116/171751 (executing program) 2022/09/30 12:33:36 fetching corpus: 2100, signal 140899/173036 (executing program) 2022/09/30 12:33:37 fetching corpus: 2150, signal 142574/174872 (executing program) 2022/09/30 12:33:37 fetching corpus: 2200, signal 143172/175979 (executing program) 2022/09/30 12:33:37 fetching corpus: 2250, signal 144665/177637 (executing program) 2022/09/30 12:33:37 fetching corpus: 2300, signal 145733/178980 (executing program) 2022/09/30 12:33:37 fetching corpus: 2350, signal 146745/180317 (executing program) 2022/09/30 12:33:37 fetching corpus: 2400, signal 147510/181462 (executing program) 2022/09/30 12:33:37 fetching corpus: 2450, signal 148392/182700 (executing program) 2022/09/30 12:33:37 fetching corpus: 2500, signal 149566/184038 (executing program) 2022/09/30 12:33:37 fetching corpus: 2550, signal 150868/185456 (executing program) 2022/09/30 12:33:37 fetching corpus: 2600, signal 151882/186673 (executing program) 2022/09/30 12:33:38 fetching corpus: 2650, signal 153634/188273 (executing program) 2022/09/30 12:33:38 fetching corpus: 2700, signal 154533/189421 (executing program) 2022/09/30 12:33:38 fetching corpus: 2750, signal 155402/190469 (executing program) 2022/09/30 12:33:38 fetching corpus: 2800, signal 156014/191400 (executing program) 2022/09/30 12:33:38 fetching corpus: 2850, signal 156752/192388 (executing program) 2022/09/30 12:33:38 fetching corpus: 2900, signal 157514/193443 (executing program) 2022/09/30 12:33:38 fetching corpus: 2950, signal 158582/194561 (executing program) 2022/09/30 12:33:38 fetching corpus: 3000, signal 159127/195448 (executing program) 2022/09/30 12:33:39 fetching corpus: 3050, signal 160423/196609 (executing program) 2022/09/30 12:33:39 fetching corpus: 3100, signal 162034/197933 (executing program) 2022/09/30 12:33:39 fetching corpus: 3150, signal 162781/198887 (executing program) 2022/09/30 12:33:39 fetching corpus: 3200, signal 163720/199858 (executing program) 2022/09/30 12:33:39 fetching corpus: 3250, signal 164534/200740 (executing program) 2022/09/30 12:33:39 fetching corpus: 3300, signal 165309/201608 (executing program) 2022/09/30 12:33:39 fetching corpus: 3350, signal 166281/202567 (executing program) 2022/09/30 12:33:39 fetching corpus: 3400, signal 167158/203449 (executing program) 2022/09/30 12:33:39 fetching corpus: 3450, signal 167686/204195 (executing program) 2022/09/30 12:33:39 fetching corpus: 3500, signal 168142/204947 (executing program) 2022/09/30 12:33:40 fetching corpus: 3550, signal 169968/206165 (executing program) 2022/09/30 12:33:40 fetching corpus: 3600, signal 171265/207367 (executing program) 2022/09/30 12:33:40 fetching corpus: 3650, signal 171868/208084 (executing program) 2022/09/30 12:33:40 fetching corpus: 3700, signal 172101/208680 (executing program) 2022/09/30 12:33:40 fetching corpus: 3750, signal 173385/209619 (executing program) 2022/09/30 12:33:40 fetching corpus: 3800, signal 174213/210390 (executing program) 2022/09/30 12:33:40 fetching corpus: 3850, signal 174874/211096 (executing program) 2022/09/30 12:33:40 fetching corpus: 3900, signal 175538/211773 (executing program) 2022/09/30 12:33:41 fetching corpus: 3950, signal 176477/212534 (executing program) 2022/09/30 12:33:41 fetching corpus: 4000, signal 177193/213164 (executing program) 2022/09/30 12:33:41 fetching corpus: 4050, signal 178021/213819 (executing program) 2022/09/30 12:33:41 fetching corpus: 4100, signal 178662/214422 (executing program) 2022/09/30 12:33:41 fetching corpus: 4150, signal 179363/215078 (executing program) 2022/09/30 12:33:41 fetching corpus: 4200, signal 180109/215714 (executing program) 2022/09/30 12:33:41 fetching corpus: 4250, signal 180696/216283 (executing program) 2022/09/30 12:33:41 fetching corpus: 4300, signal 181835/217221 (executing program) 2022/09/30 12:33:42 fetching corpus: 4350, signal 182293/217714 (executing program) 2022/09/30 12:33:42 fetching corpus: 4400, signal 183322/218538 (executing program) 2022/09/30 12:33:42 fetching corpus: 4450, signal 184332/219129 (executing program) 2022/09/30 12:33:42 fetching corpus: 4500, signal 185309/219741 (executing program) 2022/09/30 12:33:42 fetching corpus: 4550, signal 185927/220302 (executing program) 2022/09/30 12:33:42 fetching corpus: 4600, signal 186793/220902 (executing program) 2022/09/30 12:33:42 fetching corpus: 4650, signal 187896/221427 (executing program) 2022/09/30 12:33:42 fetching corpus: 4700, signal 188608/221897 (executing program) 2022/09/30 12:33:43 fetching corpus: 4750, signal 189257/222369 (executing program) 2022/09/30 12:33:43 fetching corpus: 4800, signal 190146/222875 (executing program) 2022/09/30 12:33:43 fetching corpus: 4850, signal 190559/223264 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/223651 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/223993 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/224324 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/224634 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/224963 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/225326 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/225678 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/225999 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/226328 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/226686 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/227027 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/227342 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/227686 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/228006 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/228341 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/228466 (executing program) 2022/09/30 12:33:43 fetching corpus: 4872, signal 190746/228466 (executing program) 2022/09/30 12:33:45 starting 8 fuzzer processes 12:33:45 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000010) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) clone3(&(0x7f0000000480)={0x0, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x21}, &(0x7f0000000240)=""/147, 0x93, &(0x7f0000000300)=""/246, &(0x7f0000000440)=[0x0, 0x0, 0xffffffffffffffff, r1], 0x4}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f00000005c0)={0xffffffffffffffff, r2, 0xfff}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000600)={0x4, 0x24, 0x2}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005600)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/44, 0x2c}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000000880)=""/62, 0x3e}], 0x4}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/40, 0x28}], 0x2, &(0x7f0000000b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000c40), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000cc0)=""/96, 0x60}, {&(0x7f0000000d40)=""/144, 0x90}, {&(0x7f0000000e00)=""/179, 0xb3}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/156, 0x9c}, {&(0x7f0000001000)=""/222, 0xde}, {&(0x7f0000001100)=""/242, 0xf2}, {&(0x7f0000001200)=""/187, 0xbb}], 0x8, &(0x7f0000001340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000014c0)=""/9, 0x9}, {&(0x7f0000001500)=""/122, 0x7a}, {&(0x7f0000001580)}], 0x3, &(0x7f0000001600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000002b00)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/127, 0x7f}, {&(0x7f0000002840)=""/198, 0xc6}, {&(0x7f0000002940)=""/222, 0xde}, {&(0x7f0000002a40)=""/190, 0xbe}], 0x5}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000004000)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/202, 0xca}, {&(0x7f0000003d00)=""/82, 0x52}, {&(0x7f0000003d80)=""/34, 0x22}, {&(0x7f0000003dc0)=""/235, 0xeb}, {&(0x7f0000003ec0)=""/244, 0xf4}, {&(0x7f0000003fc0)=""/6, 0x6}], 0x7, &(0x7f0000004080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000040c0)=@abs, 0x6e, &(0x7f0000004340)=[{&(0x7f0000004140)=""/191, 0xbf}, {&(0x7f0000004200)=""/32, 0x20}, {&(0x7f0000004240)=""/227, 0xe3}], 0x3, &(0x7f0000004380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000004440), 0x6e, &(0x7f00000054c0)=[{&(0x7f00000044c0)=""/4096, 0x1000}], 0x1, &(0x7f0000005500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x8, 0x10000, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x32) r16 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005800), 0x400400) dup2(r11, r16) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000005840)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r17, 0x3, r12, &(0x7f0000005880)={0x40000001}) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f00000058c0)=""/9) ioctl$TCSETS(r9, 0x5402, &(0x7f0000005900)={0x20, 0x2, 0x80000001, 0x80000001, 0x4, "a7578bc8a7f83b0641c7ad138facf802115df9"}) dup3(r10, r14, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r15, 0x0, 0x42, &(0x7f0000005940)={'TPROXY\x00'}, &(0x7f0000005980)=0x1e) splice(r14, &(0x7f00000059c0)=0x100, r9, &(0x7f0000005a00)=0x9, 0x4, 0x8) dup(r13) 12:33:45 executing program 0: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000240)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000280)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000300)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000340)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000380)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000400)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000440)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000480)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000004c0)) 12:33:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x400, 0x30, [0x94c3, 0x9, 0xfffffffffffffffa, 0x1], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x11c, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff4aa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7617}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x53f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x81, 0x3, "94885c03e80c134ad1da3a71db9a7f8964c92024cd6f27fa6e49589de2b7f7cf4ba99eb28ad1162e5471f8ab04d9b2f4e5d15f7a2d031cb617b21522c82b737dc6c56b2cb346eec2abf965d043560f1e045a3445e4be68ce201885671d3549e0b35a4522493cdb7faee993d6220c31e1414a6f5c6e41d8c507d15288d1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x400a810) r3 = socket$inet6(0xa, 0x3, 0x401) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x27, 0x0, "13c14bce1abead0b4562d6a86570347aeb7ec7aee525530d5e43d68ff8ac355fb9d6d64b982c306658cc86cd277cf57e115d398f579d8fd3979e1c5cabab52f446b27cfca928466034eca3fa178bdc53"}, 0xd8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x3f, 0x5, 0x28, 0x0, 0xf1a3, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0xfffffffffffffffb, 0xffff, 0x0, 0x6, 0x1, 0x2, 0x0, 0x80000001, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) ftruncate(r2, 0x6) r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x3, 0x2) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004800}, 0x20040890) fallocate(r2, 0x0, 0x1, 0x78) preadv(r2, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f0000000900)=""/26, 0x1a}, {&(0x7f0000000940)=""/105, 0x69}, {&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000b80)=""/129, 0x81}], 0x8, 0x100, 0x5138) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x4040, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000dc0)={0x6c, @broadcast, 0x4e22, 0x3, 'lblc\x00', 0x3, 0x5, 0xf}, 0x2c) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000e00), 0x400000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000002140)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/231, 0xe7}, {&(0x7f0000001f40)=""/58, 0x3a}, {&(0x7f0000001f80)=""/98, 0x62}, {&(0x7f0000002000)=""/82, 0x52}, {&(0x7f0000002080)=""/130, 0x82}], 0x6) lseek(r3, 0x0, 0x3) openat(0xffffffffffffffff, &(0x7f0000002200)='./file0\x00', 0x40000, 0x1b7) 12:33:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001500), 0x104000, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000001680)={0x2f, 0xd, 0x1, 0x14, 0x7, 0xffffffff, 0x3, 0x136, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001940)={&(0x7f00000016c0), 0xc, &(0x7f0000001900)={&(0x7f0000001700)={0x1ec, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd3b}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x711}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x378}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff3b7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9c3e}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20048081}, 0x10008010) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001bc0)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0xc795, 0x1, {{0x41, 0x4, 0x0, 0x2f, 0x104, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x27, 0xae, [@rand_addr=0x64010101, @remote, @loopback, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @local]}, @timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x8}, 0xfffffffa}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0xc, "1d1810ca1bf60f6a8da3"}, @lsrr={0x83, 0x13, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x8b, 0x1, 0x7, [{@remote, 0x6}, {@private=0xa010101, 0x3}]}, @cipso={0x86, 0x77, 0x1, [{0x7, 0x11, "b8e37d7401bfe743fee77e49b336d0"}, {0x7, 0x4, '6i'}, {0x7, 0x12, "c6a99fec7cf7a530fc162ecaf7bec1a3"}, {0x1, 0x3, 'r'}, {0x7, 0x10, "748630043bda5027fc984e405546"}, {0x2, 0x9, "f672b145dc8ea6"}, {0x2, 0x12, "54ea22b1da43f93de894df8effc9a2d2"}, {0x5, 0x7, "dcbdfc7c2a"}, {0x6, 0x9, "96e9b9f05c7dfc"}, {0x5, 0xc, "7861546578a955f2837b"}]}, @ssrr={0x89, 0xf, 0x29, [@multicast2, @loopback, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001dc0)={'ip6_vti0\x00', &(0x7f0000001d40)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xc0, 0xd70, 0x2, @loopback, @loopback, 0x80, 0x7, 0x3, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002a00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000029c0)={&(0x7f0000001e00)={0xbbc, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x348, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xce, 0x4, "7bbccb151cb1687018127874144b1a53fe8ce1487054cd04579f9a95984a4f49b1e47e6cbd5d90533f74ec605c5f0409cf8547aa965aba09cd80b266ca04baf1da7400583e5036f45afa6eb98e6ef15fc68fe24388ed71257f9eb7545e20cf0d601251a4cc221a75888f163678633e13229e345629d5feb0924572c75edb7994a2cba8dbbfd20d17f5d1c2e2fac82f76ba7f63dcf29707299cc9e707cf9e55d7e2dd0817437e3aa6c02d2f082bf0e2e8cc146402671a243e580f0344fffa23283370fd9a12c9745665c7"}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "d21b399ee5ff13533cefae8df0d28a5020134abef81a3f9432187b538b427bb9c40ea9ef3bba31a65dace09e20c39fcf5a1a35bff77076b6d239ac6bb14ee2c05acbdd6e0d94a4520ebc2b31651e50c9f660218c434506f5399d27481c0989450aa738ea8a9904d0a0995613d96d51054f769fae16b8ee0af76ea9a9c56fe96ad3a6916cb776f2e505edc82a58ddec00365552b79f5053d3693e99afcb6a35f2fd55c62a1b118ab9a7a2c1b87b91f7b055d8d6fc3dec076cd5507a40b0d86aa846c7a0669853cecba255944ca882f3bda12f75"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "ce34da05a3c6fd3e58a2b487df2d8966f280dfe231ffca16b61b00d2d6627701f6b3e5bd0b0547b3a34773e53ef1d011af8809effe8c16e6dc68c77513582db75d191b90a913c9ae8106e3a518a1268f96957699ee81dc892aff192cc35e3b7e7a861ceb8873910b945bd955a3f1042eb1614b42a515c402de5563e8d96a6410297893d07ec9efe82923081ac9663bbce6bbdeee10e413c769e58434cf708bad712914273964279ebcad1d1f"}, @ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "767230eb8c179ec20c6c55ab7203d432fa1ab3e7d67cc28488ac65c92e94031d177f9ac6359c826d57f8f5d5ed87b644446bca441d4620dfb7cf4728c5100f23bb99e2ba4d8372fe320be471ab3a37353055e0503f8f4e07b3e6099be02de247971819c66431948177b3377272fb2d505c5976d4ca73f276ed0ee9cb343ae3f17b1434c584ab9095df7b0edbbab8187f265fc6e16a1ffd1fe6011cd3865dbf8809fe7876282db1e82108e371b129d495909ac121f2d9233dc88e83292609cbc8d7d6bf5a8ecaa9795beca9dfe1b3bca234d692c5280ec1d670a27d0b"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "65de3ac127121c5b067f7dbe6afe48866056fbeaa1aa37192378f6e89430040dc942c272f5c724afc7fbc63c274baea3e10812628f48994bf03b835fbd8e0f674d1e8c7d066285a8dd8b6885ea3cd44a99254603ed4496307cb32ed59debafb3d756a9b44d168e3b6800a89a190fa03b114e86de4db045ea029f6547dda506ba69193da0b03ea1e55ed88fc86e9e3b2ed26d7f200cc2ed3bde29c602bd9c6bd98bc9bcd98c21c8878c746fd2d5f5faf12954d28991bd90c89d51168c058aa4afc9b3f95333805591998eadc475b480d0656f01356dd7a3"}, @ETHTOOL_A_BITSET_MASK={0x90, 0x5, "38a8f524109ff0fa2a1dbcb085e3db070e31121d5f99dd79f0903bc6913263a9ac0477884c83fbabc2e0f98044642252f1599fbb0af7dce7b6a9b2d19f6dff9af429479f8d195a251f25be360f006a799fc460e61fe6b377237985fb09a1db0029290406cae17dc69f7212dec0ba4d4fa5b8327067e7f3b8c2494086cc9b4d99b1a6bacfcef5b78e9bb6c045"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbd}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "31942730ae62477ea43150518478e41d534d1e59678a42167e06cf4442bffdde7356fd0a21a885cb63540d9479318049f30b1f03bd4a905b11e49f9d30eb43265629205967f82434394335ccf4c6f9f23166cc95d8ac63b0bc953460639c29b2a77329a749014719a773a76805f4060dee9664ff2b1ee333f96a24340e0e38c4baa960b39ec6f2986d749732080f61255813cdc8a9245d8a685781098268037ebdda4a80a241c0c3ee688d108a3f426c618ff1741867102d1043802febed960ccf5bf844493ebcd3c8c6952ae01bb9d19c67040feaff74a948ed00"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd30}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xccef}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8ee}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x210, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4dc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x221}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',\',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':}(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')*\'\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\[@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{-:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0df}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x8d)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5e6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x204, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x917b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc9}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+.G\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[:\'\\)]\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "ab2ed7dc28"}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "2a7abda4a24d9461eef755c5a694dcb98f7ee875a1e3ce621f9d7a5730aaadf524609a2e2fe9b3b123af7eee1a1ffb38788feb983c006dd285b6182a62831034"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "aa4d34f2b6e150451c366ff8685ef1e8459eb2f5fb0e91327f0af4d1e04aa7b0198e446f077eb748260a889d0f30666bf65e95155d77e07fdf8b4324255fb3bd3027466c5fd358a6c414184c56f6a00167815c9a"}]}]}, 0xbbc}, 0x1, 0x0, 0x0, 0x805}, 0x100) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000002a40)) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048084}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000002c00)={'syztnl2\x00', &(0x7f0000002b80)={'ip6_vti0\x00', r3, 0x2f, 0x6, 0x80, 0x81, 0x40, @loopback, @remote, 0x8000, 0x8, 0x8e2, 0x8000}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000002c40)={0x0, @adiantum, 0x0, @desc1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002e40)={'syztnl2\x00', &(0x7f0000002dc0)={'syztnl1\x00', r3, 0x4, 0x9, 0x18, 0x10000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x8, 0x7800, 0x2, 0x2267}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000002fc0)={'ip6_vti0\x00', &(0x7f0000002f40)={'syztnl0\x00', r4, 0x29, 0x9, 0x0, 0x456, 0x68, @remote, @private2, 0x7800, 0x7, 0xcd41, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000003080)={'erspan0\x00', &(0x7f0000003000)={'erspan0\x00', r8, 0x7, 0x80, 0x1f, 0x400, {{0x11, 0x4, 0x2, 0x36, 0x44, 0x66, 0x0, 0x71, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @generic={0x86, 0x10, "a6b62bea573a9d391dc1de667387"}, @ssrr={0x89, 0x1b, 0xdd, [@dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @multicast1]}]}}}}}) 12:33:45 executing program 7: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, 0x438, 0x7f, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x4) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0xce20000000000, 0x10, '\x00', 0x73e073d93bfb023, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f00000001c0)={0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000700), 0x2000, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x1dc4bba2041171b2, 0x80, 0x0, 0x5, 0x8, 0x3, 0x0, 0x8, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x80000001, 0xb1}, 0x10000, 0x1f, 0x5, 0x0, 0x3f, 0x5, 0x6, 0x0, 0x7, 0x0, 0x81}, r1, 0x9, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) fcntl$lock(r1, 0x6, &(0x7f0000000780)={0x0, 0x2, 0x1, 0x100, 0xffffffffffffffff}) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/182, 0xb6, 0x400) recvmsg$unix(r1, &(0x7f0000001100)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000980)=""/27, 0x1b}, {&(0x7f00000009c0)=""/194, 0xc2}, {&(0x7f0000000ac0)=""/83, 0x53}, {&(0x7f0000000b40)=""/250, 0xfa}, {&(0x7f0000000c40)=""/175, 0xaf}, {&(0x7f0000000d00)=""/220, 0xdc}, {&(0x7f0000000e00)=""/178, 0xb2}, {&(0x7f0000000ec0)=""/157, 0x9d}, {&(0x7f0000000f80)=""/40, 0x28}], 0x9, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x100) r4 = openat(r1, &(0x7f0000001140)='./file0\x00', 0x40801, 0x82) perf_event_open(&(0x7f0000000880)={0x0, 0x80, 0x20, 0x9, 0x1, 0x4, 0x0, 0x0, 0x2120, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcc, 0x2, @perf_config_ext={0x8}, 0xc420, 0x40, 0x5, 0x9, 0x5, 0xebd7, 0x4, 0x0, 0x4c, 0x0, 0xff}, r2, 0xe, r4, 0x19) r5 = fspick(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x0) flock(r5, 0x2) r6 = syz_open_dev$sg(&(0x7f00000011c0), 0x3, 0x202000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001200)={{0x1, 0x1, 0x18, r6, {0x22}}, './file0\x00'}) mknodat$null(r3, &(0x7f0000001240)='./file0/file0\x00', 0x100, 0x103) 12:33:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x8, 0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000001c0)={0x5, 0xff}, 0x2) fcntl$addseals(r2, 0x409, 0x0) r3 = fsmount(r1, 0x1, 0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)={0x80000004}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = openat(r4, &(0x7f0000000280)='./file0\x00', 0x40000, 0x23e) r6 = syz_io_uring_setup(0x36cd, &(0x7f00000002c0)={0x0, 0x8142, 0x2, 0x3, 0x309}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) close(r6) openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x101d00, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {0x40}}, '.\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0xd2, 0x8, 0x30000000, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x40, 0x5}}) pread64(r5, &(0x7f0000000500)=""/162, 0xa2, 0xffffffff00000000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/custom1\x00', 0x800, 0x0) fcntl$setown(r8, 0x8, 0x0) [ 64.524918] audit: type=1400 audit(1664541225.701:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:33:45 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x6, 0x0, {{0x17, 0x4, 0x2, 0x3b, 0x5c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @loopback, {[@end, @timestamp_prespec={0x44, 0x1c, 0xda, 0x3, 0x4, [{@remote, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa3}]}, @generic={0x83, 0x9, "8880bcf990f220"}, @noop, @timestamp_prespec={0x44, 0x1c, 0xb6, 0x3, 0x6, [{@multicast2, 0x3}, {@remote, 0x9}, {@multicast1, 0x2b31d6e6}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x7d, 0x0, 0x9b, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7, 0x20, 0x101, 0x6}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe8, r0, 0x321, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe8}}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}}, 0x2000c050) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x4e4, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "a47d4eeb4390ac0fcfe23c9ce8d3aefaa28865baac595764622f0be54e2bd7315313d9ab98a9c0f37eb2a39a53c22d4394b75a889a4986520148331310fe9367df20e5f9156db564963a56762dd233be5a0544494da817fb91ef3ef755b16ecb9e045da31f3465c450e58ac8e280f17a48308b339712b65fef8c621405a3"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "8f3359f2c1723a5e7d693995d77bbc3b5f1b1407754a"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$-$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$)\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe5cb}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "4bbe747b2e72038752aa1ed576f125a2c1f80d70bb7095f253f92c37c569eb374fcca73ca8a5c2897f75ec96b613c6a1e9f0ffc25866f242fd3f6584a7887c027facb25e7fad54e4ad976f180268895215605cc570de979d24db5b"}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "92a4e5e08e57"}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1ac, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x508}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@#}\'+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ')()+.[^]^\n*\xf0:.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ')/%&,\'$)\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')*&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12be}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\\\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r5 = syz_io_uring_complete(0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3e8, 0x4, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0xb) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r6) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000000c00)={0x1588, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x11a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':@*{\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!\'\x10)*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '++-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!#)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_MASK={0xe7, 0x5, "b7dcb5e6e3ecbacdf626bf6ff52575c0f3a67e7fe43fa9ac09e25d01389110088a36d496be3877e8bd02cea6fb2e12459a10c66cf7d594fe2cf1124f690461966947dc8452f071027eab31c38026cbc186e0502365e539e397643a58bce69392840363d44bd0ff2f4aa0ab9fd53b5788a75d7e863bcf5c253cb122dd414e30e4c8bd561c25ec894969adceaf058511feb7d8810453512fab55e609cfc47f920b8b38194771cd62815ab481c8a21146c7113749371a8265287d347f1c791abbbfad767a3282c92064d2a32f66ae22d79d0af351521e99b81cdd0a9cdd04eb3d63cce6a5"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{\xde%/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffff}, @ETHTOOL_A_EEE_MODES_OURS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "03d00c30fe41f1ca43ba5fadf98c467462fc0a79dc425b0f84d5e9781052e1d45606c558e872d799cc55f2c67b0de7569a029e74756e9a58ac57971c7c714041da32e12d0cee29b8"}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "f628934563aef3ce84ea594a072074617c620805b0d3752c433791cb2761fb55efcb4095abad28901057a66e0c7e7838cd3b6bc482b2ef1e2c00ce54d0dc"}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_EEE_MODES_OURS={0x204, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xff, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "740bb896b77115e3ee4c3d82fd25a0cb934d688442fcefc3800cc545a3e0e4cb97bac02f40aa803a6007026840995854cceeb6305be9e742ad7fc04f630cb12485fbe1c411c9a67658ffbd2e2ad8af849275394b4050b508581fc647595ef3eb54bf3c80"}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "045c8f0ef435b08adb653c6493b9acb933b49c09a67ec37958682d8e6e023940286f44f7cf0210807a538183f5a58026e4ad15151c615c3d14eb39b907d358a8fba405781160fcbf5958d88002ef45bc4ba44c3721356d413745ae53efba3b1f9264358cccd7cd83792495573baa25ae9dbc0af8525e03cbe02cbcdc49981d9dc0f199ffacc6e75778be766a48fc45f5e25c42d4"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4e}, @ETHTOOL_A_BITSET_MASK={0x68, 0x5, "029ed8e6775f51554333d19bcd0ecbde33aba4f844b24c4d5bf1500975dbef602e3bbf22b8089b73c6ebf3887781cdbd0b0038cce19937d6545a187b38cb1dfa7b58f064a1842fa7fcc625a77d5a0a2cfd21bb5ff46c1d68f2ab5b539c65bdefafb72051"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "485997499d3659df7e88ea802ebd50c8d3074b8df682ec8559fef9f4e462bd620c748e55595b0d6f89c139927103beb27a9dc346b1545c0dfe56d50707c137f96819143ff6f20d4d3daf18ef32dcc3e7cd333c61eb87ff759f3e9e53f0a0fd4f2f3caf30fca62d527263ea6d38b8833a83dd7cdb17f5071a1d6395f5bf26d4f4bd431a35e97f3550f88844374f03"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1588}, 0x1, 0x0, 0x0, 0x20004005}, 0x20000801) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002240), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000022c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x84) read$eventfd(r5, &(0x7f0000002400), 0x8) read$eventfd(r8, &(0x7f0000002440), 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002480)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x14) 12:33:45 executing program 6: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/serio', 0x400, 0x4c) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x2c00cc15}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0xcb5521628fe800b2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff50}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040005) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x81, 0xa}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x800}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x3, 0x12}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac04, 0x7dad417269a51c4c, 0xb]}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac0c, 0xfac0f]}, @NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac08, 0xfac0b, 0xfac03, 0xfac08, 0xfac0a, 0xfac10, 0xfac0f]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r4 = openat2(r1, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x2000, 0x10, 0x15}, 0x18) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), r1) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x48890}, 0x800) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x747}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44008805}, 0x48010) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x40, 0x571cbe628e9ef9aa, 0xe3, 0x2, {{0x1c, 0x4, 0x3, 0x0, 0x70, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x23, 0x8e, [@broadcast, @empty, @loopback, @private=0xa010101, @local, @remote, @rand_addr=0x64010102, @private=0xa010100]}, @ssrr={0x89, 0xb, 0x94, [@loopback, @remote]}, @lsrr={0x83, 0x1f, 0x84, [@rand_addr=0x64010102, @empty, @multicast2, @multicast2, @multicast2, @local, @loopback]}, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x0, [{@multicast1, 0x5}]}, @noop]}}}}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000980)={0x0, @initdev, @local}, &(0x7f00000009c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x130, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x130}}, 0x40001) r10 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000d00)) fcntl$notify(r10, 0x402, 0x40000023) [ 65.714501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.717802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.719241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.722898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.725031] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.726468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.731758] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.973062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.978040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.990424] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.992090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.997550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.040736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.041799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.045770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.048851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.050055] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.053622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.057787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.060653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.061936] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.079158] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.081797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.083262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.086006] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.090496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.094892] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.109517] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.113815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.115733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.117094] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.118427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.123998] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.125296] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.126462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.127642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.144096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.145250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.146223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.147284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.154623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.155891] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.164366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.165402] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.166375] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.167351] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.169461] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.170944] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.174752] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.175959] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.187595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.188953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.196549] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.200352] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.202803] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.208242] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.794180] Bluetooth: hci0: command 0x0409 tx timeout [ 68.112229] Bluetooth: hci4: command 0x0409 tx timeout [ 68.112272] Bluetooth: hci3: command 0x0409 tx timeout [ 68.112935] Bluetooth: hci1: command 0x0409 tx timeout [ 68.240210] Bluetooth: hci5: command 0x0409 tx timeout [ 68.240744] Bluetooth: hci7: command 0x0409 tx timeout [ 68.241280] Bluetooth: hci6: command 0x0409 tx timeout [ 68.241803] Bluetooth: hci2: command 0x0409 tx timeout [ 69.840167] Bluetooth: hci0: command 0x041b tx timeout [ 70.160167] Bluetooth: hci1: command 0x041b tx timeout [ 70.160643] Bluetooth: hci3: command 0x041b tx timeout [ 70.161064] Bluetooth: hci4: command 0x041b tx timeout [ 70.288224] Bluetooth: hci2: command 0x041b tx timeout [ 70.288695] Bluetooth: hci6: command 0x041b tx timeout [ 70.289100] Bluetooth: hci7: command 0x041b tx timeout [ 70.289707] Bluetooth: hci5: command 0x041b tx timeout [ 71.889232] Bluetooth: hci0: command 0x040f tx timeout [ 72.209216] Bluetooth: hci4: command 0x040f tx timeout [ 72.209676] Bluetooth: hci3: command 0x040f tx timeout [ 72.210066] Bluetooth: hci1: command 0x040f tx timeout [ 72.337216] Bluetooth: hci5: command 0x040f tx timeout [ 72.337681] Bluetooth: hci7: command 0x040f tx timeout [ 72.338078] Bluetooth: hci6: command 0x040f tx timeout [ 72.338530] Bluetooth: hci2: command 0x040f tx timeout [ 73.937223] Bluetooth: hci0: command 0x0419 tx timeout [ 74.256232] Bluetooth: hci1: command 0x0419 tx timeout [ 74.256694] Bluetooth: hci3: command 0x0419 tx timeout [ 74.257076] Bluetooth: hci4: command 0x0419 tx timeout [ 74.385251] Bluetooth: hci2: command 0x0419 tx timeout [ 74.385709] Bluetooth: hci6: command 0x0419 tx timeout [ 74.386101] Bluetooth: hci7: command 0x0419 tx timeout [ 74.386545] Bluetooth: hci5: command 0x0419 tx timeout 12:34:44 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x18, 0x4, 0x1e5, &(0x7f0000002640)}) 12:34:44 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003300)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x4011) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 12:34:44 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="11", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x1, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r3, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 123.056086] audit: type=1400 audit(1664541284.232:7): avc: denied { open } for pid=3883 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.059436] audit: type=1400 audit(1664541284.232:8): avc: denied { kernel } for pid=3883 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.069801] ------------[ cut here ]------------ [ 123.069824] [ 123.069828] ====================================================== [ 123.069832] WARNING: possible circular locking dependency detected [ 123.069843] 6.0.0-rc7-next-20220929 #1 Not tainted [ 123.069849] ------------------------------------------------------ [ 123.069852] syz-executor.0/3888 is trying to acquire lock: [ 123.069859] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 123.069901] [ 123.069901] but task is already holding lock: [ 123.069904] ffff88803ef28c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.069931] [ 123.069931] which lock already depends on the new lock. [ 123.069931] [ 123.069934] [ 123.069934] the existing dependency chain (in reverse order) is: [ 123.069938] [ 123.069938] -> #3 (&ctx->lock){....}-{2:2}: [ 123.069951] _raw_spin_lock+0x2a/0x40 [ 123.069963] __perf_event_task_sched_out+0x53b/0x18d0 [ 123.069974] __schedule+0xedd/0x2470 [ 123.069989] schedule+0xda/0x1b0 [ 123.070002] exit_to_user_mode_prepare+0x114/0x1a0 [ 123.070015] syscall_exit_to_user_mode+0x19/0x40 [ 123.070028] do_syscall_64+0x48/0x90 [ 123.070046] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.070059] [ 123.070059] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 123.070072] _raw_spin_lock_nested+0x30/0x40 [ 123.070083] raw_spin_rq_lock_nested+0x1e/0x30 [ 123.070096] task_fork_fair+0x63/0x4d0 [ 123.070113] sched_cgroup_fork+0x3d0/0x540 [ 123.070127] copy_process+0x4183/0x6e20 [ 123.070138] kernel_clone+0xe7/0x890 [ 123.070148] user_mode_thread+0xad/0xf0 [ 123.070158] rest_init+0x24/0x250 [ 123.070170] arch_call_rest_init+0xf/0x14 [ 123.070187] start_kernel+0x4c6/0x4eb [ 123.070201] secondary_startup_64_no_verify+0xe0/0xeb [ 123.070215] [ 123.070215] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 123.070229] _raw_spin_lock_irqsave+0x39/0x60 [ 123.070240] try_to_wake_up+0xab/0x1930 [ 123.070253] up+0x75/0xb0 [ 123.070267] __up_console_sem+0x6e/0x80 [ 123.070283] console_unlock+0x46a/0x590 [ 123.070299] release_tty+0xcd/0x890 [ 123.070311] tty_release_struct+0xb4/0xe0 [ 123.070321] tty_release+0xbb2/0xe40 [ 123.070331] __fput+0x263/0xa40 [ 123.070349] task_work_run+0x170/0x280 [ 123.070361] exit_to_user_mode_prepare+0x199/0x1a0 [ 123.070371] syscall_exit_to_user_mode+0x19/0x40 [ 123.070384] do_syscall_64+0x48/0x90 [ 123.070400] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.070413] [ 123.070413] -> #0 ((console_sem).lock){....}-{2:2}: [ 123.070426] __lock_acquire+0x2a02/0x5e70 [ 123.070443] lock_acquire+0x1a2/0x530 [ 123.070459] _raw_spin_lock_irqsave+0x39/0x60 [ 123.070469] down_trylock+0xe/0x70 [ 123.070484] __down_trylock_console_sem+0x3b/0xd0 [ 123.070500] vprintk_emit+0x16b/0x560 [ 123.070516] vprintk+0x84/0xa0 [ 123.070532] _printk+0xba/0xf1 [ 123.070543] report_bug.cold+0x72/0xab [ 123.070560] handle_bug+0x3c/0x70 [ 123.070576] exc_invalid_op+0x14/0x50 [ 123.070593] asm_exc_invalid_op+0x16/0x20 [ 123.070604] group_sched_out.part.0+0x2c7/0x460 [ 123.070622] ctx_sched_out+0x8f1/0xc10 [ 123.070639] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.070650] __schedule+0xedd/0x2470 [ 123.070663] schedule+0xda/0x1b0 [ 123.070676] exit_to_user_mode_prepare+0x114/0x1a0 [ 123.070687] syscall_exit_to_user_mode+0x19/0x40 [ 123.070700] do_syscall_64+0x48/0x90 [ 123.070716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.070728] [ 123.070728] other info that might help us debug this: [ 123.070728] [ 123.070731] Chain exists of: [ 123.070731] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 123.070731] [ 123.070746] Possible unsafe locking scenario: [ 123.070746] [ 123.070749] CPU0 CPU1 [ 123.070751] ---- ---- [ 123.070753] lock(&ctx->lock); [ 123.070759] lock(&rq->__lock); [ 123.070765] lock(&ctx->lock); [ 123.070772] lock((console_sem).lock); [ 123.070778] [ 123.070778] *** DEADLOCK *** [ 123.070778] [ 123.070780] 2 locks held by syz-executor.0/3888: [ 123.070786] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 123.070815] #1: ffff88803ef28c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.070842] [ 123.070842] stack backtrace: [ 123.070845] CPU: 0 PID: 3888 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 123.070857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.070866] Call Trace: [ 123.070869] [ 123.070874] dump_stack_lvl+0x8b/0xb3 [ 123.070892] check_noncircular+0x263/0x2e0 [ 123.070909] ? format_decode+0x26c/0xb50 [ 123.070925] ? print_circular_bug+0x450/0x450 [ 123.070942] ? enable_ptr_key_workfn+0x20/0x20 [ 123.070959] ? format_decode+0x26c/0xb50 [ 123.070976] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 123.070994] __lock_acquire+0x2a02/0x5e70 [ 123.071015] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 123.071038] lock_acquire+0x1a2/0x530 [ 123.071054] ? down_trylock+0xe/0x70 [ 123.071071] ? lock_release+0x750/0x750 [ 123.071092] ? vprintk+0x84/0xa0 [ 123.071110] _raw_spin_lock_irqsave+0x39/0x60 [ 123.071121] ? down_trylock+0xe/0x70 [ 123.071137] down_trylock+0xe/0x70 [ 123.071153] ? vprintk+0x84/0xa0 [ 123.071169] __down_trylock_console_sem+0x3b/0xd0 [ 123.071186] vprintk_emit+0x16b/0x560 [ 123.071205] vprintk+0x84/0xa0 [ 123.071222] _printk+0xba/0xf1 [ 123.071234] ? record_print_text.cold+0x16/0x16 [ 123.071250] ? report_bug.cold+0x66/0xab [ 123.071268] ? group_sched_out.part.0+0x2c7/0x460 [ 123.071286] report_bug.cold+0x72/0xab [ 123.071304] handle_bug+0x3c/0x70 [ 123.071322] exc_invalid_op+0x14/0x50 [ 123.071340] asm_exc_invalid_op+0x16/0x20 [ 123.071352] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.071372] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.071383] RSP: 0018:ffff888040fd7c48 EFLAGS: 00010006 [ 123.071392] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.071400] RDX: ffff888040fc1ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 123.071408] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 123.071415] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803ef28c00 [ 123.071423] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 123.071434] ? group_sched_out.part.0+0x2c7/0x460 [ 123.071454] ? group_sched_out.part.0+0x2c7/0x460 [ 123.071473] ctx_sched_out+0x8f1/0xc10 [ 123.071493] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.071507] ? lock_is_held_type+0xd7/0x130 [ 123.071521] ? __perf_cgroup_move+0x160/0x160 [ 123.071531] ? set_next_entity+0x304/0x550 [ 123.071549] ? update_curr+0x267/0x740 [ 123.071567] ? lock_is_held_type+0xd7/0x130 [ 123.071581] __schedule+0xedd/0x2470 [ 123.071598] ? io_schedule_timeout+0x150/0x150 [ 123.071615] ? rcu_read_lock_sched_held+0x3e/0x80 [ 123.071635] schedule+0xda/0x1b0 [ 123.071650] exit_to_user_mode_prepare+0x114/0x1a0 [ 123.071662] syscall_exit_to_user_mode+0x19/0x40 [ 123.071676] do_syscall_64+0x48/0x90 [ 123.071693] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.071706] RIP: 0033:0x7f833e433b19 [ 123.071715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.071726] RSP: 002b:00007f833b9a9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.071736] RAX: 0000000000000001 RBX: 00007f833e546f68 RCX: 00007f833e433b19 [ 123.071744] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f833e546f6c [ 123.071751] RBP: 00007f833e546f60 R08: 000000000000000e R09: 0000000000000000 [ 123.071759] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f833e546f6c [ 123.071766] R13: 00007ffc2a805b0f R14: 00007f833b9a9300 R15: 0000000000022000 [ 123.071779] [ 123.127527] WARNING: CPU: 0 PID: 3888 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 123.128206] Modules linked in: [ 123.128446] CPU: 0 PID: 3888 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 123.129041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 123.129900] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.130318] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.131695] RSP: 0018:ffff888040fd7c48 EFLAGS: 00010006 [ 123.132092] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.132619] RDX: ffff888040fc1ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 123.133164] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 123.133718] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803ef28c00 [ 123.134256] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 123.134785] FS: 00007f833b9a9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 123.135399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.135821] CR2: 00007fc0b6d7af70 CR3: 00000000177fe000 CR4: 0000000000350ef0 [ 123.136355] Call Trace: [ 123.136557] [ 123.136733] ctx_sched_out+0x8f1/0xc10 [ 123.137032] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.137411] ? lock_is_held_type+0xd7/0x130 [ 123.137727] ? __perf_cgroup_move+0x160/0x160 [ 123.138091] ? set_next_entity+0x304/0x550 [ 123.138409] ? update_curr+0x267/0x740 [ 123.138712] ? lock_is_held_type+0xd7/0x130 [ 123.139038] __schedule+0xedd/0x2470 [ 123.139322] ? io_schedule_timeout+0x150/0x150 [ 123.139659] ? rcu_read_lock_sched_held+0x3e/0x80 [ 123.140042] schedule+0xda/0x1b0 [ 123.140299] exit_to_user_mode_prepare+0x114/0x1a0 [ 123.140657] syscall_exit_to_user_mode+0x19/0x40 [ 123.141010] do_syscall_64+0x48/0x90 [ 123.141303] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.141699] RIP: 0033:0x7f833e433b19 [ 123.141984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.143331] RSP: 002b:00007f833b9a9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.143882] RAX: 0000000000000001 RBX: 00007f833e546f68 RCX: 00007f833e433b19 [ 123.144401] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f833e546f6c [ 123.144926] RBP: 00007f833e546f60 R08: 000000000000000e R09: 0000000000000000 [ 123.145457] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f833e546f6c [ 123.145973] R13: 00007ffc2a805b0f R14: 00007f833b9a9300 R15: 0000000000022000 [ 123.146500] [ 123.146685] irq event stamp: 684 [ 123.146937] hardirqs last enabled at (683): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 123.147640] hardirqs last disabled at (684): [] __schedule+0x1225/0x2470 [ 123.148270] softirqs last enabled at (344): [] __irq_exit_rcu+0x11b/0x180 [ 123.148922] softirqs last disabled at (339): [] __irq_exit_rcu+0x11b/0x180 [ 123.149561] ---[ end trace 0000000000000000 ]--- 12:34:44 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = shmget(0x0, 0x3000, 0xf01, &(0x7f0000ffd000/0x3000)=nil) r2 = geteuid() statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x2, 0xee01, 0xee00, r2, r3, 0x20, 0x1}, 0xfffffffe, 0x1000, 0x436, 0x10000, 0x0, 0x0, 0x1}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x3) 12:34:44 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) fcntl$notify(r1, 0x402, 0x2) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r7, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000500)='-!:@\x00', &(0x7f0000000540)='\x00'], &(0x7f0000000740)=[&(0x7f00000005c0)='/dev/bsg\x00', &(0x7f0000000600)='+(\x00', &(0x7f0000000640)='%#\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/bsg\x00', &(0x7f0000000700)='system.posix_acl_default\x00'], 0x100) setresuid(0x0, r6, 0x0) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r8, 0xffffffffffffffff) setresgid(r8, 0x0, r8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x3, r5, r4, r6, r8, 0x1ce}, 0x0, 0x3, 0xdde3, 0x1, 0xffffffffffffffff, 0x0, 0xd1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)='./file0\x00', 0x200, 0x4000}, 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x0, r3}, {0x2, 0x0, 0xee00}], {0x4, 0x5}, [{0x8, 0x1, r4}, {0x8, 0x2}, {0x8, 0x0, r9}, {0x8, 0x0, 0xee01}], {0x10, 0x6}}, 0x5c, 0x3) dup3(r0, r1, 0x0) 12:34:44 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) fcntl$notify(r1, 0x402, 0x2) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r7, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000500)='-!:@\x00', &(0x7f0000000540)='\x00'], &(0x7f0000000740)=[&(0x7f00000005c0)='/dev/bsg\x00', &(0x7f0000000600)='+(\x00', &(0x7f0000000640)='%#\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/bsg\x00', &(0x7f0000000700)='system.posix_acl_default\x00'], 0x100) setresuid(0x0, r6, 0x0) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r8, 0xffffffffffffffff) setresgid(r8, 0x0, r8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x3, r5, r4, r6, r8, 0x1ce}, 0x0, 0x3, 0xdde3, 0x1, 0xffffffffffffffff, 0x0, 0xd1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)='./file0\x00', 0x200, 0x4000}, 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x0, r3}, {0x2, 0x0, 0xee00}], {0x4, 0x5}, [{0x8, 0x1, r4}, {0x8, 0x2}, {0x8, 0x0, r9}, {0x8, 0x0, 0xee01}], {0x10, 0x6}}, 0x5c, 0x3) dup3(r0, r1, 0x0) 12:34:44 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="11", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x1, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r3, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 12:34:44 executing program 6: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x2, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x3, 0xfffffffffffffffe, 0x87ffffb) r2 = getpgid(0x0) perf_event_open(&(0x7f00000038c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="11", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x28, 0x8, 0xd1, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x14804, 0x8, 0x1, 0x2, 0x0, 0x3, 0x4824, 0x0, 0x0, 0x0, 0xffffffffffff8000}, r2, 0xc, r3, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000340)) getpgid(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 123.646124] hrtimer: interrupt took 16070 ns [ 129.104244] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 129.168143] Bluetooth: hci6: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 12:34:44 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff888040fd7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f833b9a9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc0b6d7af70 CR3=00000000177fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f833e51a7c0 00007f833e51a7c8 YMM02=0000000000000000 0000000000000000 00007f833e51a7e0 00007f833e51a7c0 YMM03=0000000000000000 0000000000000000 00007f833e51a7c8 00007f833e51a7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=8000000035fa4007 RCX=0000000000000000 RDX=ffff888020590000 RSI=ffffffff81691049 RDI=ffff888020590000 RBP=ffff88801dad7fd8 RSP=ffff888018a37910 R8 =0000000000000007 R9 =0000000000000000 R10=8000000035fa4007 R11=0000000000000001 R12=ffff888018a37cf8 R13=8000000035fa4007 R14=dffffc0000000000 R15=00007f340b200000 RIP=ffffffff8169104e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd7a8e8f790 CR3=0000000035194000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000