Warning: Permanently added '[localhost]:34351' (ECDSA) to the list of known hosts. 2022/09/30 13:59:29 fuzzer started 2022/09/30 13:59:30 dialing manager at localhost:40535 syzkaller login: [ 36.446345] cgroup: Unknown subsys name 'net' [ 36.574965] cgroup: Unknown subsys name 'rlimit' 2022/09/30 13:59:45 syscalls: 2215 2022/09/30 13:59:45 code coverage: enabled 2022/09/30 13:59:45 comparison tracing: enabled 2022/09/30 13:59:45 extra coverage: enabled 2022/09/30 13:59:45 setuid sandbox: enabled 2022/09/30 13:59:45 namespace sandbox: enabled 2022/09/30 13:59:45 Android sandbox: enabled 2022/09/30 13:59:45 fault injection: enabled 2022/09/30 13:59:45 leak checking: enabled 2022/09/30 13:59:45 net packet injection: enabled 2022/09/30 13:59:45 net device setup: enabled 2022/09/30 13:59:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 13:59:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 13:59:45 USB emulation: enabled 2022/09/30 13:59:45 hci packet injection: enabled 2022/09/30 13:59:45 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 13:59:45 802.15.4 emulation: enabled 2022/09/30 13:59:45 fetching corpus: 50, signal 26048/27825 (executing program) 2022/09/30 13:59:45 fetching corpus: 100, signal 36703/40050 (executing program) 2022/09/30 13:59:45 fetching corpus: 150, signal 42636/47502 (executing program) 2022/09/30 13:59:45 fetching corpus: 200, signal 50478/56700 (executing program) 2022/09/30 13:59:45 fetching corpus: 250, signal 56172/63706 (executing program) 2022/09/30 13:59:45 fetching corpus: 300, signal 60296/69125 (executing program) 2022/09/30 13:59:45 fetching corpus: 350, signal 64261/74296 (executing program) 2022/09/30 13:59:46 fetching corpus: 400, signal 69221/80340 (executing program) 2022/09/30 13:59:46 fetching corpus: 450, signal 74138/86330 (executing program) 2022/09/30 13:59:46 fetching corpus: 500, signal 77767/91031 (executing program) 2022/09/30 13:59:46 fetching corpus: 550, signal 78942/93431 (executing program) 2022/09/30 13:59:46 fetching corpus: 600, signal 83090/98522 (executing program) 2022/09/30 13:59:46 fetching corpus: 650, signal 86521/102878 (executing program) 2022/09/30 13:59:46 fetching corpus: 700, signal 88753/106153 (executing program) 2022/09/30 13:59:46 fetching corpus: 750, signal 91256/109532 (executing program) 2022/09/30 13:59:47 fetching corpus: 800, signal 93446/112568 (executing program) 2022/09/30 13:59:47 fetching corpus: 850, signal 95615/115581 (executing program) 2022/09/30 13:59:47 fetching corpus: 900, signal 99507/120019 (executing program) 2022/09/30 13:59:47 fetching corpus: 950, signal 101578/122890 (executing program) 2022/09/30 13:59:47 fetching corpus: 1000, signal 103434/125500 (executing program) 2022/09/30 13:59:47 fetching corpus: 1050, signal 106607/129245 (executing program) 2022/09/30 13:59:47 fetching corpus: 1100, signal 108797/132084 (executing program) 2022/09/30 13:59:47 fetching corpus: 1150, signal 111608/135400 (executing program) 2022/09/30 13:59:47 fetching corpus: 1200, signal 112644/137258 (executing program) 2022/09/30 13:59:48 fetching corpus: 1250, signal 114596/139880 (executing program) 2022/09/30 13:59:48 fetching corpus: 1300, signal 118763/144059 (executing program) 2022/09/30 13:59:48 fetching corpus: 1350, signal 121520/147155 (executing program) 2022/09/30 13:59:48 fetching corpus: 1400, signal 122835/149109 (executing program) 2022/09/30 13:59:48 fetching corpus: 1450, signal 125301/151881 (executing program) 2022/09/30 13:59:48 fetching corpus: 1500, signal 126235/153514 (executing program) 2022/09/30 13:59:48 fetching corpus: 1550, signal 128458/156067 (executing program) 2022/09/30 13:59:48 fetching corpus: 1600, signal 129803/157916 (executing program) 2022/09/30 13:59:49 fetching corpus: 1650, signal 131126/159741 (executing program) 2022/09/30 13:59:49 fetching corpus: 1700, signal 132303/161451 (executing program) 2022/09/30 13:59:49 fetching corpus: 1750, signal 133326/163031 (executing program) 2022/09/30 13:59:49 fetching corpus: 1800, signal 134902/164974 (executing program) 2022/09/30 13:59:49 fetching corpus: 1850, signal 136226/166711 (executing program) 2022/09/30 13:59:49 fetching corpus: 1900, signal 137488/168433 (executing program) 2022/09/30 13:59:49 fetching corpus: 1950, signal 138793/170109 (executing program) 2022/09/30 13:59:49 fetching corpus: 2000, signal 140259/171909 (executing program) 2022/09/30 13:59:49 fetching corpus: 2050, signal 141262/173319 (executing program) 2022/09/30 13:59:50 fetching corpus: 2100, signal 142470/174910 (executing program) 2022/09/30 13:59:50 fetching corpus: 2150, signal 143314/176218 (executing program) 2022/09/30 13:59:50 fetching corpus: 2200, signal 144592/177772 (executing program) 2022/09/30 13:59:50 fetching corpus: 2250, signal 145774/179200 (executing program) 2022/09/30 13:59:50 fetching corpus: 2300, signal 146907/180653 (executing program) 2022/09/30 13:59:50 fetching corpus: 2350, signal 148844/182544 (executing program) 2022/09/30 13:59:50 fetching corpus: 2400, signal 150387/184182 (executing program) 2022/09/30 13:59:50 fetching corpus: 2450, signal 151296/185420 (executing program) 2022/09/30 13:59:51 fetching corpus: 2500, signal 152622/186896 (executing program) 2022/09/30 13:59:51 fetching corpus: 2550, signal 153778/188273 (executing program) 2022/09/30 13:59:51 fetching corpus: 2600, signal 154860/189536 (executing program) 2022/09/30 13:59:51 fetching corpus: 2650, signal 155458/190506 (executing program) 2022/09/30 13:59:51 fetching corpus: 2700, signal 156708/191825 (executing program) 2022/09/30 13:59:51 fetching corpus: 2750, signal 157757/193025 (executing program) 2022/09/30 13:59:51 fetching corpus: 2800, signal 158294/193975 (executing program) 2022/09/30 13:59:51 fetching corpus: 2850, signal 159521/195219 (executing program) 2022/09/30 13:59:51 fetching corpus: 2900, signal 160820/196535 (executing program) 2022/09/30 13:59:52 fetching corpus: 2950, signal 161647/197555 (executing program) 2022/09/30 13:59:52 fetching corpus: 3000, signal 162660/198618 (executing program) 2022/09/30 13:59:52 fetching corpus: 3050, signal 163372/199552 (executing program) 2022/09/30 13:59:52 fetching corpus: 3100, signal 164138/200465 (executing program) 2022/09/30 13:59:52 fetching corpus: 3150, signal 165328/201635 (executing program) 2022/09/30 13:59:52 fetching corpus: 3200, signal 166282/202685 (executing program) 2022/09/30 13:59:52 fetching corpus: 3250, signal 167005/203555 (executing program) 2022/09/30 13:59:52 fetching corpus: 3300, signal 167906/204487 (executing program) 2022/09/30 13:59:53 fetching corpus: 3350, signal 168639/205327 (executing program) 2022/09/30 13:59:53 fetching corpus: 3400, signal 169412/206222 (executing program) 2022/09/30 13:59:53 fetching corpus: 3450, signal 170079/207035 (executing program) 2022/09/30 13:59:53 fetching corpus: 3500, signal 170784/207852 (executing program) 2022/09/30 13:59:53 fetching corpus: 3550, signal 171527/208644 (executing program) 2022/09/30 13:59:53 fetching corpus: 3600, signal 172184/209449 (executing program) 2022/09/30 13:59:53 fetching corpus: 3650, signal 173404/210401 (executing program) 2022/09/30 13:59:53 fetching corpus: 3700, signal 174518/211367 (executing program) 2022/09/30 13:59:54 fetching corpus: 3750, signal 175043/212087 (executing program) 2022/09/30 13:59:54 fetching corpus: 3800, signal 175675/212767 (executing program) 2022/09/30 13:59:54 fetching corpus: 3850, signal 176217/213415 (executing program) 2022/09/30 13:59:54 fetching corpus: 3900, signal 177364/214295 (executing program) 2022/09/30 13:59:54 fetching corpus: 3950, signal 178146/215017 (executing program) 2022/09/30 13:59:54 fetching corpus: 4000, signal 178868/215699 (executing program) 2022/09/30 13:59:54 fetching corpus: 4050, signal 179541/216337 (executing program) 2022/09/30 13:59:54 fetching corpus: 4100, signal 180048/216960 (executing program) 2022/09/30 13:59:55 fetching corpus: 4150, signal 180787/217638 (executing program) 2022/09/30 13:59:55 fetching corpus: 4200, signal 181467/218273 (executing program) 2022/09/30 13:59:55 fetching corpus: 4250, signal 181965/218827 (executing program) 2022/09/30 13:59:55 fetching corpus: 4300, signal 182769/219486 (executing program) 2022/09/30 13:59:55 fetching corpus: 4350, signal 183712/220136 (executing program) 2022/09/30 13:59:55 fetching corpus: 4400, signal 184553/220821 (executing program) 2022/09/30 13:59:55 fetching corpus: 4450, signal 185310/221428 (executing program) 2022/09/30 13:59:55 fetching corpus: 4500, signal 185841/221980 (executing program) 2022/09/30 13:59:55 fetching corpus: 4550, signal 186251/222461 (executing program) 2022/09/30 13:59:56 fetching corpus: 4600, signal 186817/222976 (executing program) 2022/09/30 13:59:56 fetching corpus: 4650, signal 187419/223481 (executing program) 2022/09/30 13:59:56 fetching corpus: 4700, signal 188088/224005 (executing program) 2022/09/30 13:59:56 fetching corpus: 4750, signal 188735/224482 (executing program) 2022/09/30 13:59:56 fetching corpus: 4800, signal 189351/224962 (executing program) 2022/09/30 13:59:56 fetching corpus: 4850, signal 190544/225574 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/225989 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/226376 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/226723 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/227066 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/227440 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/227793 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/228148 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/228509 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/228871 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/229228 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/229604 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/229959 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/230301 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/230657 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/231028 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/231359 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/231691 (executing program) 2022/09/30 13:59:56 fetching corpus: 4872, signal 190746/231691 (executing program) 2022/09/30 13:59:59 starting 8 fuzzer processes 13:59:59 executing program 0: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x5, 0x149, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x80, 0x7, 0x8000, 0x25fd}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x2, 0x81, 0x8, @empty, @private0, 0x20, 0x700, 0xff, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x4, 0x40, 0xd1, 0x7fffffff, 0x40, @mcast2, @private1, 0x7, 0x1, 0x31b72283, 0x1}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000380)={@loopback, @empty, @empty, 0x2d5, 0xc66, 0x20, 0x100, 0x6, 0x1000010, r3}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xdd65}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', r2, 0x4, 0xfe, 0x6, 0xe8c, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x1, 0xff, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6_vti0\x00', r1, 0x2f, 0x80, 0x40, 0x7, 0x4c, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, 0x80, 0x8000, 0x10001, 0x1ff}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000006c0)={r5, 0x1, 0x6, @remote}, 0x10) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x2, 0x5, 0x3, 0x400, 0x4, 0x8, r2}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x880) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4080) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', r8, 0x2f, 0x9, 0xff, 0x4, 0x29, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x7800, 0x7, 0x7bbd, 0x101}}) 13:59:59 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_3={0xc, 0x3, {0x8, 0x4, 0x8}}, 0x501581) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x1) r1 = dup2(r0, r0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x8, 0x9, 0x0, 0x45, @time={0x790, 0x10000}, {0x7, 0x7}, {0x1, 0x4}, @queue={0x3f}}, {0x0, 0x40, 0x20, 0x40, @time={0x9, 0x7fff}, {0x80, 0xd7}, {0x0, 0x2}, @time=@tick=0x5}, {0x9, 0x40, 0xff, 0x6, @tick=0x7f, {0x0, 0x2b}, {0xff}, @ext={0xf5, &(0x7f0000000180)="3cbe95a47285ace2f16fb926414567e0dc3bb3a33908b07e046bc7e97fd4c93d5a07e025d11393625eebcfc56e372d4f7383e9787c94e53d939bf5f54d33d4e6e719ffcaf3a47c0efdd001092cfaf59eafe9a94fc3ba5735ca0679a73772a7f8bc2125a08f64bf8d61212ec9ca96fc3dddc4152b853e84f958f2847712540b445d4ea95249980004b56719ab9aa00477a9c2e4e827200e028ec8b71d3e389871f27de16adb5bf93963e09308fee3413b9035eb6f43ab209bc3eaed490647d42fc72323161eb79cbf978b32759ee71925df1f5a50e0bf9d6f4ce71dfa9dacbda5d41f50ad42a4626201b4dca1a468add1a2eac93bbe"}}, {0x5, 0x1f, 0xca, 0x2, @time={0xaf48, 0x5}, {0x3, 0x1f}, {0x6, 0x8}, @raw32={[0x401, 0x2a, 0x7]}}, {0x40, 0x6, 0x1f, 0x12, @time={0x9, 0x3}, {0x5, 0xf8}, {0x2, 0x2}, @connect={{0xa7, 0x4}, {0x3, 0xfa}}}, {0x6a, 0x4, 0x3, 0xfb, @time={0xfa87, 0x7}, {0xff, 0x2}, {0xa3, 0x1}, @time=@tick=0x20}, {0x1, 0x4, 0x81, 0x0, @time={0x8, 0x7}, {0x8, 0x6d}, {0x1, 0xfe}, @addr={0x40, 0x8}}, {0x3, 0x1f, 0x7f, 0x7, @time={0x6, 0x2}, {0x7e, 0x6}, {0x2, 0x6}, @raw8={"64cb582f1bc4f3de6a4b68f7"}}], 0xe0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000380)) fchdir(r2) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000003c0)) epoll_wait(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x5, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000440)={{r3}, "4d7129a5bb00e259086bb4ba8db112c074bca57427210f4f7f6371f7c7098a02f6e50fbd313349af36ba593aa54fabe731639b211c72bc2777c340c852f88c5018123612372cb0ab4ddd4a52849e5b4f193a2a6c448054e32bbe9be90349d4169ccb50824b5c4158473ee7e48485d5b28d2cf60ff79aacafe29eb37c049273e74aa593c3dbbd982b6c8ef3e6e29b4121ca16ccf422ee721d62ba7a189461e034c4bba0d07dfca64e26db6b8c3d1eee0b4194d78f930fdf8eea21d843ddb5b8ee1abad9ca76d86255ffac3898fb92c8b8b5492b7c2a0670c1dced67dea7a6090d9e992219e5a7b4c678fd1b166ae4f42a1188da1d8bc03515cfc6b4cb32f425e12bcadd88bd1bdd9cc3e86a5a409f3dc326736d847e6cc8bfbbbfc290916c08f431dd75c6fb0aa873237420d0f37b66518cc84ae159e5640dcf7d64934c878248b3a07e621eb52b53135734e457de957f7552074d75bc6bdd05008ad6933180b595a192860d5cd267e29e9c2cf770597c92be078e7dc7be16c969e46b9cc73a2a50de475f9f241cd140c1465c459a534f535763183c14627db89dedf1b2ccf4eeeb152c837e701cf3db87a897676c79b22c548385ff8138a0d8bbb79e1857ac164de973c6a1a3ec0698a440828fa4f25bf415de792568ab7f5668ad69fec263a521c9d810f16426eeaac096597a304a29ea8429d5b9ecf85f6ae11823e7be88c96915e9745f3291310df44a18a36170706d0e23ba4c665ee4003d9450df54f124edefc1d250d69be484af9d2ddbf96399df53b38b1071668312c6fa26f98e055a0e5f63235fb4b059c62b83a371d0ed62c7717f52515d934bcadc74582d2073e3f19ff8c34d57157349b9bb1787a6f1f4713b15b9a81dac52ca5395643682735062a17c39c1c777f5d023a48aba47af6c8eebff64d25c4b939581899854d2ea6b628a6a9b45ecbfb05a03ef728f0d1c0d2816827103d25447b27771ace13c82157e7dd6cee141d980dec0a03b24ed09394344f86a614e53cea44b204515028c3d0188d8b936be94180d494e8f0440e42dbceebefbff648289a924d82bba5a640fe58b54a7d1603b1e3bd56d5541d5caca5d41a47d843fc07b52e53727ce5b508a2b47d99993aebb5e9138d590e2a70da66d186bebd8c09878d1eb8d45d3e4070133016c9832c437de802ddd640bedb817e3e97deee494c980207af7b59796b1192da5f93c6e2efa57343536b4f76ae39a565e24772f1616d1330b4a4c838f9b22d2e60111c35191d0c7eb2488df9dd3ff18ac83d51f25d4467235b6f1113d90630d0c4e1e19fdaf5eebca66e177e95160be69d8df58b0cac5b0e4d982a30fc2b2afbb9d8fced53a37e64fa3691d3ab915d4860b5496a058a3eac22c3c035e185a188ba4988e7d209390eba766df6952e09465a115cd983b4cb5fb3a005cf92ecf43e9713c6c1b585d1151bc4097340d9063681054290a0014daf27485acedec18b3d00846207145581f9368c7ccc1b7459f09c0fe023f2e11c63ea1d452454d2e6f46295d50feaf4238674507751e0ef2855dd726852a24a1c09950c52394b6222ccc5edd2175c6d6746a939a1708071f27506045a2cc13fa94c8851508e88ed0891730744dcbfa9b80d0382546e6297a76857212822ad4a396c1121d17e4f8e25e7cd0e289d07f9b72f6d927c1ff9f57d48d5f9f7cad497a3a5f229302ebcc4300b72d25366d24147f6cfc6029940434edc47445ad7a27058a7cb3daeb908b1cb651bfcc1b0d9529c78f4ce784b3cba64518ef77f4da10b6141a84fc38cad5b46afe00e6028d489650a46dca0e780757e6c55a740fc1630bd482fd9d7d1a4a8b0e3a37f296028bded47a2e9873b627305cac3b6a947340eaa340d87ec959feb9cd78c3f6bd96573b5b14cea6143773091c2e4229c2d288586711930062d92df37dd904a886c04960762dee929aee5e1464d14ae21ce1f118bcac9262f66893326601e9f3f45e2aa5336a5867bd168ffce9f5030935e544cc860e150c0a4ee85d7ce21ea4d7b90855d074261d0acffbdbccdc6bb47753519f1569ab70be7318ccfdcdc9cdce76057daf711319fde58623a2252e5c3c4d3e571fc9b97ff0c4b7d71aefd538963e4aeff0af059277be8fa3c83926dff2f054085e7e805e241416d9b394360974a439fb807afbfbe68a2b931e42dd5896cd53f97b292711d9d12bb6128355284a49f84a5a78eb1ad8372f1e111a8ecd93eea675a101b731f68b103fbb0144c9e7b407d0d54ba7b8e71b39921e6e8e908ff8e30c3795152aa04206b6f28e6baf441a3099a923522a346f6a915b8e2e2db386d42452eab39a7f870611e56c176b53623911ac25735e23adad323c27ffec32226ff1e4d43fabad0b44ff4213535308e4287d34cc168b2a18406dba5309a3cffb5ac8ee21394ab1c1f128a82ab98c2a3d2ac509a903c379c593401d5d136c9ae270994535861c028cb6103bd3997c2737e8bf2858eeff651a3f2d5c8c0157626be2e0b003cc1c766fa1ee20991cb0af718bc7fe37a6415dc46ceb661333b2b6be1e735aa20efee7b2cd2c4b4b6814c6bae1d265778a50a6de05187b87c802a3724e83c60d52d6aa6353e66fd1e6aadb29176e04eee83be4c2325657ab7839a4f86a1cea5947df83bcd0a4901e54901ed88f33b1a56023a3a79aed7b4d037a71a825051ba7c1cf457efb78cb9281c4303e65a89f80832651a7b863be20d6acdf934cdc5185a33db721677aabff1dbc83895eca05b27b53e22014612d853c1526903d908ec7cc7864580bbd47befc8f63195bd1f6dcb4d43810d555f9f20dd56d1b56e6729b0bfa2b0cf8fa41075008cac587a3049e9d44329288a0063edcce626c036fce3d64f94d4e77bc107b31d9116bc0b255d721d7eb724a6dca8c4e93030111a030aaa864b5769169b930e10228bb3bcee56ebc0be36dd670517aa8a5610512009c1ef67b155db5200750c05f41ed613f32cc9fc9953a071b2096b1d99a2f3175ec854c0d50fb9be6ea8eb4edddddf3eb97e5552d6aaf50efe76e77eb5d71d10a5dd9b63af4ce5eac70d0764dc369f2807d07c19a06759d0d925a6014b3d7b406aa56b27ab261e7736402eabe60e6642228f93e8a59f1b385e93990acb5669696601add1b96e9d607f0983481305629e7b4e1f200e8cfea674c76ecb015383daebcaa77345b3f22bac2115e6138a72c030ce6fa2ea7d83f352140f3822b3ab66b7843494a4f7791cbb45992e4b38be9373be4c98f118ebb3210191e00d56b34aed48e21d398dd9af298831978d12ec71a49346d212a48b6afc6cd9c7be4995581036b8bbf979a7e1143ebf7d0dc4ac43a598b1e5c95548a12ad09a822ca23ce1242ffe81539372828b53c47614a25f730ad92c7aad1bde602f91d406aabfb514e8ea5e33ce038db9b3a50833da53e443782e72a5c18f9e7d93439d319c011edb98dd0de6cfd5a5b0ddf79043b3dca45b9f59292963ce5b83f1edc3b8eb6cb034e7c6fd9c146299544a43ecaae85449a473bc03e80c330d65155f312a629565b458e75b1377fe347b5facd3a1cef7be1dc2f3fd1c8db13a2e0da99bd3df585847e88af24b2500f53ea343efd770c8a05bb1df4972c6a64d9be50f16fb875f01b78fe075d2de81d4c03f00ca88219313d2a8a886259e36e3294e5a6598794281439b6552e992e2342f7b617d566406b3d5a1fa1afbd511f3b844f1fba593cdfb99378be846caa0c119a8ddee3b98e8bd623e963d6d48884a5f3b403d04b625bc628db55f77c206326a032da1f6926e6c936bd4bb1c7aab6a82d16e3f5e443b83fe05679623fb9ce1aee2af498140722511f852c9a74a605767ca390529f6b6f40313e419fe292d8cba2cdd2ca196baab79a34d19d437197197cb31b29271f574ff721f1fa334f21dd4622cb41d6101cd6d94c500fb8ad1cf1da105be1edf4a4828b33e1b9832ac28706e3c5571e2459a7ac77c63a7da304943c24c4ebb3dea32065d6fa0f2d15416cc9578572a00f9ed7cf59f00746fcd2849879ddbdbeba57dffad502bcbe980528f4a64308922ec02b2120b184d6716d586338aa9a01a0f6d6b69e69ebff35e3eaefdee2046de52517f477414e95fa663e21b4acdeb825c239aab20a366fb123763e77cd7ca2792976105c497721c4d712ed6dce5604037c68cda1480b496228c7eb180db3d12e08f2986b75d5f89444e1c7f8d2176337d534931f6e42d3abce2e2bb8ebf19dc462a0eec406eb719f79dac4c00e3d7514bdf94540180e7d7c4d3354cc3659cf66638ed2df4b4e132d36fa127ff5e502e8fdd664a92bbc0d120829d05414961fb8395d771dc577f668e201a6e31f530eea27a7231c508881a73949387bee7270f878ea5b26157bd25eec92c1bd6a2b9cf66ae466450a28872944887f65b4faac399c330e39a6ca98d23be6038d6380fd17b23fb3d04463d4e5c4578ca13621a68ba5b2f4aa359556630ea23be14d9b795e009d15fcd56f36b2466a2f2e5c2ef8e962edc433146419dde3b75ce4d05410ca8e632d658be2a54506cec9044335976f40d6876e51065c699dad170bd267f0b1e89b6b56efe28004a5df6ea5db8ba5ef0df91df6f542ca5751c1e22f893653f98b8a7b43bb820cd5c6190c9fe078645cdef3b690f2e0b834247a4937c21b9d87a544e54b428a08e2472524061809ec24391d5b90439f63138884cc60a7b3028ff96b9cb8bda80acf3384cf78ad38bfb8a1c2dbf5b994f918c0b5fc54a41592c748700c4d2148caf33c33b58dfe413bb9cd4431b655c3d5a31b1f98da47a2ee50bc2767eff329f45a5a42c9c8e582a557bf5fb67a0ac207d97a017c518de9ff49ab0b89efb962ab97d0d8f9c054eeaa1836cff706041b6c0837dfe40deb1be94fc95cc2c6f0d3fd1f06d85ea0ec6383d1f5af83deea6253129d6a07739e45d58d46f674f05a513b40548d8bf910404c15c8dd12aca484dce743c6931b8494b06828b8ab282c64f4eece8f39b0ab2baf7d6f9be7c5bbdd46e3e8b387dbf5e47be0c4ac95ff9b3b42e1fb109257eb9449a57a3daf5b213a1e4dc30e1ef71d7c40c258cc3ccad3174b3241b33db8524478652fe72fa2a42e4883a9f844ddb6234d7cb2e603f4043610464b148233ae747cf6561a50579b357501ee4eb2aa730129388f31ed5c7363d5decceb73ad71675a28ae33452c67ea92d65c0026e81cf36cccfee37b07028c694022b37c6ac4fde2783407329e6b8cc1982a919564ecf0e515fd9c15022e8b44b091b645980798558583d796699088a538050966c121ea7a3510a980c842bf48186a2a0c3e9545d07b403ba0a986b0b54ae28f6ed995899e4cb3ded9e71cdb37235173f4f0497d7d1356edebc08c4642d8a62b730905bcf53ee09c0173a761224db2b1b8cb108c53bbb74c1ae706f8a4e08f131c65bedb453240e5949e3da13fc32c32b3fa82c36b4ebb76c3310d9e6f9cf424e2c7eea63d03f0ab2bea24b1040e9db69825551b802b706977f5d4bd6a35c1954b444e4bfb213a3c6592e1a417bc261355cbb460256356ebc231fcd7765d63994b1a6174f654934aec02d572b9c65b2b79d421dcab0d8fdad8349cfca42af61f07218056c52ae9405453e73680fdcbdf1f94a528aab2592e536ac5042e5fcf29918c3bf6e911adeac78a9385e3ff7bcfd24b43c6413994c7238b8a4998c21ae67c9928958f7c87c92a5a0c32478523dc50c2c73fa2d41cabe4dd0288e46e033681e00b33cc467018b3"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001440)={{0x1, 0x1, 0x18, r1, {0xfe}}, './file0\x00'}) mmap$usbmon(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000002, 0x1010, r4, 0x7) pipe2(&(0x7f0000001480)={0xffffffffffffffff}, 0x40800) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001580)={'syztnl1\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x2f, 0x25, 0x20, 0x1f, 0x3a, @mcast2, @mcast1, 0x7800, 0x40, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000001740)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x120, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040080}, 0x4c0d0) 13:59:59 executing program 3: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x81800) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x8000}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'team_slave_0\x00', {0x5}, 0xf7bb}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x34041014}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040815}, 0x20000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffebe}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x20000004) bind(r1, &(0x7f0000000380)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000440)={0x2, {0x1, 0x2, 0xb48, 0x1775, 0x4}}) open_by_handle_at(r1, &(0x7f0000000480)=@orangefs={0x14, 0x1, {"ecaa637efadbd52f35d415af8e4bc9ce", 0x8}}, 0x10000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x6, 0x2, 0x7, 0x9, 0x41, @local, @private0, 0x80, 0x7, 0x3, 0x2}}) getpeername$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'sit0\x00', r3, 0x4, 0x8, 0x3, 0x7fff, 0x8, @private2, @remote, 0x20, 0x7800, 0x11a, 0x1}}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000740)=0x4) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x200, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000007c0)={"cfcb5437105fb704c52cfb2131a1cc45", 0x0, 0x0, {0x8, 0x5fa}, {0x443a, 0x8}, 0x7ff, [0x5, 0xc33e, 0x6, 0x3139b376, 0x8, 0x3, 0x2, 0x4, 0x6f7, 0xe7e, 0xfffffffffffffc00, 0x3, 0x8001, 0x8, 0x4, 0x4]}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x180000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff0001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80001}, 0x4040004) 13:59:59 executing program 2: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x904, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40049}, 0x48800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '}:!\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4840}, 0x4000) r1 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x5, 0x100) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/6, 0x6}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/128, 0x80}], 0x5) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000980)={&(0x7f00000007c0), 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x13c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "78fed9a074aa40bb14bc0b1abb3f8e7300ab4bc82a0921addc57f595a6"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "09e75b02db01c44e97411238b32141319b8fa3c2afbdc6f853a5005c0d9129c84259f7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "b13dc7226006ddd5ee3667832c5d83aecd15f013084c25fa"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f291d25e477f4aa83336ba14c131b627f08239b7f7a74a9a"}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x4044042) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000009c0)={0x100000001, 0x7, 0x6, 0x0, 0x0, [{{r1}, 0x4}, {{r3}, 0x5}, {{r0}, 0xb50e}, {{r1}, 0x100}, {{r3}, 0x4}, {{}, 0xe6}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000ac0)='numa_maps\x00') sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa82d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24000050) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000c00)=[r3, r5], 0x2) r6 = syz_open_dev$vcsa(&(0x7f0000000c40), 0x3, 0x10800) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x40}}, 0x1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r7, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4804) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x0, 0x202, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xb7, 0x43}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x20004000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000fc0)={0x73, 0x14, '\x00', [@generic={0x70, 0x2a, "fd1ae5a08e858fcb758dd7feefb08a0a24f0862df9b9ba4eff558bd707a790c3b64bd1a97534265bc813"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4cb8}, @calipso={0x7, 0x58, {0x2, 0x14, 0x0, 0x6, [0x1c33, 0x80, 0x48b, 0x1, 0x80000000, 0x9, 0x7, 0x3, 0x3, 0x4183f1c7]}}, @jumbo={0xc2, 0x4, 0xfff}, @enc_lim={0x4, 0x1, 0x1f}, @jumbo, @pad1, @ra={0x5, 0x2, 0x1}]}, 0xb0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) 13:59:59 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/123, 0x7b}], 0x1, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40002004) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r0, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x800}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1145) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000280)={{r4}, 0x0, 0x4, @unused=[0x6, 0x58, 0x3, 0x9], @subvolid=0x1ff}) r10 = socket(0x8, 0x4, 0x9) ioctl$BTRFS_IOC_ADD_DEV(r10, 0x5000940a, &(0x7f0000001280)={{r3}, "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"}) r11 = open(&(0x7f0000002280)='./file0\x00', 0x40000, 0x10) getsockopt$packet_int(r11, 0x107, 0x7, &(0x7f00000022c0), &(0x7f0000002300)=0x4) fallocate(r9, 0x0, 0x7, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000002380)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000002480)=0xe8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000002580)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x74, 0x0, 0x100, 0xffffffc0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4041}, 0xe095) r13 = dup3(r6, r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r13, &(0x7f0000002740)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002700)={&(0x7f0000002640)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000810) r15 = dup(r1) r16 = fsmount(r15, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x100010, r4, 0x9a44d000) ioctl$sock_inet_SIOCSIFDSTADDR(r16, 0x8918, &(0x7f0000002780)={'ipvlan0\x00', {0x2, 0x0, @multicast2}}) [ 66.006425] audit: type=1400 audit(1664546399.771:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:59:59 executing program 5: sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfffffffffffffff9}, {0xc, 0x90, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x20}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004000}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x40, 0x3f}) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x3b, 0x20, 0x70bd25, 0x25dfdbfc, {0x1d}, [@generic="82bed4f2f41d50e5238c11cafaad1b41ce08cb97c268b587c9d20ca79d3b485d8bb868a796c24eddf1d5f95b939ae38f71c81fd3", @typed={0x8, 0x12, 0x0, 0x0, @u32=0x3bd}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x901, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = fsmount(r1, 0x1, 0xe) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000e00), &(0x7f0000000e40)={0x0, 0xfb, 0xec, 0x1, 0x31, "ed649753aec587866c207b48c019687c", "99fa59bfab5a98083ad8fbfe7ffc5990c5139ed928fb4d52b06d4ef79b8abca72f3fcde1389f1229c43f761f17da22c6f1b98d3d561c2e66768ccc332e10836e61fc52146a110a72cdbdb292b7f62b1499c9f284b88c1735fdfc791fa7ec07c68d9289773ecf49377e666ffe8c9b3b6964278de48517169a8760d844d18d7d88480d99a99d96e3c82b944ef4ed7fa9671e41a2adc05bd58a4080c8ef5727e6fb2a1b0e2e04d5f16ccda626c829fa876b6d01c4217f5324cab029f5a19bf3fc95838526fee6e04addcfb7fd53ea682a2c63d580643c1947"}, 0xec, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000f40)={r1, 0x80000000000, 0x7, 0x7f}) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000001280)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f0000000fc0)={0x258, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x45f, 0x6f}}}}, [@NL80211_ATTR_TESTDATA={0xf9, 0x45, "9f6d5d852ecece419f26df64c061bd2b1096ffbd5ed8b5b2a48c95574cd5af96047a51beb1c398d76fe157ef664f7a995e34951337d2d09b1deda0b68867666e4a87ba6a3000da0ff5cdc2596483ff2dc4fa9746f68e4628be549da535cad3e9d8c24d19fc10d4eb1b8583a12a0a344fab326f579658adf92d895d06125ad89ee02474d4aaca79ffdb131d64d466abab636585005641071c1279aa87c877a5e5d85c2cd577ae77788de49a38d5fe2ba62785893516cb67c532878f5380843cb6ba6f1093f731d251b7326cc9753b7d8f8c0607fafefb992f19ea313af37304a9ddb4181fb5c7759889c1fbf383558a29ddf738ccb8"}, @NL80211_ATTR_TESTDATA={0xaf, 0x45, "a521ff520f1202b5d7518f8131c2795d9a41b6c64bf19ded5adebe93e1e0794fdab212122a7a0831897a0507f58086c4356a769aef0d24922be078b55264ad38741eccc607659263a696a634cded3157b2c0fb342320dd3eb0964599a40179854e719a81fca6e4a1844dbc1bd9b236926cef6c483a59d64fe8546575fb78ff0a9ab7c5929427ef04fcd51ea0bb93d727f3eada866cecd512f47e12e9baa188d479395ea72c7352bcace752"}, @NL80211_ATTR_TESTDATA={0x84, 0x45, "7934454c0ba185265ce31b793daf64ee5c9faf549bc8207d32ab4eedec316d709e5d54f4b40e5979be2494a8d21c6f8511a994ae79b82b18942720dd0c7ade9da1660b00ad3968f6d1b29166970673e0b882b8649410d313493b66dc8daa552d1d50176646eab816d45d3c64c5ee37043b718bb9cf722521c817f208b25fc7e9"}]}, 0x258}}, 0x4) fcntl$getflags(r5, 0xb) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) fallocate(r7, 0x11, 0xa34, 0xe00000000000000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000001300)=0x10) 13:59:59 executing program 6: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/98) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/126) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r0, 0xb) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000, 0x2, &(0x7f0000fd8000/0x2000)=nil) r2 = shmget(0x2, 0x2000, 0x54000000, &(0x7f0000aba000/0x2000)=nil) shmat(r2, &(0x7f00009b1000/0x3000)=nil, 0x5000) madvise(&(0x7f0000e1d000/0x3000)=nil, 0x3000, 0x13) r3 = shmget(0x2, 0x3000, 0x800, &(0x7f0000fe9000/0x3000)=nil) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000001c0)={{0x1, 0xee01, r4, 0x0, 0x0, 0x2, 0xe000}, 0x1, 0x5ead, 0x4c15, 0x10001, 0x0, 0x0, 0x4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000dd0000/0x4000)=nil, 0x4000, 0x1, 0x30, 0xffffffffffffffff, 0x8000000) shmget(0x3, 0x2000, 0x0, &(0x7f0000972000/0x2000)=nil) shmat(r0, &(0x7f0000f8c000/0x1000)=nil, 0x5000) 13:59:59 executing program 7: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x14) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x11) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x3) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0xf) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1c) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x5) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x1a) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x13) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xd) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1a) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x27) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xa) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x23) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x11) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x17) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x16) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x22) [ 67.151112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.152909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.154446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.157268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.159865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.161290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.167564] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.324055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.325855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.338177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.343840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.348239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.351226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.362893] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.410286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.412195] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.417093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.419051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.424569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.428203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.431089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.432557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.433988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.440156] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.440234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.454559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.457086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.458033] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.460221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.464801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.465162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.469068] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.469620] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.472691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.475081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.478942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.493495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.495483] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.496433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.496689] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.500366] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.505663] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.508623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.510388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.514897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.516111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.517655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.519982] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.524960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.534665] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.542876] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.554979] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.559190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.561707] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.563182] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.567483] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.238098] Bluetooth: hci0: command 0x0409 tx timeout [ 69.429849] Bluetooth: hci1: command 0x0409 tx timeout [ 69.493802] Bluetooth: hci2: command 0x0409 tx timeout [ 69.494425] Bluetooth: hci3: command 0x0409 tx timeout [ 69.557868] Bluetooth: hci5: command 0x0409 tx timeout [ 69.558430] Bluetooth: hci6: command 0x0409 tx timeout [ 69.558941] Bluetooth: hci4: command 0x0409 tx timeout [ 69.622819] Bluetooth: hci7: command 0x0409 tx timeout [ 71.286777] Bluetooth: hci0: command 0x041b tx timeout [ 71.478789] Bluetooth: hci1: command 0x041b tx timeout [ 71.541808] Bluetooth: hci3: command 0x041b tx timeout [ 71.542261] Bluetooth: hci2: command 0x041b tx timeout [ 71.605882] Bluetooth: hci4: command 0x041b tx timeout [ 71.606329] Bluetooth: hci6: command 0x041b tx timeout [ 71.606775] Bluetooth: hci5: command 0x041b tx timeout [ 71.670767] Bluetooth: hci7: command 0x041b tx timeout [ 73.334803] Bluetooth: hci0: command 0x040f tx timeout [ 73.526828] Bluetooth: hci1: command 0x040f tx timeout [ 73.590792] Bluetooth: hci2: command 0x040f tx timeout [ 73.591286] Bluetooth: hci3: command 0x040f tx timeout [ 73.654858] Bluetooth: hci5: command 0x040f tx timeout [ 73.655314] Bluetooth: hci6: command 0x040f tx timeout [ 73.655671] Bluetooth: hci4: command 0x040f tx timeout [ 73.718779] Bluetooth: hci7: command 0x040f tx timeout [ 75.381819] Bluetooth: hci0: command 0x0419 tx timeout [ 75.573804] Bluetooth: hci1: command 0x0419 tx timeout [ 75.637810] Bluetooth: hci3: command 0x0419 tx timeout [ 75.638534] Bluetooth: hci2: command 0x0419 tx timeout [ 75.701841] Bluetooth: hci4: command 0x0419 tx timeout [ 75.702544] Bluetooth: hci6: command 0x0419 tx timeout [ 75.703277] Bluetooth: hci5: command 0x0419 tx timeout [ 75.765858] Bluetooth: hci7: command 0x0419 tx timeout 14:00:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210240, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0x90880, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1538b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7f, 0x8, 0xe2, 0x3f, 0x0, 0x200, 0xb7cb38fe5287aa9e, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fff, 0x3f}, 0x2082, 0x9, 0x1000, 0x7, 0x3f, 0x6, 0x7, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x0, 0x20, 0x1, 0xff, 0x4, [{0x100000001, 0x0, 0x62}, {0x3, 0x9, 0x1f, '\x00', 0x386}, {0x1, 0x0, 0x6, '\x00', 0x1000}, {0xfffffffffffffff9, 0x1, 0x4, '\x00', 0x800}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5414, 0x0) sendfile(r3, r1, 0x0, 0x4) [ 122.360557] audit: type=1400 audit(1664546456.125:7): avc: denied { open } for pid=3886 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.362189] audit: type=1400 audit(1664546456.125:8): avc: denied { kernel } for pid=3886 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.373678] ------------[ cut here ]------------ [ 122.373700] [ 122.373704] ====================================================== [ 122.373707] WARNING: possible circular locking dependency detected [ 122.373711] 6.0.0-rc7-next-20220929 #1 Not tainted [ 122.373720] ------------------------------------------------------ [ 122.373723] syz-executor.5/3889 is trying to acquire lock: [ 122.373729] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 122.373770] [ 122.373770] but task is already holding lock: [ 122.373772] ffff88800d7a0c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.373799] [ 122.373799] which lock already depends on the new lock. [ 122.373799] [ 122.373801] [ 122.373801] the existing dependency chain (in reverse order) is: [ 122.373804] [ 122.373804] -> #3 (&ctx->lock){....}-{2:2}: [ 122.373818] _raw_spin_lock+0x2a/0x40 [ 122.373829] __perf_event_task_sched_out+0x53b/0x18d0 [ 122.373840] __schedule+0xedd/0x2470 [ 122.373854] preempt_schedule_common+0x45/0xc0 [ 122.373869] __cond_resched+0x17/0x30 [ 122.373882] __mutex_lock+0xa3/0x14d0 [ 122.373897] __do_sys_perf_event_open+0x1eec/0x32c0 [ 122.373908] do_syscall_64+0x3b/0x90 [ 122.373925] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.373938] [ 122.373938] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 122.373952] _raw_spin_lock_nested+0x30/0x40 [ 122.373962] raw_spin_rq_lock_nested+0x1e/0x30 [ 122.373975] task_fork_fair+0x63/0x4d0 [ 122.373991] sched_cgroup_fork+0x3d0/0x540 [ 122.374005] copy_process+0x4183/0x6e20 [ 122.374016] kernel_clone+0xe7/0x890 [ 122.374025] user_mode_thread+0xad/0xf0 [ 122.374035] rest_init+0x24/0x250 [ 122.374047] arch_call_rest_init+0xf/0x14 [ 122.374064] start_kernel+0x4c6/0x4eb [ 122.374078] secondary_startup_64_no_verify+0xe0/0xeb [ 122.374092] [ 122.374092] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 122.374106] _raw_spin_lock_irqsave+0x39/0x60 [ 122.374116] try_to_wake_up+0xab/0x1930 [ 122.374129] up+0x75/0xb0 [ 122.374143] __up_console_sem+0x6e/0x80 [ 122.374159] console_unlock+0x46a/0x590 [ 122.374174] vprintk_emit+0x1bd/0x560 [ 122.374190] vprintk+0x84/0xa0 [ 122.374206] _printk+0xba/0xf1 [ 122.374217] kauditd_hold_skb.cold+0x3f/0x4e [ 122.374233] kauditd_send_queue+0x233/0x290 [ 122.374249] kauditd_thread+0x5f9/0x9c0 [ 122.374263] kthread+0x2ed/0x3a0 [ 122.374277] ret_from_fork+0x22/0x30 [ 122.374289] [ 122.374289] -> #0 ((console_sem).lock){....}-{2:2}: [ 122.374302] __lock_acquire+0x2a02/0x5e70 [ 122.374319] lock_acquire+0x1a2/0x530 [ 122.374334] _raw_spin_lock_irqsave+0x39/0x60 [ 122.374345] down_trylock+0xe/0x70 [ 122.374359] __down_trylock_console_sem+0x3b/0xd0 [ 122.374375] vprintk_emit+0x16b/0x560 [ 122.374391] vprintk+0x84/0xa0 [ 122.374407] _printk+0xba/0xf1 [ 122.374417] report_bug.cold+0x72/0xab [ 122.374433] handle_bug+0x3c/0x70 [ 122.374449] exc_invalid_op+0x14/0x50 [ 122.374465] asm_exc_invalid_op+0x16/0x20 [ 122.374477] group_sched_out.part.0+0x2c7/0x460 [ 122.374494] ctx_sched_out+0x8f1/0xc10 [ 122.374511] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.374522] __schedule+0xedd/0x2470 [ 122.374535] preempt_schedule_common+0x45/0xc0 [ 122.374550] __cond_resched+0x17/0x30 [ 122.374563] __mutex_lock+0xa3/0x14d0 [ 122.374578] __do_sys_perf_event_open+0x1eec/0x32c0 [ 122.374589] do_syscall_64+0x3b/0x90 [ 122.374606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.374618] [ 122.374618] other info that might help us debug this: [ 122.374618] [ 122.374621] Chain exists of: [ 122.374621] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 122.374621] [ 122.374635] Possible unsafe locking scenario: [ 122.374635] [ 122.374637] CPU0 CPU1 [ 122.374640] ---- ---- [ 122.374642] lock(&ctx->lock); [ 122.374647] lock(&rq->__lock); [ 122.374654] lock(&ctx->lock); [ 122.374660] lock((console_sem).lock); [ 122.374665] [ 122.374665] *** DEADLOCK *** [ 122.374665] [ 122.374667] 2 locks held by syz-executor.5/3889: [ 122.374674] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 122.374703] #1: ffff88800d7a0c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.374729] [ 122.374729] stack backtrace: [ 122.374732] CPU: 0 PID: 3889 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220929 #1 [ 122.374744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.374752] Call Trace: [ 122.374755] [ 122.374760] dump_stack_lvl+0x8b/0xb3 [ 122.374778] check_noncircular+0x263/0x2e0 [ 122.374794] ? format_decode+0x26c/0xb50 [ 122.374810] ? print_circular_bug+0x450/0x450 [ 122.374827] ? enable_ptr_key_workfn+0x20/0x20 [ 122.374843] ? lock_release+0x547/0x750 [ 122.374859] ? format_decode+0x26c/0xb50 [ 122.374876] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 122.374894] __lock_acquire+0x2a02/0x5e70 [ 122.374915] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.374938] lock_acquire+0x1a2/0x530 [ 122.374954] ? down_trylock+0xe/0x70 [ 122.374971] ? lock_release+0x750/0x750 [ 122.374991] ? vprintk+0x84/0xa0 [ 122.375009] _raw_spin_lock_irqsave+0x39/0x60 [ 122.375020] ? down_trylock+0xe/0x70 [ 122.375036] down_trylock+0xe/0x70 [ 122.375052] ? vprintk+0x84/0xa0 [ 122.375068] __down_trylock_console_sem+0x3b/0xd0 [ 122.375085] vprintk_emit+0x16b/0x560 [ 122.375104] vprintk+0x84/0xa0 [ 122.375121] _printk+0xba/0xf1 [ 122.375133] ? record_print_text.cold+0x16/0x16 [ 122.375148] ? report_bug.cold+0x66/0xab [ 122.375166] ? group_sched_out.part.0+0x2c7/0x460 [ 122.375184] report_bug.cold+0x72/0xab [ 122.375203] handle_bug+0x3c/0x70 [ 122.375220] exc_invalid_op+0x14/0x50 [ 122.375238] asm_exc_invalid_op+0x16/0x20 [ 122.375251] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.375276] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.375288] RSP: 0018:ffff88801775f978 EFLAGS: 00010006 [ 122.375297] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.375304] RDX: ffff88801b148000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 122.375312] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 122.375319] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d7a0c00 [ 122.375327] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 122.375337] ? group_sched_out.part.0+0x2c7/0x460 [ 122.375357] ? group_sched_out.part.0+0x2c7/0x460 [ 122.375377] ctx_sched_out+0x8f1/0xc10 [ 122.375396] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.375411] ? lock_is_held_type+0xd7/0x130 [ 122.375424] ? __perf_cgroup_move+0x160/0x160 [ 122.375435] ? set_next_entity+0x304/0x550 [ 122.375452] ? update_curr+0x267/0x740 [ 122.375470] ? lock_is_held_type+0xd7/0x130 [ 122.375484] __schedule+0xedd/0x2470 [ 122.375501] ? io_schedule_timeout+0x150/0x150 [ 122.375516] ? find_held_lock+0x2c/0x110 [ 122.375532] ? lock_is_held_type+0xd7/0x130 [ 122.375545] ? __cond_resched+0x17/0x30 [ 122.375560] preempt_schedule_common+0x45/0xc0 [ 122.375577] __cond_resched+0x17/0x30 [ 122.375591] __mutex_lock+0xa3/0x14d0 [ 122.375608] ? lock_is_held_type+0xd7/0x130 [ 122.375620] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 122.375634] ? mutex_lock_io_nested+0x1310/0x1310 [ 122.375650] ? lock_release+0x3b2/0x750 [ 122.375668] ? __up_read+0x192/0x730 [ 122.375682] ? up_write+0x520/0x520 [ 122.375697] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 122.375711] __do_sys_perf_event_open+0x1eec/0x32c0 [ 122.375726] ? perf_compat_ioctl+0x130/0x130 [ 122.375737] ? xfd_validate_state+0x59/0x180 [ 122.375760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.375774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.375789] do_syscall_64+0x3b/0x90 [ 122.375807] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.375820] RIP: 0033:0x7fb99035eb19 [ 122.375828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.375839] RSP: 002b:00007fb98d8d4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 122.375850] RAX: ffffffffffffffda RBX: 00007fb990471f60 RCX: 00007fb99035eb19 [ 122.375858] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 122.375865] RBP: 00007fb9903b8f6d R08: 0000000000000000 R09: 0000000000000000 [ 122.375872] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 122.375880] R13: 00007ffe950470bf R14: 00007fb98d8d4300 R15: 0000000000022000 [ 122.375892] [ 122.438363] WARNING: CPU: 0 PID: 3889 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 122.439049] Modules linked in: [ 122.439305] CPU: 0 PID: 3889 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220929 #1 [ 122.439912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 122.440751] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.441166] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.442520] RSP: 0018:ffff88801775f978 EFLAGS: 00010006 [ 122.442916] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.443454] RDX: ffff88801b148000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 122.443992] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 122.444528] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d7a0c00 [ 122.445067] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 122.445603] FS: 00007fb98d8d4700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.446194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.446629] CR2: 00007f6d5888b1f0 CR3: 0000000017746000 CR4: 0000000000350ef0 [ 122.447168] Call Trace: [ 122.447371] [ 122.447554] ctx_sched_out+0x8f1/0xc10 [ 122.447862] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.448258] ? lock_is_held_type+0xd7/0x130 [ 122.448585] ? __perf_cgroup_move+0x160/0x160 [ 122.448929] ? set_next_entity+0x304/0x550 [ 122.449253] ? update_curr+0x267/0x740 [ 122.449557] ? lock_is_held_type+0xd7/0x130 [ 122.449888] __schedule+0xedd/0x2470 [ 122.450180] ? io_schedule_timeout+0x150/0x150 [ 122.450531] ? find_held_lock+0x2c/0x110 [ 122.450846] ? lock_is_held_type+0xd7/0x130 [ 122.451177] ? __cond_resched+0x17/0x30 [ 122.451496] preempt_schedule_common+0x45/0xc0 [ 122.451849] __cond_resched+0x17/0x30 [ 122.452145] __mutex_lock+0xa3/0x14d0 [ 122.452446] ? lock_is_held_type+0xd7/0x130 [ 122.452776] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 122.453165] ? mutex_lock_io_nested+0x1310/0x1310 [ 122.453538] ? lock_release+0x3b2/0x750 [ 122.453847] ? __up_read+0x192/0x730 [ 122.454137] ? up_write+0x520/0x520 [ 122.454412] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 122.454805] __do_sys_perf_event_open+0x1eec/0x32c0 [ 122.455188] ? perf_compat_ioctl+0x130/0x130 [ 122.455531] ? xfd_validate_state+0x59/0x180 [ 122.455879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.456278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.456672] do_syscall_64+0x3b/0x90 [ 122.456971] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.457350] RIP: 0033:0x7fb99035eb19 [ 122.457632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.458983] RSP: 002b:00007fb98d8d4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 122.459573] RAX: ffffffffffffffda RBX: 00007fb990471f60 RCX: 00007fb99035eb19 [ 122.460125] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 122.460652] RBP: 00007fb9903b8f6d R08: 0000000000000000 R09: 0000000000000000 [ 122.461181] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 122.461711] R13: 00007ffe950470bf R14: 00007fb98d8d4300 R15: 0000000000022000 [ 122.462249] [ 122.462424] irq event stamp: 1350 [ 122.462681] hardirqs last enabled at (1349): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 122.463376] hardirqs last disabled at (1350): [] __schedule+0x1225/0x2470 [ 122.463985] softirqs last enabled at (1196): [] __irq_exit_rcu+0x11b/0x180 [ 122.464623] softirqs last disabled at (1099): [] __irq_exit_rcu+0x11b/0x180 [ 122.465258] ---[ end trace 0000000000000000 ]--- 14:00:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210240, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0x90880, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1538b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7f, 0x8, 0xe2, 0x3f, 0x0, 0x200, 0xb7cb38fe5287aa9e, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fff, 0x3f}, 0x2082, 0x9, 0x1000, 0x7, 0x3f, 0x6, 0x7, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x0, 0x20, 0x1, 0xff, 0x4, [{0x100000001, 0x0, 0x62}, {0x3, 0x9, 0x1f, '\x00', 0x386}, {0x1, 0x0, 0x6, '\x00', 0x1000}, {0xfffffffffffffff9, 0x1, 0x4, '\x00', 0x800}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5414, 0x0) sendfile(r3, r1, 0x0, 0x4) 14:00:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210240, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0x90880, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1538b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7f, 0x8, 0xe2, 0x3f, 0x0, 0x200, 0xb7cb38fe5287aa9e, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fff, 0x3f}, 0x2082, 0x9, 0x1000, 0x7, 0x3f, 0x6, 0x7, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x0, 0x20, 0x1, 0xff, 0x4, [{0x100000001, 0x0, 0x62}, {0x3, 0x9, 0x1f, '\x00', 0x386}, {0x1, 0x0, 0x6, '\x00', 0x1000}, {0xfffffffffffffff9, 0x1, 0x4, '\x00', 0x800}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5414, 0x0) sendfile(r3, r1, 0x0, 0x4) 14:00:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210240, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0x90880, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1538b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7f, 0x8, 0xe2, 0x3f, 0x0, 0x200, 0xb7cb38fe5287aa9e, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fff, 0x3f}, 0x2082, 0x9, 0x1000, 0x7, 0x3f, 0x6, 0x7, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x0, 0x20, 0x1, 0xff, 0x4, [{0x100000001, 0x0, 0x62}, {0x3, 0x9, 0x1f, '\x00', 0x386}, {0x1, 0x0, 0x6, '\x00', 0x1000}, {0xfffffffffffffff9, 0x1, 0x4, '\x00', 0x800}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5414, 0x0) sendfile(r3, r1, 0x0, 0x4) 14:00:56 executing program 2: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x904, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40049}, 0x48800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '}:!\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4840}, 0x4000) r1 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x5, 0x100) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/6, 0x6}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/128, 0x80}], 0x5) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000980)={&(0x7f00000007c0), 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x13c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "78fed9a074aa40bb14bc0b1abb3f8e7300ab4bc82a0921addc57f595a6"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "09e75b02db01c44e97411238b32141319b8fa3c2afbdc6f853a5005c0d9129c84259f7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "b13dc7226006ddd5ee3667832c5d83aecd15f013084c25fa"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f291d25e477f4aa83336ba14c131b627f08239b7f7a74a9a"}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x4044042) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000009c0)={0x100000001, 0x7, 0x6, 0x0, 0x0, [{{r1}, 0x4}, {{r3}, 0x5}, {{r0}, 0xb50e}, {{r1}, 0x100}, {{r3}, 0x4}, {{}, 0xe6}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000ac0)='numa_maps\x00') sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa82d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24000050) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000c00)=[r3, r5], 0x2) r6 = syz_open_dev$vcsa(&(0x7f0000000c40), 0x3, 0x10800) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x40}}, 0x1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r7, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4804) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x0, 0x202, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xb7, 0x43}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x20004000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000fc0)={0x73, 0x14, '\x00', [@generic={0x70, 0x2a, "fd1ae5a08e858fcb758dd7feefb08a0a24f0862df9b9ba4eff558bd707a790c3b64bd1a97534265bc813"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4cb8}, @calipso={0x7, 0x58, {0x2, 0x14, 0x0, 0x6, [0x1c33, 0x80, 0x48b, 0x1, 0x80000000, 0x9, 0x7, 0x3, 0x3, 0x4183f1c7]}}, @jumbo={0xc2, 0x4, 0xfff}, @enc_lim={0x4, 0x1, 0x1f}, @jumbo, @pad1, @ra={0x5, 0x2, 0x1}]}, 0xb0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) VM DIAGNOSIS: 14:00:56 Registers: info registers vcpu 0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88801775f3c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000a R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb98d8d4700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6d5888b1f0 CR3=0000000017746000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f7342a9e7c0 00007f7342a9e7c8 YMM02=0000000000000000 0000000000000000 00007f7342a9e7e0 00007f7342a9e7c0 YMM03=0000000000000000 0000000000000000 00007f7342a9e7c8 00007f7342a9e7c0 YMM04=0000000000000000 0000000000000000 c012b18dbab46b08 59e200bba529714d YMM05=0000000000000000 0000000000000000 b3187046cc330be0 8136036ee48802dd YMM06=0000000000000000 0000000000000000 e4ab1cd4a23fc7c2 50dc238547320c5a YMM07=0000000000000000 0000000000000000 2ac9877c8f952899 7ce61ac298498a8b YMM08=0000000000000000 0000000000000000 23c7943941c6434b d2cf7bffe385938a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff815ac832 RDX=ffff88800f955040 RSI=0000000000000008 RDI=ffffffff85b06a10 RBP=ffffffff848cccc0 RSP=ffff88803f2cf750 R8 =0000000000000000 R9 =ffff88806cf33b63 R10=ffffed100d9e676c R11=0000000000000001 R12=4000000000000000 R13=4000000000000002 R14=000000000003d2b4 R15=ffffffff848cccc0 RIP=ffffffff81787f34 RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f57ffd068e0 CR3=000000001dd32000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000