Warning: Permanently added '[localhost]:8276' (ECDSA) to the list of known hosts. 2022/09/30 14:16:19 fuzzer started 2022/09/30 14:16:20 dialing manager at localhost:40535 syzkaller login: [ 44.844584] cgroup: Unknown subsys name 'net' [ 44.944821] cgroup: Unknown subsys name 'rlimit' 2022/09/30 14:16:34 syscalls: 206 2022/09/30 14:16:34 code coverage: enabled 2022/09/30 14:16:34 comparison tracing: enabled 2022/09/30 14:16:34 extra coverage: enabled 2022/09/30 14:16:34 setuid sandbox: enabled 2022/09/30 14:16:34 namespace sandbox: enabled 2022/09/30 14:16:34 Android sandbox: enabled 2022/09/30 14:16:34 fault injection: enabled 2022/09/30 14:16:34 leak checking: enabled 2022/09/30 14:16:34 net packet injection: enabled 2022/09/30 14:16:34 net device setup: enabled 2022/09/30 14:16:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 14:16:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 14:16:34 USB emulation: enabled 2022/09/30 14:16:34 hci packet injection: enabled 2022/09/30 14:16:34 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 14:16:34 802.15.4 emulation: enabled 2022/09/30 14:16:34 fetching corpus: 0, signal 0/0 (executing program) 2022/09/30 14:16:36 starting 8 fuzzer processes 14:16:36 executing program 0: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x11, 0xffffffffffffffff, 0x10000000) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x6080, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x400, 0x10000) r1 = fsopen(&(0x7f00000001c0)='ntfs\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3d4d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x23f8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2}, 0x8000) r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x4, 0x4400) ioctl$LOOP_CLR_FD(r4, 0x4c01) fsmount(r1, 0x0, 0x102) r5 = fsmount(r3, 0x0, 0xd) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000400)='/dev/vcsu#\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) clock_gettime(0x3, &(0x7f0000000480)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000004c0)) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x8c56, 0x9, 0xb, 0x0, "82e0507f7b1eb8327cc0a45a5721abce304af54db634a5282613926cb0f8513424c896636b31336c7d117f8f0d7eb69b6329ab3f115e57b8b85035cbce3e4a43", "71140e1834e15d9ed5ac1596a863ed82188f0646590f6fd4bf9d296bce37e6c5", [0xfff, 0x4]}) 14:16:36 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x8) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000500)=0x4) r5 = semget(0x1, 0x1, 0x0) semctl$GETVAL(r5, 0x4, 0xc, &(0x7f0000000540)=""/194) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:16:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4a02) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x1f, 0x1}, 'port0\x00', 0x80, 0xc30, 0x83f, 0x8, 0x2, 0x1d, 0x9, 0x0, 0x0, 0xee}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x8, 0x1}, 'port1\x00', 0x85, 0x1, 0x49b2, 0x1, 0xfffffff7, 0x2, 0xfffffffa, 0x0, 0x0, 0x17}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000001c0)={0x55fe, 0x0, 0xffffffff, 0xd5, 0xe66}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1, 0x5}, 'port1\x00', 0x2, 0x120401, 0x4, 0x3, 0x2, 0x8, 0xaf57, 0x0, 0x2, 0x81}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000440)={0x101, 0xff, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x8dff, 0x3f800000, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000005c0)={0x3, 0x36, 0x0, 'queue0\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000680)={0x4, 0x5, 0x1, 'queue1\x00', 0x5}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000740)={0x4, 0xafa4, 0x8, 0x56bb, 0x3, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000780)={0x3ff, 0x0, 'client1\x00', 0xffffffff80000002, "a639260245a53e82", "e91cb909ed7a0de5500bf227e9b6dbb4416708e877601c93dae7aecc3a71772b", 0x6, 0x400}) geteuid() ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000840)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x1e, 0x4, 0x3, 0x35, 0x78, 0x65, 0x0, 0x2b, 0x4, 0x0, @multicast2, @empty, {[@noop, @generic={0x94, 0x9, "55220f6fa1b35d"}, @generic={0x89, 0xe, "c9f9b8c315c3f3b357952d25"}, @ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x1, [{0x5, 0x12, "c1657f4a80f97f030066211256540c25"}, {0x6, 0xd, "2d0ebe5fd143e44e29c7a5"}]}, @ssrr={0x89, 0x7, 0xc1, [@local]}, @timestamp_prespec={0x44, 0x1c, 0x62, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x96c}, {@loopback, 0x8}]}]}}}}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000980)={{0x40, 0x9}, 'port0\x00', 0x20, 0x40020, 0x56, 0x8, 0x8001, 0x3f, 0x1ff, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000a40)={{0x27, 0xf9}, 'port1\x00', 0x42, 0x0, 0x6bc4, 0x80000001, 0x9, 0xa5, 0x6, 0x0, 0x1, 0x1}) 14:16:36 executing program 3: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7ff, 0xc100) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x115900) socketpair(0x3, 0x5, 0x800, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x5, 0x81, {{0xb, 0x4, 0x0, 0x30, 0x2c, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@generic={0x82, 0x8, "c3741c099933"}, @lsrr={0x83, 0xf, 0x7d, [@rand_addr=0x64010102, @private=0xa010101, @broadcast]}]}}}}}) r5 = fsmount(r0, 0x1, 0x81) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x6b28b803892f447f}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x93e0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x58}}, 0x20000001) socketpair(0x2b, 0x3, 0x58, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x134, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x20000080) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r4, 0x28f, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004040) socketpair(0x1f, 0x5, 0x1ff, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x270, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x256, 0x2a, [@perr={0x84, 0x22, {0x8, 0x2, [@not_ext={{}, @broadcast, 0x1, "", 0x10}, @ext={{}, @device_b, 0x8, @broadcast, 0x28}]}}, @peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}, @mic={0x8c, 0x18, {0xb44, "4ccb0e42ba10", @long="637fe38d7edc1c070d2e158f33a52d76"}}, @link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x1, 0x81, @broadcast, 0x8, 0x1, 0x2}}, @perr={0x84, 0xcf, {0x8, 0xd, [@ext={{}, @device_b, 0x401, @device_b, 0x3f}, @ext={{}, @broadcast, 0x5208, @broadcast, 0x21}, @ext={{}, @device_b, 0xa6, @device_a, 0x13}, @not_ext={{}, @device_b, 0x6, "", 0x39}, @not_ext={{}, @device_b, 0x1, "", 0x16}, @ext={{}, @device_a, 0x800, @broadcast, 0x3b}, @not_ext={{}, @broadcast, 0x9, "", 0x27}, @not_ext={{}, @broadcast, 0x6, "", 0x21}, @ext={{}, @broadcast, 0xffff, @broadcast, 0x20}, @not_ext={{}, @device_b, 0x5075, "", 0x22}, @not_ext={{}, @device_a, 0x800, "", 0x25}, @ext={{}, @device_a, 0x6, @broadcast, 0x40}, @not_ext={{}, @broadcast, 0x400, "", 0x28}]}}, @fast_bss_trans={0x37, 0x110, {0x1, 0x8, "4f8d95eb36eb28e585d7cc7fdc4ea218", "527b062f60fe4a56151ad409795e45cc555175a0b80343dfd37024ab62e3641d", "9f04c5d430955ddde7c3b8b22240bf3b213746780c076022763606c669409297", [{0x2, 0x11, "b84971a7ab1872b0f86f1d9fb8b62fd381"}, {0x4, 0x19, "602fd327fb3fd56a50f61c6a76d0940120f985df239772c56f"}, {0x2, 0x14, "a9ebd94d79c72deb88583f2fc25b38e35017760b"}, {0x1, 0x12, "c242a0367cee5795d46d84f4136200f31524"}, {0x2, 0x25, "0bd25266ee1c208c4782ed7b4151be9860338841456440fa874c9fb8f30ed4cec4da212dc6"}, {0x1, 0x23, "9e4f06bf485c0f854c06c92216401c0b0f6eae1cf6d9e4608f4a433b2fb2e753743cbd"}, {0x1, 0x15, "30b1571626b337ef0838e1bf802428c2e72f386a01"}, {0x3, 0x1, '&'}]}}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40082}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000000f80)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0xffffffff, 0x7, @remote, @empty, 0x40, 0x7, 0x3, 0x80000000}}) [ 60.401569] audit: type=1400 audit(1664547396.350:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:16:36 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x7325, 0x8, 0x0, 'queue1\x00', 0xfffff806}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='queue1\x00', &(0x7f0000000100)='./file0\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x44000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x5, 0x0, 'client1\x00', 0x4, "6e7e412446631185", "94c00f2138ee02a5246ff432a75b9aeecd371abbeb4d20adf3d292e151005944", 0x10000, 0x5}) r2 = socket$inet6(0xa, 0x6, 0x80000000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in6=@private1}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000400)=0xe8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000440)='client1\x00', &(0x7f0000000480)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000004c0)={{0x2, 0x3, 0x5, 0x3, 0x1}, 0x9, 0x6, 0x1}) r3 = syz_open_dev$vcsu(&(0x7f0000000540), 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000600)) r4 = fsmount(r3, 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000680)={0x6, 0x3f, 0x0, 'queue1\x00', 0xff}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000740)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000780)='\x00', &(0x7f00000007c0)='./file0/file0\x00', 0xffffffffffffff9c) 14:16:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x1f, 0x6, 0x20, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x5, 0xc00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xbc}}, 0x804) r7 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x6, 0x10301) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x808d0}, 0xf009366c41416d55) socketpair(0x3b, 0xc, 0x2, &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000600)={0x10, @time={0x8, 0x4}, 0x1, {0x7, 0x5}, 0xd8, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000680)) r9 = fsmount(r6, 0x0, 0x7d) r10 = inotify_init1(0x0) inotify_rm_watch(r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r9, 0xc0bc5310, &(0x7f0000000700)) 14:16:36 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x5, 0x1, 0x1db, {0x8, 0x200}, 0x6b5, 0x1}) r1 = socket(0x8, 0x3, 0x6a1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7881, 0x700, 0x0, 0x6e3f, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x67, 0x0, 0xff, 0x2f, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x1f, 0x2d, [@local, @broadcast, @rand_addr=0x64010102, @loopback, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x2b, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @empty]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x0, @xdp={0x2c, 0x8, 0x0, 0x31}, @l2={0x1f, 0x2d, @none, 0x80}, @qipcrtr={0x2a, 0x9646ab4d3e4e32a4, 0x4001}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='lo\x00', 0x0, 0xb75, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x314, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x80}, {0x0, 0x0, 0x3, 0x81}, {0x4, 0x6, 0x7, 0x1}, {0x0, 0x40, 0x80, 0x6}, {0x800, 0x81, 0x7, 0x6}, {0x2, 0xa0, 0x7, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000880)=0x1, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2f21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x4c}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000a00)={0xe00000, 0x7, 0x0, 'queue0\x00', 0x9}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040891) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan1\x00'}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000c80)=@req={0x28, &(0x7f0000000c40)={'batadv_slave_0\x00', @ifru_names}}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000cc0)='G\xce/*.%&[-}\x00', 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d40)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000e40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000024c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f0000001880)={0xbf0, 0x0, 0x800, 0x70bd2b, 0x24bec09, {}, [{{0x8, 0x1, r9}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xffff, 0x7, 0x81, 0x1}, {0x81, 0x46, 0x2, 0x3}, {0x0, 0x40, 0x3, 0x2}, {0x0, 0x2, 0x3, 0x6}, {0x5, 0x5, 0x80, 0x4}, {0x401, 0xaf, 0x4, 0x4a6}, {0xfff, 0xf4, 0x4, 0x6}, {0x179b, 0x5, 0x1f, 0x2}, {0x5, 0x9, 0xff, 0x97f}]}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x73}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf3}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r4}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd3}}, {0x8, 0x6, r3}}}]}}]}, 0xbf0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:16:36 executing program 7: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x22}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x70}}, 0x24000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6815, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6ba6af36fe259006c8ca054c43"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c814) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4011c202}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb089}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x0, 0xb4, 0x2, 0xffff6788}, 0x2, 0x2, 0xffffffffffffb039}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000580)={{0xffffffffffffffff, 0x1, 0x81, 0x3, 0x1}, 0xab0d, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x100000001, 0x5, 0x10000, 0x3}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2b5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) r5 = syz_open_dev$vcsu(&(0x7f0000000800), 0x40, 0x60000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x7, 0x6e806296, {{0x23, 0x4, 0x0, 0x2, 0x8c, 0x66, 0x0, 0x20, 0x2f, 0x0, @broadcast, @remote, {[@end, @ssrr={0x89, 0x27, 0x21, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}]}, @generic={0x82, 0x10, "f4ec0b1de6e942d84d3e4e483ea1"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xb4, 0x1, 0x8, [{@multicast2, 0x2}, {@remote, 0x3}, {@private=0xa010102, 0x6}, {@multicast2, 0x401}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@local, 0x4}, {@multicast2, 0x80000000}]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) r7 = fsmount(r1, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x22000041) [ 61.685759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.688277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.689958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.693034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.695374] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.696766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.712003] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.738795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.745039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.753589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.755059] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.757690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.763893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.767531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.768767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.773289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.773424] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.776385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.777621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.809821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.811449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.812682] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.816120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.818157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.819310] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.819684] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.820398] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.823892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.829654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.838255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.841545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.842972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.844739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.846045] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.847787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.851735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.853315] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.854779] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.858841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.863885] Bluetooth: hci4: HCI_REQ-0x0c1a [ 61.871410] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.873802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.885358] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.899926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.905644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.906603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.906987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.909487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.909573] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.915505] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.920543] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.921801] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.921922] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.924016] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.929318] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.939303] Bluetooth: hci5: HCI_REQ-0x0c1a [ 63.768543] Bluetooth: hci0: command 0x0409 tx timeout [ 63.832255] Bluetooth: hci1: command 0x0409 tx timeout [ 63.895714] Bluetooth: hci4: command 0x0409 tx timeout [ 63.896362] Bluetooth: hci3: command 0x0409 tx timeout [ 63.896846] Bluetooth: hci2: command 0x0409 tx timeout [ 63.960315] Bluetooth: hci5: command 0x0409 tx timeout [ 63.960900] Bluetooth: hci7: command 0x0409 tx timeout [ 63.961409] Bluetooth: hci6: command 0x0409 tx timeout [ 65.815288] Bluetooth: hci0: command 0x041b tx timeout [ 65.880299] Bluetooth: hci1: command 0x041b tx timeout [ 65.943266] Bluetooth: hci2: command 0x041b tx timeout [ 65.943687] Bluetooth: hci3: command 0x041b tx timeout [ 65.944088] Bluetooth: hci4: command 0x041b tx timeout [ 66.008262] Bluetooth: hci6: command 0x041b tx timeout [ 66.008688] Bluetooth: hci7: command 0x041b tx timeout [ 66.009087] Bluetooth: hci5: command 0x041b tx timeout [ 67.863232] Bluetooth: hci0: command 0x040f tx timeout [ 67.927229] Bluetooth: hci1: command 0x040f tx timeout [ 67.992336] Bluetooth: hci4: command 0x040f tx timeout [ 67.992757] Bluetooth: hci3: command 0x040f tx timeout [ 67.993158] Bluetooth: hci2: command 0x040f tx timeout [ 68.056319] Bluetooth: hci5: command 0x040f tx timeout [ 68.056739] Bluetooth: hci7: command 0x040f tx timeout [ 68.057121] Bluetooth: hci6: command 0x040f tx timeout [ 69.912301] Bluetooth: hci0: command 0x0419 tx timeout [ 69.976267] Bluetooth: hci1: command 0x0419 tx timeout [ 70.040424] Bluetooth: hci2: command 0x0419 tx timeout [ 70.040891] Bluetooth: hci3: command 0x0419 tx timeout [ 70.041616] Bluetooth: hci4: command 0x0419 tx timeout [ 70.104309] Bluetooth: hci6: command 0x0419 tx timeout [ 70.104793] Bluetooth: hci7: command 0x0419 tx timeout [ 70.105223] Bluetooth: hci5: command 0x0419 tx timeout 14:17:33 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x8) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000500)=0x4) r5 = semget(0x1, 0x1, 0x0) semctl$GETVAL(r5, 0x4, 0xc, &(0x7f0000000540)=""/194) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:17:33 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x8) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000500)=0x4) r5 = semget(0x1, 0x1, 0x0) semctl$GETVAL(r5, 0x4, 0xc, &(0x7f0000000540)=""/194) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:17:33 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x8) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000500)=0x4) r5 = semget(0x1, 0x1, 0x0) semctl$GETVAL(r5, 0x4, 0xc, &(0x7f0000000540)=""/194) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:17:33 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x8) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000500)=0x4) semget(0x1, 0x1, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:17:34 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x4, 0x8) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000500)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:17:34 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) semget$private(0x0, 0x4, 0x8) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:17:34 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:17:34 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000440)=""/170) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) [ 123.357516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.359136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.369440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.371967] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.373724] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.374942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.378907] Bluetooth: hci0: HCI_REQ-0x0c1a [ 125.399264] Bluetooth: hci0: command 0x0409 tx timeout [ 125.399988] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 125.591245] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 125.655286] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 125.656827] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 125.658054] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 127.447310] Bluetooth: hci0: command 0x041b tx timeout [ 127.708551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.720666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.723177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.724629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.725556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.726429] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.729875] Bluetooth: hci4: HCI_REQ-0x0c1a [ 127.969804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.971861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.976430] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.981771] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.984083] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 127.985982] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.989964] Bluetooth: hci6: HCI_REQ-0x0c1a [ 128.017769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.024959] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.029535] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.033363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.035023] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 128.035942] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.059654] Bluetooth: hci7: HCI_REQ-0x0c1a [ 129.496267] Bluetooth: hci0: command 0x040f tx timeout [ 129.688277] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 129.752255] Bluetooth: hci4: command 0x0409 tx timeout [ 129.944758] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 130.008254] Bluetooth: hci6: command 0x0409 tx timeout [ 130.071326] Bluetooth: hci7: command 0x0409 tx timeout [ 131.544261] Bluetooth: hci0: command 0x0419 tx timeout [ 131.799308] Bluetooth: hci4: command 0x041b tx timeout [ 132.056244] Bluetooth: hci6: command 0x041b tx timeout [ 132.120235] Bluetooth: hci7: command 0x041b tx timeout [ 133.847334] Bluetooth: hci4: command 0x040f tx timeout [ 133.975375] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 134.103444] Bluetooth: hci6: command 0x040f tx timeout [ 134.167386] Bluetooth: hci7: command 0x040f tx timeout [ 134.231555] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 135.895817] Bluetooth: hci4: command 0x0419 tx timeout [ 136.151352] Bluetooth: hci6: command 0x0419 tx timeout [ 136.215362] Bluetooth: hci7: command 0x0419 tx timeout [ 138.456247] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 138.711294] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 140.742358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.750472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.752291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.771831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.780613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.787554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.804280] Bluetooth: hci3: HCI_REQ-0x0c1a [ 142.871255] Bluetooth: hci3: command 0x0409 tx timeout [ 143.000275] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 144.919254] Bluetooth: hci3: command 0x041b tx timeout [ 146.967363] Bluetooth: hci3: command 0x040f tx timeout [ 147.415255] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 149.016251] Bluetooth: hci3: command 0x0419 tx timeout [ 149.893962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.895971] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.897169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.899235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.900070] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.901123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.914835] Bluetooth: hci5: HCI_REQ-0x0c1a [ 151.959424] Bluetooth: hci5: command 0x0409 tx timeout [ 154.007388] Bluetooth: hci5: command 0x041b tx timeout [ 156.055304] Bluetooth: hci5: command 0x040f tx timeout [ 158.104278] Bluetooth: hci5: command 0x0419 tx timeout [ 169.661668] audit: type=1400 audit(1664547505.610:7): avc: denied { create } for pid=6499 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 187.799462] Bluetooth: hci2: command 0x0406 tx timeout [ 187.799548] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.800493] Bluetooth: hci1: command 0x0406 tx timeout [ 187.801048] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.802446] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.803161] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.804311] Call Trace: [ 187.804514] [ 187.804701] __schedule+0x893/0x2470 [ 187.805369] ? io_schedule_timeout+0x150/0x150 [ 187.805739] ? do_raw_spin_lock+0x121/0x260 [ 187.806067] ? rwlock_bug.part.0+0x90/0x90 [ 187.806415] schedule+0xda/0x1b0 [ 187.806690] rescuer_thread+0x851/0xdb0 [ 187.806995] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.807393] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.807773] ? lockdep_hardirqs_on+0x79/0x100 [ 187.808115] ? worker_thread+0x1260/0x1260 [ 187.808470] kthread+0x2ed/0x3a0 [ 187.808741] ? kthread_complete_and_exit+0x40/0x40 [ 187.809118] ret_from_fork+0x22/0x30 [ 187.809441] [ 187.809632] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.810123] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.810544] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.811113] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.811750] Call Trace: [ 187.811952] [ 187.812131] __schedule+0x893/0x2470 [ 187.812451] ? io_schedule_timeout+0x150/0x150 [ 187.812806] ? do_raw_spin_lock+0x121/0x260 [ 187.813136] ? rwlock_bug.part.0+0x90/0x90 [ 187.813486] schedule+0xda/0x1b0 [ 187.813761] rescuer_thread+0x851/0xdb0 [ 187.814069] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.814467] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.814857] ? lockdep_hardirqs_on+0x79/0x100 [ 187.815229] ? worker_thread+0x1260/0x1260 [ 187.815556] kthread+0x2ed/0x3a0 [ 187.815816] ? kthread_complete_and_exit+0x40/0x40 [ 187.816227] ret_from_fork+0x22/0x30 [ 187.816528] [ 187.816707] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.817218] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.817608] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.818217] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.818835] Call Trace: [ 187.819033] [ 187.819235] __schedule+0x893/0x2470 [ 187.819530] ? io_schedule_timeout+0x150/0x150 [ 187.819888] ? do_raw_spin_lock+0x121/0x260 [ 187.820246] ? rwlock_bug.part.0+0x90/0x90 [ 187.820579] schedule+0xda/0x1b0 [ 187.820845] rescuer_thread+0x851/0xdb0 [ 187.821150] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.821556] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.821950] ? lockdep_hardirqs_on+0x79/0x100 [ 187.822316] ? worker_thread+0x1260/0x1260 [ 187.822653] kthread+0x2ed/0x3a0 [ 187.822915] ? kthread_complete_and_exit+0x40/0x40 [ 187.823313] ret_from_fork+0x22/0x30 [ 187.823620] [ 187.823805] INFO: task netns:6 blocked for more than 143 seconds. [ 187.824291] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.824698] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.825304] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.825942] Call Trace: [ 187.826140] [ 187.826342] __schedule+0x893/0x2470 [ 187.826640] ? io_schedule_timeout+0x150/0x150 [ 187.826999] ? do_raw_spin_lock+0x121/0x260 [ 187.827368] ? rwlock_bug.part.0+0x90/0x90 [ 187.827704] schedule+0xda/0x1b0 [ 187.827977] rescuer_thread+0x851/0xdb0 [ 187.828314] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.828706] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.829091] ? lockdep_hardirqs_on+0x79/0x100 [ 187.829462] ? worker_thread+0x1260/0x1260 [ 187.829810] kthread+0x2ed/0x3a0 [ 187.830079] ? kthread_complete_and_exit+0x40/0x40 [ 187.830486] ret_from_fork+0x22/0x30 [ 187.830789] [ 187.830977] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.831504] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.831910] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.832497] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.833150] Workqueue: 0x0 (kblockd) [ 187.833483] Call Trace: [ 187.833700] [ 187.833887] __schedule+0x893/0x2470 [ 187.834213] ? io_schedule_timeout+0x150/0x150 [ 187.834583] schedule+0xda/0x1b0 [ 187.834851] worker_thread+0x15f/0x1260 [ 187.835200] ? process_one_work+0x16a0/0x16a0 [ 187.835559] kthread+0x2ed/0x3a0 [ 187.835838] ? kthread_complete_and_exit+0x40/0x40 [ 187.836242] ret_from_fork+0x22/0x30 [ 187.836549] [ 187.836733] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.837258] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.837648] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.838245] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.838853] Call Trace: [ 187.839051] [ 187.839252] __schedule+0x893/0x2470 [ 187.839546] ? io_schedule_timeout+0x150/0x150 [ 187.839894] ? do_raw_spin_lock+0x121/0x260 [ 187.840245] ? rwlock_bug.part.0+0x90/0x90 [ 187.840577] schedule+0xda/0x1b0 [ 187.840837] rescuer_thread+0x851/0xdb0 [ 187.841142] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.841548] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.841956] ? lockdep_hardirqs_on+0x79/0x100 [ 187.842341] ? worker_thread+0x1260/0x1260 [ 187.842669] kthread+0x2ed/0x3a0 [ 187.842932] ? kthread_complete_and_exit+0x40/0x40 [ 187.843327] ret_from_fork+0x22/0x30 [ 187.843631] [ 187.843814] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.844358] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.844756] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.845340] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.845960] Call Trace: [ 187.846155] [ 187.846359] __schedule+0x893/0x2470 [ 187.846660] ? io_schedule_timeout+0x150/0x150 [ 187.847015] ? mark_held_locks+0x9e/0xe0 [ 187.847363] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.847745] schedule+0xda/0x1b0 [ 187.848010] rcu_tasks_one_gp+0x3db/0xc10 [ 187.848369] rcu_tasks_kthread+0x80/0xa0 [ 187.848688] ? rcu_tasks_postscan+0x10/0x10 [ 187.849017] kthread+0x2ed/0x3a0 [ 187.849303] ? kthread_complete_and_exit+0x40/0x40 [ 187.849694] ret_from_fork+0x22/0x30 [ 187.849999] [ 187.850210] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.850705] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.851098] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.851689] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.852337] Workqueue: 0x0 (events_highpri) [ 187.852680] Call Trace: [ 187.852875] [ 187.853052] __schedule+0x893/0x2470 [ 187.853367] ? io_schedule_timeout+0x150/0x150 [ 187.853739] schedule+0xda/0x1b0 [ 187.854006] worker_thread+0x15f/0x1260 [ 187.854353] ? process_one_work+0x16a0/0x16a0 [ 187.854701] kthread+0x2ed/0x3a0 [ 187.854969] ? kthread_complete_and_exit+0x40/0x40 [ 187.855364] ret_from_fork+0x22/0x30 [ 187.855665] [ 187.855846] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.856369] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.856761] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.857352] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.857978] Call Trace: [ 187.858199] [ 187.858386] __schedule+0x893/0x2470 [ 187.858682] ? io_schedule_timeout+0x150/0x150 [ 187.859033] ? do_raw_spin_lock+0x121/0x260 [ 187.859387] ? rwlock_bug.part.0+0x90/0x90 [ 187.859727] schedule+0xda/0x1b0 [ 187.860026] rescuer_thread+0x851/0xdb0 [ 187.860362] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.860742] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.861120] ? lockdep_hardirqs_on+0x79/0x100 [ 187.861498] ? worker_thread+0x1260/0x1260 [ 187.861839] kthread+0x2ed/0x3a0 [ 187.862101] ? kthread_complete_and_exit+0x40/0x40 [ 187.862503] ret_from_fork+0x22/0x30 [ 187.862803] [ 187.862987] INFO: task writeback:28 blocked for more than 143 seconds. [ 187.863483] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.863878] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.864464] task:writeback state:I stack:30176 pid:28 ppid:2 flags:0x00004000 [ 187.865085] Call Trace: [ 187.865305] [ 187.865487] __schedule+0x893/0x2470 [ 187.865784] ? io_schedule_timeout+0x150/0x150 [ 187.866133] ? do_raw_spin_lock+0x121/0x260 [ 187.866493] ? rwlock_bug.part.0+0x90/0x90 [ 187.866823] schedule+0xda/0x1b0 [ 187.867087] rescuer_thread+0x851/0xdb0 [ 187.867422] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.867806] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.868211] ? lockdep_hardirqs_on+0x79/0x100 [ 187.868566] ? worker_thread+0x1260/0x1260 [ 187.868893] kthread+0x2ed/0x3a0 [ 187.869154] ? kthread_complete_and_exit+0x40/0x40 [ 187.869560] ret_from_fork+0x22/0x30 [ 187.869878] [ 187.870114] [ 187.870114] Showing all locks held in the system: [ 187.870602] 1 lock held by rcu_tasks_kthre/11: [ 187.870943] #0: ffffffff85406890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.871694] 1 lock held by khungtaskd/25: [ 187.872001] #0: ffffffff85407360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.872709] 1 lock held by systemd-journal/112: [ 187.873056] 1 lock held by in:imklog/192: [ 187.873385] 2 locks held by syz-executor/6648: [ 187.873734] [ 187.873869] ============================================= [ 187.873869] 14:18:46 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x7325, 0x8, 0x0, 'queue1\x00', 0xfffff806}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='queue1\x00', &(0x7f0000000100)='./file0\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x44000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x5, 0x0, 'client1\x00', 0x4, "6e7e412446631185", "94c00f2138ee02a5246ff432a75b9aeecd371abbeb4d20adf3d292e151005944", 0x10000, 0x5}) r2 = socket$inet6(0xa, 0x6, 0x80000000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in6=@private1}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000400)=0xe8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000440)='client1\x00', &(0x7f0000000480)='./file0\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000004c0)={{0x2, 0x3, 0x5, 0x3, 0x1}, 0x9, 0x6, 0x1}) r3 = syz_open_dev$vcsu(&(0x7f0000000540), 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000600)) r4 = fsmount(r3, 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000680)={0x6, 0x3f, 0x0, 'queue1\x00', 0xff}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000740)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000780)='\x00', &(0x7f00000007c0)='./file0/file0\x00', 0xffffffffffffff9c) 14:18:46 executing program 0: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x11, 0xffffffffffffffff, 0x10000000) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x6080, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x400, 0x10000) r1 = fsopen(&(0x7f00000001c0)='ntfs\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3d4d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x23f8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2}, 0x8000) r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x4, 0x4400) ioctl$LOOP_CLR_FD(r4, 0x4c01) fsmount(r1, 0x0, 0x102) r5 = fsmount(r3, 0x0, 0xd) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000400)='/dev/vcsu#\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) clock_gettime(0x3, &(0x7f0000000480)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000004c0)) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x8c56, 0x9, 0xb, 0x0, "82e0507f7b1eb8327cc0a45a5721abce304af54db634a5282613926cb0f8513424c896636b31336c7d117f8f0d7eb69b6329ab3f115e57b8b85035cbce3e4a43", "71140e1834e15d9ed5ac1596a863ed82188f0646590f6fd4bf9d296bce37e6c5", [0xfff, 0x4]}) 14:18:46 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000400)=""/9) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) 14:18:46 executing program 7: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x22}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x70}}, 0x24000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6815, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6ba6af36fe259006c8ca054c43"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c814) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4011c202}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb089}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x0, 0xb4, 0x2, 0xffff6788}, 0x2, 0x2, 0xffffffffffffb039}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000580)={{0xffffffffffffffff, 0x1, 0x81, 0x3, 0x1}, 0xab0d, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x100000001, 0x5, 0x10000, 0x3}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2b5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) r5 = syz_open_dev$vcsu(&(0x7f0000000800), 0x40, 0x60000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x7, 0x6e806296, {{0x23, 0x4, 0x0, 0x2, 0x8c, 0x66, 0x0, 0x20, 0x2f, 0x0, @broadcast, @remote, {[@end, @ssrr={0x89, 0x27, 0x21, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}]}, @generic={0x82, 0x10, "f4ec0b1de6e942d84d3e4e483ea1"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xb4, 0x1, 0x8, [{@multicast2, 0x2}, {@remote, 0x3}, {@private=0xa010102, 0x6}, {@multicast2, 0x401}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@local, 0x4}, {@multicast2, 0x80000000}]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) r7 = fsmount(r1, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x22000041) 14:18:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4a02) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x1f, 0x1}, 'port0\x00', 0x80, 0xc30, 0x83f, 0x8, 0x2, 0x1d, 0x9, 0x0, 0x0, 0xee}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x8, 0x1}, 'port1\x00', 0x85, 0x1, 0x49b2, 0x1, 0xfffffff7, 0x2, 0xfffffffa, 0x0, 0x0, 0x17}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000001c0)={0x55fe, 0x0, 0xffffffff, 0xd5, 0xe66}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1, 0x5}, 'port1\x00', 0x2, 0x120401, 0x4, 0x3, 0x2, 0x8, 0xaf57, 0x0, 0x2, 0x81}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000440)={0x101, 0xff, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x8dff, 0x3f800000, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000005c0)={0x3, 0x36, 0x0, 'queue0\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000680)={0x4, 0x5, 0x1, 'queue1\x00', 0x5}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000740)={0x4, 0xafa4, 0x8, 0x56bb, 0x3, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000780)={0x3ff, 0x0, 'client1\x00', 0xffffffff80000002, "a639260245a53e82", "e91cb909ed7a0de5500bf227e9b6dbb4416708e877601c93dae7aecc3a71772b", 0x6, 0x400}) geteuid() ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000840)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x1e, 0x4, 0x3, 0x35, 0x78, 0x65, 0x0, 0x2b, 0x4, 0x0, @multicast2, @empty, {[@noop, @generic={0x94, 0x9, "55220f6fa1b35d"}, @generic={0x89, 0xe, "c9f9b8c315c3f3b357952d25"}, @ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x1, [{0x5, 0x12, "c1657f4a80f97f030066211256540c25"}, {0x6, 0xd, "2d0ebe5fd143e44e29c7a5"}]}, @ssrr={0x89, 0x7, 0xc1, [@local]}, @timestamp_prespec={0x44, 0x1c, 0x62, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x96c}, {@loopback, 0x8}]}]}}}}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000980)={{0x40, 0x9}, 'port0\x00', 0x20, 0x40020, 0x56, 0x8, 0x8001, 0x3f, 0x1ff, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000a40)={{0x27, 0xf9}, 'port1\x00', 0x42, 0x0, 0x6bc4, 0x80000001, 0x9, 0xa5, 0x6, 0x0, 0x1, 0x1}) 14:18:46 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x5, 0x1, 0x1db, {0x8, 0x200}, 0x6b5, 0x1}) r1 = socket(0x8, 0x3, 0x6a1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7881, 0x700, 0x0, 0x6e3f, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x67, 0x0, 0xff, 0x2f, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x1f, 0x2d, [@local, @broadcast, @rand_addr=0x64010102, @loopback, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x2b, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @empty]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x0, @xdp={0x2c, 0x8, 0x0, 0x31}, @l2={0x1f, 0x2d, @none, 0x80}, @qipcrtr={0x2a, 0x9646ab4d3e4e32a4, 0x4001}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='lo\x00', 0x0, 0xb75, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x314, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x80}, {0x0, 0x0, 0x3, 0x81}, {0x4, 0x6, 0x7, 0x1}, {0x0, 0x40, 0x80, 0x6}, {0x800, 0x81, 0x7, 0x6}, {0x2, 0xa0, 0x7, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000880)=0x1, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2f21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x4c}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000a00)={0xe00000, 0x7, 0x0, 'queue0\x00', 0x9}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040891) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c00)={'wlan1\x00'}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000c80)=@req={0x28, &(0x7f0000000c40)={'batadv_slave_0\x00', @ifru_names}}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000cc0)='G\xce/*.%&[-}\x00', 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d40)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000e40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000024c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f0000001880)={0xbf0, 0x0, 0x800, 0x70bd2b, 0x24bec09, {}, [{{0x8, 0x1, r9}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xffff, 0x7, 0x81, 0x1}, {0x81, 0x46, 0x2, 0x3}, {0x0, 0x40, 0x3, 0x2}, {0x0, 0x2, 0x3, 0x6}, {0x5, 0x5, 0x80, 0x4}, {0x401, 0xaf, 0x4, 0x4a6}, {0xfff, 0xf4, 0x4, 0x6}, {0x179b, 0x5, 0x1f, 0x2}, {0x5, 0x9, 0xff, 0x97f}]}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x73}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf3}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r4}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd3}}, {0x8, 0x6, r3}}}]}}]}, 0xbf0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:18:46 executing program 3: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7ff, 0xc100) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x115900) socketpair(0x3, 0x5, 0x800, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x5, 0x81, {{0xb, 0x4, 0x0, 0x30, 0x2c, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@generic={0x82, 0x8, "c3741c099933"}, @lsrr={0x83, 0xf, 0x7d, [@rand_addr=0x64010102, @private=0xa010101, @broadcast]}]}}}}}) r5 = fsmount(r0, 0x1, 0x81) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x6b28b803892f447f}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x93e0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x58}}, 0x20000001) socketpair(0x2b, 0x3, 0x58, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x134, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x801}, 0x20000080) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r4, 0x28f, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004040) socketpair(0x1f, 0x5, 0x1ff, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x270, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x256, 0x2a, [@perr={0x84, 0x22, {0x8, 0x2, [@not_ext={{}, @broadcast, 0x1, "", 0x10}, @ext={{}, @device_b, 0x8, @broadcast, 0x28}]}}, @peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}, @mic={0x8c, 0x18, {0xb44, "4ccb0e42ba10", @long="637fe38d7edc1c070d2e158f33a52d76"}}, @link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x1, 0x81, @broadcast, 0x8, 0x1, 0x2}}, @perr={0x84, 0xcf, {0x8, 0xd, [@ext={{}, @device_b, 0x401, @device_b, 0x3f}, @ext={{}, @broadcast, 0x5208, @broadcast, 0x21}, @ext={{}, @device_b, 0xa6, @device_a, 0x13}, @not_ext={{}, @device_b, 0x6, "", 0x39}, @not_ext={{}, @device_b, 0x1, "", 0x16}, @ext={{}, @device_a, 0x800, @broadcast, 0x3b}, @not_ext={{}, @broadcast, 0x9, "", 0x27}, @not_ext={{}, @broadcast, 0x6, "", 0x21}, @ext={{}, @broadcast, 0xffff, @broadcast, 0x20}, @not_ext={{}, @device_b, 0x5075, "", 0x22}, @not_ext={{}, @device_a, 0x800, "", 0x25}, @ext={{}, @device_a, 0x6, @broadcast, 0x40}, @not_ext={{}, @broadcast, 0x400, "", 0x28}]}}, @fast_bss_trans={0x37, 0x110, {0x1, 0x8, "4f8d95eb36eb28e585d7cc7fdc4ea218", "527b062f60fe4a56151ad409795e45cc555175a0b80343dfd37024ab62e3641d", "9f04c5d430955ddde7c3b8b22240bf3b213746780c076022763606c669409297", [{0x2, 0x11, "b84971a7ab1872b0f86f1d9fb8b62fd381"}, {0x4, 0x19, "602fd327fb3fd56a50f61c6a76d0940120f985df239772c56f"}, {0x2, 0x14, "a9ebd94d79c72deb88583f2fc25b38e35017760b"}, {0x1, 0x12, "c242a0367cee5795d46d84f4136200f31524"}, {0x2, 0x25, "0bd25266ee1c208c4782ed7b4151be9860338841456440fa874c9fb8f30ed4cec4da212dc6"}, {0x1, 0x23, "9e4f06bf485c0f854c06c92216401c0b0f6eae1cf6d9e4608f4a433b2fb2e753743cbd"}, {0x1, 0x15, "30b1571626b337ef0838e1bf802428c2e72f386a01"}, {0x3, 0x1, '&'}]}}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40082}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000000f80)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0xffffffff, 0x7, @remote, @empty, 0x40, 0x7, 0x3, 0x80000000}}) 14:18:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x1f, 0x6, 0x20, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x5, 0xc00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xbc}}, 0x804) r7 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x6, 0x10301) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x808d0}, 0xf009366c41416d55) socketpair(0x3b, 0xc, 0x2, &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000600)={0x10, @time={0x8, 0x4}, 0x1, {0x7, 0x5}, 0xd8, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000680)) r9 = fsmount(r6, 0x0, 0x7d) r10 = inotify_init1(0x0) inotify_rm_watch(r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r9, 0xc0bc5310, &(0x7f0000000700)) 14:18:46 executing program 1: r0 = semget$private(0x0, 0x1, 0x681) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/33) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000040)=""/18) r1 = semget(0x3, 0x4, 0x400) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000080)=""/94) r2 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/167) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/245) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000002c0)=""/115) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000340)=0x5) r3 = semget$private(0x0, 0x1, 0x120) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f00000003c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, @ax25={0x3, @bcast, 0x4}, @l2tp={0x2, 0x0, @empty, 0x3}, 0xfff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x9, 0x1}) VM DIAGNOSIS: 14:18:43 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000010 RCX=1ffffffff0e0c0e0 RDX=1ffff11003558c1f RSI=0000000000000002 RDI=0000000000000000 RBP=ffff88801aac60a0 RSP=ffff88801882fa10 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000293 R13=0000000000000001 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff8214d710 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2a11182900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a1064cdf0 CR3=000000000d7e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 5837fe9dc1c91f32 00000000000ae618 YMM01=0000000000000000 0000000000000000 a9bc8715428715b4 fe4edd5de4da05ca YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 0000000000122300 YMM04=0000000000000000 0000000000000000 bb49cb4138dcf358 000000000013df88 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 d58cb48354886272 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000200000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc189ca080 CR3=000000002c3a4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4151ff2c00000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000