Warning: Permanently added '[localhost]:11939' (ECDSA) to the list of known hosts. 2022/10/02 20:37:59 fuzzer started 2022/10/02 20:37:59 dialing manager at localhost:35095 syzkaller login: [ 44.297632] cgroup: Unknown subsys name 'net' [ 44.487600] cgroup: Unknown subsys name 'rlimit' 2022/10/02 20:38:14 syscalls: 2215 2022/10/02 20:38:14 code coverage: enabled 2022/10/02 20:38:14 comparison tracing: enabled 2022/10/02 20:38:14 extra coverage: enabled 2022/10/02 20:38:14 setuid sandbox: enabled 2022/10/02 20:38:14 namespace sandbox: enabled 2022/10/02 20:38:14 Android sandbox: enabled 2022/10/02 20:38:14 fault injection: enabled 2022/10/02 20:38:14 leak checking: enabled 2022/10/02 20:38:14 net packet injection: enabled 2022/10/02 20:38:14 net device setup: enabled 2022/10/02 20:38:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 20:38:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 20:38:14 USB emulation: enabled 2022/10/02 20:38:14 hci packet injection: enabled 2022/10/02 20:38:14 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 20:38:14 802.15.4 emulation: enabled 2022/10/02 20:38:14 fetching corpus: 50, signal 31948/33727 (executing program) 2022/10/02 20:38:14 fetching corpus: 100, signal 38018/41474 (executing program) 2022/10/02 20:38:14 fetching corpus: 150, signal 45667/50721 (executing program) 2022/10/02 20:38:14 fetching corpus: 200, signal 49919/56520 (executing program) 2022/10/02 20:38:14 fetching corpus: 250, signal 54604/62654 (executing program) 2022/10/02 20:38:14 fetching corpus: 300, signal 58245/67782 (executing program) 2022/10/02 20:38:14 fetching corpus: 350, signal 63202/74076 (executing program) 2022/10/02 20:38:15 fetching corpus: 400, signal 66919/79106 (executing program) 2022/10/02 20:38:15 fetching corpus: 450, signal 70071/83614 (executing program) 2022/10/02 20:38:15 fetching corpus: 500, signal 76195/90792 (executing program) 2022/10/02 20:38:15 fetching corpus: 550, signal 81520/97199 (executing program) 2022/10/02 20:38:15 fetching corpus: 600, signal 84219/101126 (executing program) 2022/10/02 20:38:15 fetching corpus: 650, signal 88379/106306 (executing program) 2022/10/02 20:38:15 fetching corpus: 700, signal 91644/110659 (executing program) 2022/10/02 20:38:15 fetching corpus: 750, signal 93590/113756 (executing program) 2022/10/02 20:38:16 fetching corpus: 800, signal 96080/117348 (executing program) 2022/10/02 20:38:16 fetching corpus: 850, signal 98443/120736 (executing program) 2022/10/02 20:38:16 fetching corpus: 900, signal 99952/123381 (executing program) 2022/10/02 20:38:16 fetching corpus: 950, signal 104368/128516 (executing program) 2022/10/02 20:38:16 fetching corpus: 1000, signal 107221/132194 (executing program) 2022/10/02 20:38:16 fetching corpus: 1050, signal 109021/134950 (executing program) 2022/10/02 20:38:16 fetching corpus: 1100, signal 111328/138149 (executing program) 2022/10/02 20:38:16 fetching corpus: 1150, signal 113210/140955 (executing program) 2022/10/02 20:38:16 fetching corpus: 1200, signal 115042/143747 (executing program) 2022/10/02 20:38:17 fetching corpus: 1250, signal 118435/147740 (executing program) 2022/10/02 20:38:17 fetching corpus: 1300, signal 119684/149930 (executing program) 2022/10/02 20:38:17 fetching corpus: 1350, signal 122086/153048 (executing program) 2022/10/02 20:38:17 fetching corpus: 1400, signal 123958/155781 (executing program) 2022/10/02 20:38:17 fetching corpus: 1450, signal 125313/158000 (executing program) 2022/10/02 20:38:17 fetching corpus: 1500, signal 127430/160819 (executing program) 2022/10/02 20:38:17 fetching corpus: 1550, signal 129241/163283 (executing program) 2022/10/02 20:38:17 fetching corpus: 1600, signal 130551/165455 (executing program) 2022/10/02 20:38:17 fetching corpus: 1650, signal 131694/167439 (executing program) 2022/10/02 20:38:18 fetching corpus: 1700, signal 132824/169385 (executing program) 2022/10/02 20:38:18 fetching corpus: 1750, signal 134084/171437 (executing program) 2022/10/02 20:38:18 fetching corpus: 1800, signal 135683/173675 (executing program) 2022/10/02 20:38:18 fetching corpus: 1850, signal 136545/175343 (executing program) 2022/10/02 20:38:18 fetching corpus: 1900, signal 138377/177714 (executing program) 2022/10/02 20:38:18 fetching corpus: 1950, signal 140011/179940 (executing program) 2022/10/02 20:38:18 fetching corpus: 2000, signal 142001/182413 (executing program) 2022/10/02 20:38:18 fetching corpus: 2050, signal 143502/184528 (executing program) 2022/10/02 20:38:19 fetching corpus: 2100, signal 145899/187235 (executing program) 2022/10/02 20:38:19 fetching corpus: 2150, signal 147123/189055 (executing program) 2022/10/02 20:38:19 fetching corpus: 2200, signal 148109/190727 (executing program) 2022/10/02 20:38:19 fetching corpus: 2250, signal 149308/192511 (executing program) 2022/10/02 20:38:19 fetching corpus: 2300, signal 149993/193954 (executing program) 2022/10/02 20:38:19 fetching corpus: 2350, signal 150802/195473 (executing program) 2022/10/02 20:38:19 fetching corpus: 2400, signal 152231/197440 (executing program) 2022/10/02 20:38:19 fetching corpus: 2450, signal 153298/199057 (executing program) 2022/10/02 20:38:19 fetching corpus: 2500, signal 154736/200877 (executing program) 2022/10/02 20:38:20 fetching corpus: 2550, signal 155309/202177 (executing program) 2022/10/02 20:38:20 fetching corpus: 2600, signal 156127/203660 (executing program) 2022/10/02 20:38:20 fetching corpus: 2650, signal 157209/205246 (executing program) 2022/10/02 20:38:20 fetching corpus: 2700, signal 158458/206990 (executing program) 2022/10/02 20:38:20 fetching corpus: 2750, signal 159489/208581 (executing program) 2022/10/02 20:38:20 fetching corpus: 2800, signal 160357/209976 (executing program) 2022/10/02 20:38:20 fetching corpus: 2850, signal 161108/211339 (executing program) 2022/10/02 20:38:20 fetching corpus: 2900, signal 162571/213100 (executing program) 2022/10/02 20:38:21 fetching corpus: 2950, signal 163211/214367 (executing program) 2022/10/02 20:38:21 fetching corpus: 3000, signal 163960/215669 (executing program) 2022/10/02 20:38:21 fetching corpus: 3050, signal 164561/216868 (executing program) 2022/10/02 20:38:21 fetching corpus: 3100, signal 165691/218358 (executing program) 2022/10/02 20:38:21 fetching corpus: 3150, signal 166540/219714 (executing program) 2022/10/02 20:38:21 fetching corpus: 3200, signal 166914/220776 (executing program) 2022/10/02 20:38:21 fetching corpus: 3250, signal 167524/221950 (executing program) 2022/10/02 20:38:21 fetching corpus: 3300, signal 168757/223467 (executing program) 2022/10/02 20:38:21 fetching corpus: 3350, signal 169424/224646 (executing program) 2022/10/02 20:38:22 fetching corpus: 3400, signal 169925/225793 (executing program) 2022/10/02 20:38:22 fetching corpus: 3450, signal 170504/226900 (executing program) 2022/10/02 20:38:22 fetching corpus: 3500, signal 171947/228413 (executing program) 2022/10/02 20:38:22 fetching corpus: 3550, signal 173115/229800 (executing program) 2022/10/02 20:38:22 fetching corpus: 3600, signal 175169/231624 (executing program) 2022/10/02 20:38:22 fetching corpus: 3650, signal 176050/232846 (executing program) 2022/10/02 20:38:22 fetching corpus: 3700, signal 176495/233868 (executing program) 2022/10/02 20:38:22 fetching corpus: 3750, signal 176986/234864 (executing program) 2022/10/02 20:38:23 fetching corpus: 3800, signal 177495/235891 (executing program) 2022/10/02 20:38:23 fetching corpus: 3850, signal 178348/237046 (executing program) 2022/10/02 20:38:23 fetching corpus: 3900, signal 179199/238228 (executing program) 2022/10/02 20:38:23 fetching corpus: 3950, signal 179529/239116 (executing program) 2022/10/02 20:38:23 fetching corpus: 4000, signal 180003/240047 (executing program) 2022/10/02 20:38:23 fetching corpus: 4050, signal 181002/241193 (executing program) 2022/10/02 20:38:23 fetching corpus: 4100, signal 181445/242156 (executing program) 2022/10/02 20:38:23 fetching corpus: 4150, signal 181885/243095 (executing program) 2022/10/02 20:38:23 fetching corpus: 4200, signal 182442/244071 (executing program) 2022/10/02 20:38:24 fetching corpus: 4250, signal 183361/245126 (executing program) 2022/10/02 20:38:24 fetching corpus: 4300, signal 184214/246181 (executing program) 2022/10/02 20:38:24 fetching corpus: 4350, signal 184962/247224 (executing program) 2022/10/02 20:38:24 fetching corpus: 4400, signal 186136/248370 (executing program) 2022/10/02 20:38:24 fetching corpus: 4450, signal 186557/249280 (executing program) 2022/10/02 20:38:24 fetching corpus: 4500, signal 187193/250255 (executing program) 2022/10/02 20:38:24 fetching corpus: 4550, signal 187695/251132 (executing program) 2022/10/02 20:38:24 fetching corpus: 4600, signal 188107/252006 (executing program) 2022/10/02 20:38:24 fetching corpus: 4650, signal 188748/252893 (executing program) 2022/10/02 20:38:25 fetching corpus: 4700, signal 189671/253921 (executing program) 2022/10/02 20:38:25 fetching corpus: 4750, signal 191185/255130 (executing program) 2022/10/02 20:38:25 fetching corpus: 4800, signal 192127/256139 (executing program) 2022/10/02 20:38:25 fetching corpus: 4850, signal 192866/257059 (executing program) 2022/10/02 20:38:25 fetching corpus: 4900, signal 193402/257874 (executing program) 2022/10/02 20:38:25 fetching corpus: 4950, signal 194568/258909 (executing program) 2022/10/02 20:38:25 fetching corpus: 4997, signal 194783/259628 (executing program) 2022/10/02 20:38:25 fetching corpus: 4997, signal 194783/260276 (executing program) 2022/10/02 20:38:25 fetching corpus: 4997, signal 194783/260949 (executing program) 2022/10/02 20:38:25 fetching corpus: 4997, signal 194783/261617 (executing program) 2022/10/02 20:38:25 fetching corpus: 4997, signal 194783/262256 (executing program) 2022/10/02 20:38:25 fetching corpus: 4997, signal 194783/262898 (executing program) 2022/10/02 20:38:25 fetching corpus: 4997, signal 194783/263570 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/264216 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/264861 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/265513 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/266150 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/266825 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/267470 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/268107 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/268742 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/269384 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/270054 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/270715 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/271335 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/272022 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/272738 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/273398 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/274033 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/274722 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/275382 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/276013 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/276640 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/277302 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/277975 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/278643 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/279295 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/279943 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/280559 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/281191 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/281812 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/282443 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/283066 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/283691 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/284282 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/284938 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/285561 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/286216 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/286780 (executing program) 2022/10/02 20:38:26 fetching corpus: 4997, signal 194783/286780 (executing program) 2022/10/02 20:38:29 starting 8 fuzzer processes 20:38:29 executing program 0: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x3d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r1 = signalfd(r0, &(0x7f0000000200)={[0x1]}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) socketpair(0x26, 0x1, 0x4, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d7f62dd57fd699fccb2c4c7ef9"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "93ac6a694c"}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x72}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000004) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x44000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r3) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa879}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf17}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r1) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4014) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ac0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x5, 0x5, 0x6, 0xc, 0x0, {0x0, r7}}, 0x8001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1d}, @NL80211_ATTR_SSID={0xd, 0x34, @random="c85aa4de475a438f0d"}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0x100, r4, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "f725c6e73682b15f"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x4}], "c2757db932f423b2"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x4, 0x2}], "67850923a2e1052e"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x81, 0x2}, {0x7f, 0x4}, {0x6, 0x1}, {0x2, 0x2}, {0x40, 0x5}, {0x3f, 0x2}, {0x11}, {0x1, 0x4}, {0x8, 0x4}, {0x0, 0x4}, {0xe5, 0x1}, {0x80}, {0x6, 0x2}, {0xd8, 0x3}, {0x1f, 0x6}, {0x8, 0x5}], "ae1d247ca3083cb2"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x4, 0x7}, {0x7f, 0x7}, {0x40, 0x6}, {0x5, 0x2}, {0xa7, 0x5}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x40, 0x3}, {0xff}, {0x2b, 0x1}, {0xc1, 0x6}, {0x3d, 0x3}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0x4}, {0x2, 0x7}], "d6d4386b355b9134"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x40, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0xc6, 0x2}, {0xfc, 0x6}, {0x0, 0x4}, {0x3}, {0x1, 0x6}, {0x81, 0x2}, {0x7f, 0x2}, {0xb8, 0x1}, {0x3}, {0x0, 0x1}], "a58476879e4480a0"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8, 0x3}, {0x74, 0x2}, {0x3f, 0x6}, {0x0, 0x3}, {0x1b, 0x3}, {0xf5, 0x2}, {0x1, 0x3}, {0x0, 0x3}, {0x7f, 0x7}, {0x8, 0x4}, {0x2, 0x6}, {0x7f, 0x1}, {0x1}, {}, {0x3, 0x6}, {0x2}, {0x4, 0x6}, {0x5, 0x7}], "1268966d56c4340b"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 20:38:29 executing program 1: chroot(&(0x7f0000000000)='./file0\x00') r0 = getegid() mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80080, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x7}}, {@huge_within_size}, {@gid={'gid', 0x3d, r0}}, {@huge_always}, {@mode={'mode', 0x3d, 0xc9}}], [{@seclabel}]}) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x414000, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) pidfd_send_signal(r2, 0x15, &(0x7f00000001c0)={0x40, 0x2, 0x80}, 0x0) r3 = epoll_create(0x6f16108) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000e, 0x50, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000240)) syz_io_uring_setup(0x7b2d, &(0x7f0000000280)={0x0, 0x30, 0x0, 0x0, 0xa4, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x2) pwritev(r3, &(0x7f00000017c0)=[{&(0x7f0000000400)="2a44c76a4f9bce90358cd3bc4e9407e3a8de56333e91bb28876e2555eeb99257669fa672a2789c107b8c289ccc48ec5e78a643e792a4846fa88be457352332a9e4f49384702f1999e23f17052eac677e46ae31897e962e412e8f70a3c4d5ce91817e6c81e5373c0283cbcb0f815f643fa8dc731b05a9be0f3326cbce30210cf8", 0x80}, {&(0x7f0000000480)="e9ac0611bb5489ff429cd78331b7d65f23d4639ce9919ab607b290ae6005e784c0ac0ea71d70ef5897d9687346d0a3e34e34226e56c6cce819d6841e236dae824aadc885f3a6319bf615f7e72957de745caf56092af0ee30fed002cbb9f25c0f419a0c90bcbaaf4b6a028751806b51ff530beb0a7d2bf01ca234c2f8eca93294fb2ffc1b5ebef3", 0x87}, {&(0x7f0000000540)="97d328ca00cfc7844513b7f06d7aaa6c35f6eb028db3776cfd75f38ed9c8c3fa06c866723b1e5aaa1040afda48de52aa87596d6b62c1cba17f8e7c7eaddbb53167c51e24dcb87ee78d93ad57aa3595e1f4238072daae7d0caff8be374ec5c9d89f32f7dc3ba7638cfc74c5eba24c1136a8c1464a4ea6278b49037eff0859777df35071d5e070b0e2ca762344444944cb0b12dff77049e36677cd6f12163157ae07e4abc476dcd33cfbf0d194301f48521c304332d96083d4b18257c964928ed53cd12ab7dec4fdf1748df192769cb3d91e2d5d", 0xd3}, {&(0x7f0000000640)="bc88f3c854901593b2e4cc7febe366229b5a5f70722a3fd9c4d7cd6a2ddc967de939baabafa4dca0f12473dfac3df5df5af722e7cde4d369ecdf8e7ffd17ad6669c095f26bf5eaf3b71663052fe44e21355d9e8733253c4c5161cf42a52983caa97294369072204d45f59d37e28dc3a05d2fb2b0a288b0c273ff0ae7ef63ec47081ab61ec93a2b67842ae9d8cb5ec80ded0ec8d87f2d5ca3b3836af7999682ad4adb290def52133f195922063aed8d3539cb0fb9ab0ae4608e9aaf9d34656864e1e0fc6358635c4a77f03389598d28f9c87995b8fbfe83baf62c7d99652931f8c10a78fd749d603fa0a7b75bd91f", 0xee}, {&(0x7f0000000740)="2c93c0b57d9533c2b0e1346c7b3ec771030230e17a92b9388b5d50e533fabdc31f25dd5aef471c4543932c84d36827cfaa017de06283d7b32c4a143bd1c0e5b10ca811717b8cf6777643964c5abf3f8c227c158dfe80ca7ee3c6b7d7db8b0916bfcac0e35a25", 0x66}, {&(0x7f00000007c0)="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", 0x1000}], 0x6, 0x2, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001840)={{0x1, 0x1, 0x18, r2, {0xee01, r0}}, './file0\x00'}) connect$inet6(r4, &(0x7f0000001880)={0xa, 0x4e24, 0x1, @loopback, 0x7}, 0x1c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000018c0)={0x50000000}) io_uring_enter(r4, 0x349f, 0x8b22, 0x0, &(0x7f0000001900)={[0x8]}, 0x8) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x2000) 20:38:29 executing program 3: r0 = socket$inet(0x2, 0x1, 0xc01) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xff, 0xd7, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x6d, 0x38, 0x2d1, 0xffff, 0x0, 0x20, 0x1, 0x0, 0x2, 0x2}, [{0x9c7733e60d010aca, 0x7f, 0xcaaf, 0x401, 0x0, 0xf, 0x7fff, 0x42b6}, {0x6, 0x10001, 0xfffffffd, 0x7, 0x3, 0x3, 0x2}], "7d412df4a4cf9855f863376deaccedc2f1e34398f08155d2decdfd3b26b444aed5550508718436bf6f412cf5b11f4e30d94b07d9dffd46356329e3bea54633542a1b040240a2e76ea54f787ef1e593121d506953e0533d036f3d873daf8c18a9b5f47e8b7cec6b0fde36336f807d9896b1be97003c633a595dfb2f23", ['\x00', '\x00', '\x00', '\x00']}, 0x4f4) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x87, [0x7, 0x10000, 0x40, 0x2, 0x6, 0x3], 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000540)=""/135}, &(0x7f0000000680)=0x78) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007340)=[{{&(0x7f00000006c0), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001940)=""/253, 0xfd}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/124, 0x7c}, {&(0x7f0000002ac0)=""/156, 0x9c}, {&(0x7f0000002b80)=""/106, 0x6a}, {&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/156, 0x9c}, {&(0x7f0000002d80)=""/161, 0xa1}, {&(0x7f0000002e40)=""/36, 0x24}], 0x9, &(0x7f0000002f40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000004480)=[{&(0x7f00000030c0)=""/149, 0x95}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/247, 0xf7}, {&(0x7f0000004280)=""/79, 0x4f}, {&(0x7f0000004300)=""/107, 0x6b}, {&(0x7f0000004380)=""/229, 0xe5}], 0x6, &(0x7f0000004500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000045c0)=""/137, 0x89}, {&(0x7f0000004680)=""/198, 0xc6}, {&(0x7f0000004780)=""/157, 0x9d}, {&(0x7f0000004840)=""/235, 0xeb}, {&(0x7f0000004940)=""/115, 0x73}, {&(0x7f00000049c0)=""/30, 0x1e}], 0x6, &(0x7f0000004a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000004b00)=@abs, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/56, 0x38}], 0x1, &(0x7f0000004c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000007200)=[{&(0x7f0000004d80)=""/128, 0x80}, {&(0x7f0000004e00)=""/128, 0x80}, {&(0x7f0000004e80)=""/204, 0xcc}, {&(0x7f0000004f80)=""/169, 0xa9}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/239, 0xef}, {&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/130, 0x82}], 0x8, &(0x7f0000007280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x6, 0x12040, &(0x7f00000074c0)) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000007500)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r10, &(0x7f0000007600)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000007640)={{0x1, 0x1, 0x18, r8, {0x7}}, './file0\x00'}) r11 = openat2(r9, &(0x7f0000007680)='./file0/file0\x00', &(0x7f00000076c0)={0x4000, 0x65, 0xb}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f00000077c0)={'filter\x00', 0x0, 0x3, 0x69, [0x6c, 0x1000, 0x400, 0x9, 0x400, 0x5], 0x0, &(0x7f0000007700), &(0x7f0000007740)=""/105}, &(0x7f0000007840)=0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000007880)={0x0, 0x2ab, 0x1000}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r12, 0x6, 0x21, &(0x7f0000007c80)=""/200, &(0x7f0000007d80)=0xc8) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000007dc0)=0x3, 0x4) mount$cgroup(0x0, &(0x7f0000007e00)='./file0\x00', &(0x7f0000007e40), 0x288016, &(0x7f0000007e80)={[{@noprefix}, {@clone_children}, {@cpuset_v2_mode}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r7}}]}) openat$sr(0xffffffffffffff9c, &(0x7f0000007f00), 0x581, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000007f40)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) bind$inet(r13, &(0x7f0000007f80)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) connect$inet(r9, &(0x7f0000007fc0)={0x2, 0x4e20, @loopback}, 0x10) 20:38:29 executing program 2: clock_gettime(0x5, &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) io_setup(0x1, &(0x7f0000000100)=0x0) io_getevents(r0, 0x1f, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_setup(0x2, &(0x7f0000000200)) clock_gettime(0x4, &(0x7f0000000240)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)=""/63, 0x3f}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000440)=""/155, 0x9b}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/67, 0x43}, {&(0x7f0000001880)=""/111, 0x6f}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/213, 0xd5}, {&(0x7f0000002a00)=""/250, 0xfa}], 0x8, &(0x7f0000002b80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000002c40)=""/154, 0x9a}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/55, 0x37}, {&(0x7f0000003d40)=""/152, 0x98}, {&(0x7f0000003e00)=""/135, 0x87}, {&(0x7f0000003ec0)=""/37, 0x25}, {&(0x7f0000003f00)=""/154, 0x9a}], 0x7}}, {{&(0x7f0000004040)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f00000040c0)=""/201, 0xc9}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004240), 0x6e, &(0x7f0000004440)=[{&(0x7f00000042c0)=""/149, 0x95}, {&(0x7f0000004380)=""/140, 0x8c}], 0x2, &(0x7f0000004480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x5, 0x12000, &(0x7f0000004680)) clock_gettime(0x3, &(0x7f00000046c0)) futex(&(0x7f0000004700)=0x2, 0x7, 0x2, &(0x7f0000004740)={0x77359400}, &(0x7f0000004780), 0x1) clock_gettime(0x0, &(0x7f0000004880)={0x0, 0x0}) pselect6(0x40, &(0x7f00000047c0)={0x5, 0x3, 0x9, 0x3, 0x80000000, 0x0, 0x6, 0x2}, &(0x7f0000004800)={0x1f, 0xf0eb, 0x5c62, 0x9, 0xa034, 0x10001, 0x200, 0x100000001}, &(0x7f0000004840)={0x7d3d, 0x1, 0x1ff, 0x7ff, 0x0, 0x0, 0xcb, 0x2843000000}, &(0x7f00000048c0)={r7, r8+10000000}, &(0x7f0000004940)={&(0x7f0000004900)={[0x7]}, 0x8}) futex(&(0x7f0000004980)=0x1, 0x2, 0x2, &(0x7f00000049c0)={0x0, 0x989680}, &(0x7f0000004a00)=0x1, 0x2) syz_io_uring_setup(0x290c, &(0x7f0000004a40)={0x0, 0x4f31, 0xdde575924dc1e478, 0x2, 0xe6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000004ac0)=0x0, &(0x7f0000004b00)) syz_io_uring_setup(0x1e1c, &(0x7f0000004b40)={0x0, 0xd504, 0x1, 0x3, 0x3b2, 0x0, r5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000004bc0), &(0x7f0000004c00)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000004dc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0xf5d68c216d672fe3, @fd=r4, 0x9, &(0x7f0000004d80)=[{&(0x7f0000004c40)=""/212, 0xd4}, {&(0x7f0000004d40)=""/31, 0x1f}], 0x2, 0x9, 0x1, {0x0, r11}}, 0x6) io_getevents(r0, 0x8, 0xa, &(0x7f0000004e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000004f40)={0x77359400}) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000004, 0x2010, r2, 0x0) syz_io_uring_setup(0x5117, &(0x7f0000004f80)={0x0, 0x7a61, 0x4, 0x0, 0x28e, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ef8000/0x4000)=nil, &(0x7f0000005000), &(0x7f0000005040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000005300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd=r6, 0x2, &(0x7f0000005280)=[{&(0x7f0000005080)=""/15, 0xf}, {&(0x7f00000050c0)=""/54, 0x36}, {&(0x7f0000005100)=""/113, 0x71}, {&(0x7f0000005180)=""/183, 0xb7}, {&(0x7f0000005240)=""/28, 0x1c}], 0x5, 0x16}, 0x2) [ 74.147768] audit: type=1400 audit(1664743109.477:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:38:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x81) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0c4}, 0xa0804) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4845) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x8010) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000840)={&(0x7f00000006c0), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x30}, 0x1, 0x0, 0x0, 0x80080}, 0x81) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x67}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c041}, 0x8040) 20:38:29 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f61}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x600, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xbb}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2df}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x8000) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0xcf, 0x2, 0x404, 0x3, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7, 0xef6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x5a, 0x5, 0x10000, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x700, 0x7800, 0x9, 0x24bb}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x66, 0x2, 0x1, 0x23, @private1, @empty, 0x7800, 0x80, 0x7, 0x4a8}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x29, 0xe2, 0x7f, 0x4, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x8, 0xff}}) r7 = accept(r0, &(0x7f0000000880)=@can={0x1d, 0x0}, &(0x7f0000000900)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x80a0, 0x10, 0x9, 0x4, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x65, 0x0, 0xd7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@generic={0x83, 0x3, 'z'}, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ac0)={0x6e8, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r5}, {0x178, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff21d}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2e44}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x401, 0x6, 0x4d, 0x400}, {0x8000, 0x7, 0x8d}, {0xe7, 0x4, 0x81, 0x2}, {0x7, 0x5, 0x9c, 0x311b92a3}, {0x9, 0x2, 0x1f, 0x5}, {0x7, 0x19, 0x0, 0x8000}, {0x8001, 0x6, 0x20, 0xfffffeff}, {0x400, 0x3, 0x5, 0x70}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001300)={'sit0\x00', &(0x7f0000001280)={'ip6_vti0\x00', r8, 0x4, 0x6, 0x7b, 0x4, 0x20, @private1, @local, 0x10, 0x40, 0x1000000, 0x3}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xec, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000005}, 0x4001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r7) getsockname$packet(r7, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000015c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001680)={'syztnl1\x00', &(0x7f0000001600)={'ip6gre0\x00', r10, 0x4, 0x7, 0x7, 0xf0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x700, 0x8000, 0x232}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000016c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r11, &(0x7f0000001940)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f0000001700)={0x1e8, r12, 0x0, 0x800, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e8}}, 0x4048810) 20:38:29 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4440}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1a}}}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9bb8fc105a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8c82557b8f"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xc, 0x4, "d5af088941ad1e20"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "08a36b7027"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xb, 0x4, "d3b3ef6467d977"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "fae3b8ec2f001de465"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "f25fe2dbed0efdd20dbe8801"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "eb8ea32b46"}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040850}, 0x40004) r1 = open(&(0x7f0000000280)='./file0\x00', 0x58820, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x61}, @void, @val={0xc, 0x99, {0x2, 0x70}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1f2, 0x40}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x18}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8a, 0x6f}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3e8, r0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_FRAME={0xba, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @initial, {0x3, 0xac1}}, 0x2800, 0x55, @default, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x5, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x7, 0xc6}}, [{0xdd, 0x7a, "b1cffca393581defff1788b70b1b367e82711f4215b74762e1aad84d0f2c4cfade1bc54e35c18540e9bc3f412e6ffb81b80f048047374ca112073df942b2cdac3f46f7ec39fb41136ed27af6a4d48f126697d988b942cf6d61dea45e402e4631b775ac5b7d05eda571358fe5ce5e0d548fe31047724638e83462"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2c5, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_b, @from_mac=@broadcast, {0xb, 0x39f}}, 0x80, 0x4e, @default, @void, @void, [{0xdd, 0xfd, "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"}, {0xdd, 0xc5, "94aaf59c10aab239b68e7f66e908527a11913c639c9542a8fbd91024b34ef3d29a8dbd9e75161ae2d45cfc9a4d21ba9fb789f69aad8be9aa61592cb05043944a92ce702d17c8428eff8a3ddfd670cf16162f07f4855e6ac1e6ed6a5f9c72ebe03b547ed4e2464f44f4ea70721bd47176152848ecceda46c678d2695855c52da7408df7d05caae23c8c3a27ca49cfe15abb23ee4b4e4f71ecb366e96017e969facc45673418c43c9148f92fc4398eaa034d5b51e386339fc680ad7defd94a09ca66785ab742"}, {0xdd, 0xbf, "fc7df642e2a8f4d4f11022de2e5e77dc8f043664b7f5797754daa5ae2b0b7dbdcb495d6792f35e031884652913a459ad39f1e863f51134c4b8b45a8c357297c2285f468cfc344ce407dfb1a7907744756ea0882ea1b584d61af4fdd715c4d237dabda31fb9e775d8ba60e5c43dea8678a2a1388963c09e411f6da00506322e70322c9abbb379ca234bab7d382192c8be2f85d5c6181e54991b151911a14a19babfbcd8383d47b55bbcb4eda27521e28891aea7d7808a69222e0577ea105d69"}, {0xdd, 0x1a, "9012811e6fca89a39818a088fb1f04dad2ed3850ed6092b305b9"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) rmdir(&(0x7f00000009c0)='./file0\x00') r3 = openat(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0x101000, 0x178) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0x7, 0x5}}, './file0\x00'}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000a80)={0x0, 0x4, 0x10000}) clone3(&(0x7f0000000d40)={0x100000, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), {0x40}, &(0x7f0000000b80)=""/235, 0xeb, &(0x7f0000000c80)=""/107, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r4}}, 0x58) mount$9p_rdma(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x3008018, &(0x7f0000000e80)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x101}}, {@sq={'sq', 0x3d, 0x401}}, {@sq={'sq', 0x3d, 0xffffffff80000000}}, {@sq={'sq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x1ff}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@fowner_gt={'fowner>', 0xee01}}]}}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x241e17c8, 0x5a}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r5 = openat(r1, &(0x7f00000010c0)='./file0\x00', 0x200000, 0x16b) mount$tmpfs(0x0, &(0x7f0000001100)='./file1\x00', &(0x7f0000001140), 0x100400, &(0x7f0000001180)={[{@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x32, 0x30, 0x32]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x6d, 0x31, 0x25, 0x38, 0x34]}}], [{@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}]}) fallocate(r5, 0x0, 0x8, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) linkat(r6, &(0x7f0000001240)='./file0\x00', r4, &(0x7f0000001280)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', &(0x7f0000001300)={0x10000, 0x34, 0x1c}, 0x18) 20:38:29 executing program 7: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000940)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x2, 0x0, 0x2e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="810c3f5db9f9a91d799bcdc7829960608ff98e6ed19ec59b9d584018936ea827b2f3e474cd9b2bc464dc4aec25d27522a4f9cd13decfb1cd21cca61164036a82a56be8be99ebe61d93628ee92ca493a8007d1e887bc05b02283cb528549d9b1645f1eeeb1781c35ec4ab3b2a3eb6e994aceee5290ccfeb0af2b4faf8a29c7633caa3c74afb055d5f", 0x88}, {&(0x7f0000000380)="84c26734036d36b2002c66637ffe15699ee33e7770f89e1939fc25b43c1fed9b71d4eb1697d6297b1ca8d922bdd274fad99a6875e4114df566b3427b1512f537ca346f2c833105b65852fbe7fe24989e3d859cf2debc4c060c6f762dce070704b9f72a2ea2db5b6e21f582f84258020e78ce60879ac621f2a69f556debfec97b94132b36af5ad280b2f5250b6eecd6cf5dfd53c9bb5e556e499a45f57156d909c78beb8515717f37456d197fd50a9dce2b2f83c0314f76f309c0a49380dff9fc230f50cf9fb61e8d4dfe30f590063e5059c3", 0xd2}, {&(0x7f0000000480)="ab0830a1864b9532394f83c7338f8306e53442034f074bc6416d4d65a8cd43f17da96c652a535fe1d3347e855d9361cb8bcee60dc4f34c6b38d7ffd2d4b05dd2549dc0fde7ab9aaed86c6a03aa504231b9a49f794e916679a112f19e4b8abf99d660e1b83d33f2ade6092842ade5d7a12ddc8c781c8fcd46737f43b4b5198d05c693a0b74ae2607e2459327f0325dbeb7a1e60a596a682bea7d7bc1499c596014e3ba65621acd6b7b5bd2da62798e3cf3fcf23f71813c4fe1948d29dc476bf8622", 0xc1}], 0x3, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0xe9d}}, @txtime={{0x18, 0x1, 0x3d, 0x264}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x8f53}}], 0x90}}, {{&(0x7f0000000680)=@in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)='@L', 0x2}, {&(0x7f0000000740)="7a681636dcb735f9caa90f9f7bccafa38c5a72371df0e7ea4bbc4a35db2181ae7a46e389c8150637738c80f9ab11e0cdc6c02b7667585d5073263cbe42aec2ea8e94bfa046668722a78fb7fb12ef2b25dd3c3054351e6b87bc89ee88283de561e101cbde2418a144f526887e7aef4f4e4604051bea1dfb3c7894cc1eae615e938ef815be7b95d38a9358", 0x8a}], 0x2, &(0x7f0000000840)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff646}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x720}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @mark={{0x14, 0x1, 0x24, 0x989}}, @mark={{0x14, 0x1, 0x24, 0xd80a}}], 0xf0}}], 0x2, 0x24040054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_STATX={0x15, 0x5, 0x0, r0, &(0x7f00000009c0), &(0x7f0000000ac0)='./file0\x00', 0x10, 0x6000}, 0xfffffffa) readlinkat(r3, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=""/20, 0x14) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000bc0), 0x94040, 0x0) r6 = openat(r5, &(0x7f0000000c00)='./file0\x00', 0x400, 0x1) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) close(r7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) close(r8) r9 = open$dir(&(0x7f0000000c80)='./file0\x00', 0x103000, 0x12) mknodat(r9, &(0x7f0000000cc0)='./file0\x00', 0x2, 0x20000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/module/nf_conntrack_ftp', 0x26c2, 0x1) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40), 0x42a0c0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r10, &(0x7f0000000d80)={0xffffffffffffffff, r11, 0x6}) [ 75.467663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.471248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.474431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.486062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.493500] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.494953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.504647] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.544883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.550743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.552495] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.555124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.556534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.559107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.561780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.563632] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.565539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.566878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.569910] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.580083] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.586369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.599783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.601217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.603607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.616666] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.620845] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.621695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.627724] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.634499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.635506] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.636544] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.638697] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.639811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.640810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.654505] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.656995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.658078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.659105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.661526] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.663350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.666732] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.667938] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.668391] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.669471] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.669876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.676916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.678296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.683167] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.685757] Bluetooth: hci6: HCI_REQ-0x0c1a [ 75.698628] Bluetooth: hci4: HCI_REQ-0x0c1a [ 77.552704] Bluetooth: hci0: command 0x0409 tx timeout [ 77.552764] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 77.616686] Bluetooth: hci3: command 0x0409 tx timeout [ 77.680473] Bluetooth: hci7: command 0x0409 tx timeout [ 77.680503] Bluetooth: hci2: command 0x0409 tx timeout [ 77.744395] Bluetooth: hci4: command 0x0409 tx timeout [ 77.744440] Bluetooth: hci5: command 0x0409 tx timeout [ 77.745281] Bluetooth: hci6: command 0x0409 tx timeout [ 79.600462] Bluetooth: hci0: command 0x041b tx timeout [ 79.665452] Bluetooth: hci3: command 0x041b tx timeout [ 79.728453] Bluetooth: hci2: command 0x041b tx timeout [ 79.729505] Bluetooth: hci7: command 0x041b tx timeout [ 79.793824] Bluetooth: hci6: command 0x041b tx timeout [ 79.794913] Bluetooth: hci5: command 0x041b tx timeout [ 79.795815] Bluetooth: hci4: command 0x041b tx timeout [ 81.648309] Bluetooth: hci0: command 0x040f tx timeout [ 81.712312] Bluetooth: hci3: command 0x040f tx timeout [ 81.776320] Bluetooth: hci7: command 0x040f tx timeout [ 81.776361] Bluetooth: hci2: command 0x040f tx timeout [ 81.840361] Bluetooth: hci4: command 0x040f tx timeout [ 81.840847] Bluetooth: hci5: command 0x040f tx timeout [ 81.841181] Bluetooth: hci6: command 0x040f tx timeout [ 82.928286] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 83.696302] Bluetooth: hci0: command 0x0419 tx timeout [ 83.761310] Bluetooth: hci3: command 0x0419 tx timeout [ 83.824286] Bluetooth: hci7: command 0x0419 tx timeout [ 83.824764] Bluetooth: hci2: command 0x0419 tx timeout [ 83.888336] Bluetooth: hci6: command 0x0419 tx timeout [ 83.889285] Bluetooth: hci5: command 0x0419 tx timeout [ 83.889718] Bluetooth: hci4: command 0x0419 tx timeout [ 87.472326] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 90.100771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.104441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.107094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.116184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.119908] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.120850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.125711] Bluetooth: hci1: HCI_REQ-0x0c1a [ 92.144354] Bluetooth: hci1: command 0x0409 tx timeout [ 94.192366] Bluetooth: hci1: command 0x041b tx timeout [ 96.240344] Bluetooth: hci1: command 0x040f tx timeout [ 98.288309] Bluetooth: hci1: command 0x0419 tx timeout [ 138.672481] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 140.865535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.869379] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.870811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.875952] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.879074] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 140.881364] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.887730] Bluetooth: hci6: HCI_REQ-0x0c1a [ 142.896413] Bluetooth: hci6: command 0x0409 tx timeout [ 144.944339] Bluetooth: hci6: command 0x041b tx timeout [ 146.992392] Bluetooth: hci6: command 0x040f tx timeout [ 149.040404] Bluetooth: hci6: command 0x0419 tx timeout 20:40:07 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x2, 0x81, 0x0, 0x9e, 0x0, 0x1, 0x108, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6f, 0x4, @perf_config_ext={0x7, 0xfa23}, 0x809, 0x1, 0x0, 0x1, 0x207, 0x80, 0x1, 0x0, 0x9, 0x0, 0x511}, 0x0, 0x9, r0, 0xb) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x25, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 20:40:07 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x8b5, &(0x7f00000011c0)={0x0, 0x3e9e, 0x1, 0x1, 0x236}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 20:40:07 executing program 3: r0 = socket$inet(0x2, 0x1, 0xc01) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xff, 0xd7, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x6d, 0x38, 0x2d1, 0xffff, 0x0, 0x20, 0x1, 0x0, 0x2, 0x2}, [{0x9c7733e60d010aca, 0x7f, 0xcaaf, 0x401, 0x0, 0xf, 0x7fff, 0x42b6}, {0x6, 0x10001, 0xfffffffd, 0x7, 0x3, 0x3, 0x2}], "7d412df4a4cf9855f863376deaccedc2f1e34398f08155d2decdfd3b26b444aed5550508718436bf6f412cf5b11f4e30d94b07d9dffd46356329e3bea54633542a1b040240a2e76ea54f787ef1e593121d506953e0533d036f3d873daf8c18a9b5f47e8b7cec6b0fde36336f807d9896b1be97003c633a595dfb2f23", ['\x00', '\x00', '\x00', '\x00']}, 0x4f4) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x87, [0x7, 0x10000, 0x40, 0x2, 0x6, 0x3], 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000540)=""/135}, &(0x7f0000000680)=0x78) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007340)=[{{&(0x7f00000006c0), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001940)=""/253, 0xfd}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/124, 0x7c}, {&(0x7f0000002ac0)=""/156, 0x9c}, {&(0x7f0000002b80)=""/106, 0x6a}, {&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/156, 0x9c}, {&(0x7f0000002d80)=""/161, 0xa1}, {&(0x7f0000002e40)=""/36, 0x24}], 0x9, &(0x7f0000002f40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000004480)=[{&(0x7f00000030c0)=""/149, 0x95}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/247, 0xf7}, {&(0x7f0000004280)=""/79, 0x4f}, {&(0x7f0000004300)=""/107, 0x6b}, {&(0x7f0000004380)=""/229, 0xe5}], 0x6, &(0x7f0000004500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000045c0)=""/137, 0x89}, {&(0x7f0000004680)=""/198, 0xc6}, {&(0x7f0000004780)=""/157, 0x9d}, {&(0x7f0000004840)=""/235, 0xeb}, {&(0x7f0000004940)=""/115, 0x73}, {&(0x7f00000049c0)=""/30, 0x1e}], 0x6, &(0x7f0000004a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000004b00)=@abs, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/56, 0x38}], 0x1, &(0x7f0000004c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000007200)=[{&(0x7f0000004d80)=""/128, 0x80}, {&(0x7f0000004e00)=""/128, 0x80}, {&(0x7f0000004e80)=""/204, 0xcc}, {&(0x7f0000004f80)=""/169, 0xa9}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/239, 0xef}, {&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/130, 0x82}], 0x8, &(0x7f0000007280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x6, 0x12040, &(0x7f00000074c0)) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000007500)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r10, &(0x7f0000007600)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000007640)={{0x1, 0x1, 0x18, r8, {0x7}}, './file0\x00'}) r11 = openat2(r9, &(0x7f0000007680)='./file0/file0\x00', &(0x7f00000076c0)={0x4000, 0x65, 0xb}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f00000077c0)={'filter\x00', 0x0, 0x3, 0x69, [0x6c, 0x1000, 0x400, 0x9, 0x400, 0x5], 0x0, &(0x7f0000007700), &(0x7f0000007740)=""/105}, &(0x7f0000007840)=0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000007880)={0x0, 0x2ab, 0x1000}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r12, 0x6, 0x21, &(0x7f0000007c80)=""/200, &(0x7f0000007d80)=0xc8) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000007dc0)=0x3, 0x4) mount$cgroup(0x0, &(0x7f0000007e00)='./file0\x00', &(0x7f0000007e40), 0x288016, &(0x7f0000007e80)={[{@noprefix}, {@clone_children}, {@cpuset_v2_mode}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r7}}]}) openat$sr(0xffffffffffffff9c, &(0x7f0000007f00), 0x581, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000007f40)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) bind$inet(r13, &(0x7f0000007f80)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) connect$inet(r9, &(0x7f0000007fc0)={0x2, 0x4e20, @loopback}, 0x10) 20:40:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014a00)) chroot(&(0x7f0000000040)='./file0\x00') 20:40:07 executing program 2: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="60010000dd0d953594bf1fd6c2c9538f3c37b8b76bf4c62e91ff95cf8b5dfc3a46b75631be7de0018b25b8f939945ca75c5842a14b2124f514f8a5ed0f000046b8ec07281d92952d89b34fedc29b5300000000000000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf250e0000001800078008000200060000000c00030002000000000000004400078008000200020000000c000400f9ffffffffffffff0c000300000000006400000008000100fcffffff08000100010000000800020008000000080002002a0e00003c0009800800020003000000080002000300000008000200400000000800020003000000080001000104000008000200460000000800010081ffffff580004801300010062726f6164636173742d6c696e6b00002c000780080003000180000008000200070000000800020003000000080004000300000008000200000000001400078008000300080000000800030006000000100002800400040008000100030000004c0006804800040067636d286165732900000000000000000000000000000000000000000000000020000000a27fcf2b63148c5ca55e33a3bc92796d5d374858a15e136184f08921f2d42cc8"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9a}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r3) r4 = io_uring_setup(0x454c, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r5, 0x0) sendfile(r2, r2, 0x0, 0x5f1) openat(r2, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) 20:40:07 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x6e5cc4c7f3ae46a5, &(0x7f0000000080)={@loopback}, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000040)={'syz_tun\x00'}) 20:40:07 executing program 4: ioprio_get$pid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r3 = getpid() pidfd_open(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) r4 = getpid() pidfd_open(r4, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="000127bd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r3, @ANYRES64=r1, @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="40dbf2d2a13b4a11aa357c7213914d4a37d60ca3c407d9cbdcc75de8f19a1c541b1035ca66007ee84dbe88ea55ef2c2ad712b1db9d788a6f55a03cee3a26b40010000000000000fd43eff9c4b38f1de9dd853d22a21c31fe3adb388b407f41caaf0c668e389716fd1a1ffcd24bbe83b2"], 0x84}, 0x1, 0x0, 0x0, 0x4008041}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/slab', 0x20100, 0x10) mq_notify(r5, &(0x7f0000000380)={0x0, 0x31, 0x0, @thr={&(0x7f0000000580)="9f018f02b0f0f92a0ca3ec6ab14e5ec31cd5eba675b624847732695f903981ab6aaf5643727736b026bc6b864299edfa4fb7b682393d58c6219eb09dcdfd43eb437b97624b1c0d3f59211b8ad97fdcdebe19d11c08be185538ff7c034e369c5e4415d57ed2c69bddcb82440471b951d3db54bea86967dd6d16b4af1a664732af0a84253e407641daa273fa756302b6abd98d23b68e3f4a831c30f0d22dd58a08ff41a131f027f5551ddb9d9135d9a52dff60d2f768c70d47591f1b539c231f997d27d0dbc026abf950e0db2094b315f8", &(0x7f0000000340)="61c5ec101ae65431627bcd01"}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) lseek(r6, 0x0, 0x4) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000680)=r7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) 20:40:07 executing program 7: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)='\x00', 0x1}, {&(0x7f0000000400)="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", 0x159}], 0x2, 0x7fffffc, 0x0) lseek(r0, 0x0, 0x4) sendmsg$802154_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="325a87", 0x3}}, 0x0) [ 172.540766] syz_tun: refused to change device tx_queue_len [ 172.544524] audit: type=1400 audit(1664743207.873:7): avc: denied { open } for pid=4449 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 172.546090] audit: type=1400 audit(1664743207.873:8): avc: denied { kernel } for pid=4449 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 172.550535] syz_tun: refused to change device tx_queue_len [ 172.561035] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 172.562603] ------------[ cut here ]------------ [ 172.562624] [ 172.562627] ====================================================== [ 172.562631] WARNING: possible circular locking dependency detected [ 172.562635] 6.0.0-rc7-next-20220930 #1 Not tainted [ 172.562641] ------------------------------------------------------ [ 172.562645] syz-executor.4/4450 is trying to acquire lock: [ 172.562652] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 172.562696] [ 172.562696] but task is already holding lock: [ 172.562698] ffff8880099f2820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 172.562725] [ 172.562725] which lock already depends on the new lock. [ 172.562725] [ 172.562728] [ 172.562728] the existing dependency chain (in reverse order) is: [ 172.562731] [ 172.562731] -> #3 (&ctx->lock){....}-{2:2}: [ 172.562745] _raw_spin_lock+0x2a/0x40 [ 172.562756] __perf_event_task_sched_out+0x53b/0x18d0 [ 172.562767] __schedule+0xedd/0x2470 [ 172.562782] schedule+0xda/0x1b0 [ 172.562795] futex_wait_queue+0xf5/0x1e0 [ 172.562808] futex_wait+0x28e/0x690 [ 172.562818] do_futex+0x2ff/0x380 [ 172.562827] __x64_sys_futex+0x1c6/0x4d0 [ 172.562837] do_syscall_64+0x3b/0x90 [ 172.562855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.562867] [ 172.562867] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 172.562881] _raw_spin_lock_nested+0x30/0x40 [ 172.562891] raw_spin_rq_lock_nested+0x1e/0x30 [ 172.562904] task_fork_fair+0x63/0x4d0 [ 172.562921] sched_cgroup_fork+0x3d0/0x540 [ 172.562935] copy_process+0x4183/0x6e20 [ 172.562946] kernel_clone+0xe7/0x890 [ 172.562956] user_mode_thread+0xad/0xf0 [ 172.562966] rest_init+0x24/0x250 [ 172.562977] arch_call_rest_init+0xf/0x14 [ 172.562995] start_kernel+0x4c6/0x4eb [ 172.563010] secondary_startup_64_no_verify+0xe0/0xeb [ 172.563024] [ 172.563024] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 172.563037] _raw_spin_lock_irqsave+0x39/0x60 [ 172.563048] try_to_wake_up+0xab/0x1930 [ 172.563061] up+0x75/0xb0 [ 172.563075] __up_console_sem+0x6e/0x80 [ 172.563090] console_unlock+0x46a/0x590 [ 172.563106] vprintk_emit+0x1bd/0x560 [ 172.563122] vprintk+0x84/0xa0 [ 172.563138] _printk+0xba/0xf1 [ 172.563149] regdb_fw_cb.cold+0x6c/0xa7 [ 172.563166] request_firmware_work_func+0x12e/0x240 [ 172.563185] process_one_work+0xa17/0x16a0 [ 172.563203] worker_thread+0x637/0x1260 [ 172.563219] kthread+0x2ed/0x3a0 [ 172.563233] ret_from_fork+0x22/0x30 [ 172.563245] [ 172.563245] -> #0 ((console_sem).lock){....}-{2:2}: [ 172.563258] __lock_acquire+0x2a02/0x5e70 [ 172.563275] lock_acquire+0x1a2/0x530 [ 172.563291] _raw_spin_lock_irqsave+0x39/0x60 [ 172.563302] down_trylock+0xe/0x70 [ 172.563316] __down_trylock_console_sem+0x3b/0xd0 [ 172.563332] vprintk_emit+0x16b/0x560 [ 172.563348] vprintk+0x84/0xa0 [ 172.563363] _printk+0xba/0xf1 [ 172.563373] report_bug.cold+0x72/0xab [ 172.563389] handle_bug+0x3c/0x70 [ 172.563405] exc_invalid_op+0x14/0x50 [ 172.563422] asm_exc_invalid_op+0x16/0x20 [ 172.563434] group_sched_out.part.0+0x2c7/0x460 [ 172.563452] ctx_sched_out+0x8f1/0xc10 [ 172.563468] __perf_event_task_sched_out+0x6d0/0x18d0 [ 172.563479] __schedule+0xedd/0x2470 [ 172.563492] schedule+0xda/0x1b0 [ 172.563505] futex_wait_queue+0xf5/0x1e0 [ 172.563516] futex_wait+0x28e/0x690 [ 172.563526] do_futex+0x2ff/0x380 [ 172.563535] __x64_sys_futex+0x1c6/0x4d0 [ 172.563545] do_syscall_64+0x3b/0x90 [ 172.563561] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.563573] [ 172.563573] other info that might help us debug this: [ 172.563573] [ 172.563576] Chain exists of: [ 172.563576] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 172.563576] [ 172.563591] Possible unsafe locking scenario: [ 172.563591] [ 172.563594] CPU0 CPU1 [ 172.563596] ---- ---- [ 172.563598] lock(&ctx->lock); [ 172.563604] lock(&rq->__lock); [ 172.563610] lock(&ctx->lock); [ 172.563616] lock((console_sem).lock); [ 172.563622] [ 172.563622] *** DEADLOCK *** [ 172.563622] [ 172.563624] 2 locks held by syz-executor.4/4450: [ 172.563631] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 172.563659] #1: ffff8880099f2820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 172.563685] [ 172.563685] stack backtrace: [ 172.563688] CPU: 1 PID: 4450 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 172.563701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 172.563709] Call Trace: [ 172.563712] [ 172.563716] dump_stack_lvl+0x8b/0xb3 [ 172.563735] check_noncircular+0x263/0x2e0 [ 172.563751] ? format_decode+0x26c/0xb50 [ 172.563767] ? print_circular_bug+0x450/0x450 [ 172.563784] ? simple_strtoul+0x30/0x30 [ 172.563799] ? format_decode+0x26c/0xb50 [ 172.563816] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 172.563834] __lock_acquire+0x2a02/0x5e70 [ 172.563855] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 172.563877] lock_acquire+0x1a2/0x530 [ 172.563893] ? down_trylock+0xe/0x70 [ 172.563910] ? lock_release+0x750/0x750 [ 172.563930] ? vprintk+0x84/0xa0 [ 172.563948] _raw_spin_lock_irqsave+0x39/0x60 [ 172.563959] ? down_trylock+0xe/0x70 [ 172.563975] down_trylock+0xe/0x70 [ 172.563990] ? vprintk+0x84/0xa0 [ 172.564007] __down_trylock_console_sem+0x3b/0xd0 [ 172.564024] vprintk_emit+0x16b/0x560 [ 172.564043] vprintk+0x84/0xa0 [ 172.564060] _printk+0xba/0xf1 [ 172.564071] ? record_print_text.cold+0x16/0x16 [ 172.564087] ? report_bug.cold+0x66/0xab [ 172.564104] ? group_sched_out.part.0+0x2c7/0x460 [ 172.564122] report_bug.cold+0x72/0xab [ 172.564141] handle_bug+0x3c/0x70 [ 172.564158] exc_invalid_op+0x14/0x50 [ 172.564176] asm_exc_invalid_op+0x16/0x20 [ 172.564188] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 172.564209] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 172.564221] RSP: 0018:ffff88803531f8f8 EFLAGS: 00010006 [ 172.564229] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 172.564237] RDX: ffff88803ecdb580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 172.564245] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 172.564252] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff8880099f2800 [ 172.564260] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 172.564270] ? group_sched_out.part.0+0x2c7/0x460 [ 172.564290] ? group_sched_out.part.0+0x2c7/0x460 [ 172.564310] ctx_sched_out+0x8f1/0xc10 [ 172.564329] __perf_event_task_sched_out+0x6d0/0x18d0 [ 172.564343] ? lock_is_held_type+0xd7/0x130 [ 172.564357] ? __perf_cgroup_move+0x160/0x160 [ 172.564367] ? set_next_entity+0x304/0x550 [ 172.564385] ? update_curr+0x267/0x740 [ 172.564403] ? lock_is_held_type+0xd7/0x130 [ 172.564417] __schedule+0xedd/0x2470 [ 172.564434] ? io_schedule_timeout+0x150/0x150 [ 172.564449] ? futex_wait_setup+0x166/0x230 [ 172.564463] schedule+0xda/0x1b0 [ 172.564478] futex_wait_queue+0xf5/0x1e0 [ 172.564490] futex_wait+0x28e/0x690 [ 172.564503] ? futex_wait_setup+0x230/0x230 [ 172.564516] ? wake_up_q+0x8b/0xf0 [ 172.564529] ? do_raw_spin_unlock+0x4f/0x220 [ 172.564548] ? futex_wake+0x158/0x490 [ 172.564564] ? fd_install+0x1f9/0x640 [ 172.564579] do_futex+0x2ff/0x380 [ 172.564590] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 172.564606] __x64_sys_futex+0x1c6/0x4d0 [ 172.564619] ? __x64_sys_futex_time32+0x480/0x480 [ 172.564632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 172.564646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 172.564661] do_syscall_64+0x3b/0x90 [ 172.564679] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.564692] RIP: 0033:0x7f228613ab19 [ 172.564700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 172.564711] RSP: 002b:00007f22836b0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.564721] RAX: ffffffffffffffda RBX: 00007f228624df68 RCX: 00007f228613ab19 [ 172.564729] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f228624df68 [ 172.564736] RBP: 00007f228624df60 R08: 0000000000000000 R09: 0000000000000000 [ 172.564743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f228624df6c [ 172.564750] R13: 00007ffe0e99716f R14: 00007f22836b0300 R15: 0000000000022000 [ 172.564762] [ 172.626370] WARNING: CPU: 1 PID: 4450 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 172.627053] Modules linked in: [ 172.627298] CPU: 1 PID: 4450 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 172.627900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 172.628727] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 172.629138] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 172.630480] RSP: 0018:ffff88803531f8f8 EFLAGS: 00010006 [ 172.630877] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 172.631403] RDX: ffff88803ecdb580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 172.631939] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 172.632476] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff8880099f2800 [ 172.633004] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 172.633550] FS: 00007f22836b0700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 172.634149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.634581] CR2: 00007fcd6417d004 CR3: 0000000035320000 CR4: 0000000000350ee0 [ 172.635104] Call Trace: [ 172.635302] [ 172.635480] ctx_sched_out+0x8f1/0xc10 [ 172.635787] __perf_event_task_sched_out+0x6d0/0x18d0 [ 172.636169] ? lock_is_held_type+0xd7/0x130 [ 172.636497] ? __perf_cgroup_move+0x160/0x160 [ 172.636836] ? set_next_entity+0x304/0x550 [ 172.637159] ? update_curr+0x267/0x740 [ 172.637468] ? lock_is_held_type+0xd7/0x130 [ 172.637798] __schedule+0xedd/0x2470 [ 172.638093] ? io_schedule_timeout+0x150/0x150 [ 172.638441] ? futex_wait_setup+0x166/0x230 [ 172.638767] schedule+0xda/0x1b0 [ 172.639036] futex_wait_queue+0xf5/0x1e0 [ 172.639350] futex_wait+0x28e/0x690 [ 172.639630] ? futex_wait_setup+0x230/0x230 [ 172.639954] ? wake_up_q+0x8b/0xf0 [ 172.640227] ? do_raw_spin_unlock+0x4f/0x220 [ 172.640569] ? futex_wake+0x158/0x490 [ 172.640862] ? fd_install+0x1f9/0x640 [ 172.641149] do_futex+0x2ff/0x380 [ 172.641420] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 172.641865] __x64_sys_futex+0x1c6/0x4d0 [ 172.642174] ? __x64_sys_futex_time32+0x480/0x480 [ 172.642536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 172.642933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 172.643322] do_syscall_64+0x3b/0x90 [ 172.643618] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.644003] RIP: 0033:0x7f228613ab19 [ 172.644283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 172.645664] RSP: 002b:00007f22836b0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.646250] RAX: ffffffffffffffda RBX: 00007f228624df68 RCX: 00007f228613ab19 [ 172.646818] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f228624df68 [ 172.647376] RBP: 00007f228624df60 R08: 0000000000000000 R09: 0000000000000000 [ 172.647905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f228624df6c [ 172.648462] R13: 00007ffe0e99716f R14: 00007f22836b0300 R15: 0000000000022000 [ 172.649018] [ 172.649207] irq event stamp: 790 [ 172.649475] hardirqs last enabled at (789): [] syscall_enter_from_user_mode+0x1d/0x50 [ 172.650204] hardirqs last disabled at (790): [] __schedule+0x1225/0x2470 [ 172.650849] softirqs last enabled at (776): [] __irq_exit_rcu+0x11b/0x180 [ 172.651511] softirqs last disabled at (771): [] __irq_exit_rcu+0x11b/0x180 [ 172.652167] ---[ end trace 0000000000000000 ]--- 20:40:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) lseek(r0, 0x0, 0x4) fchown(r0, 0x0, 0xee00) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323134393739343100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000e0f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000e0f4655fe0f4655fe0f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000e0f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000006b1710a600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000006f20934800000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332313439373934312f66696c65302f66696c653000000000000000000000000000000000000000000000afa6093f00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009270a1b300000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000070000000000000000000000000000000000000000000000000000000000000000000000000000000743fdfdf00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2efb56f000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x4cd}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) [ 172.685570] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 20:40:08 executing program 7: mq_unlink(&(0x7f0000000000)='\xc3*\'-(\'\x00') setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="690ada9526127fc9b4b0df8297dc147090684a53d7aee59d7ca5", 0x1a, 0x6}, {0x0, 0x0, 0x3}, {&(0x7f0000000600)="ca19a89209c131e7315acf0e268c1c9346f8fd582e129b42269c888ac666bde4ec9248d903d0ddbcccca88376da9318de64255c45652bb25f4b06213bbe0cc997b9d5cefd034898408607c5be3abab1a7ec2c48a888d9cf15b128a81f6df158c6e0e871975", 0x65, 0x8}], 0x803, &(0x7f0000000040)=ANY=[@ANYBLOB="646d6f64653d307830303030303030303030362c636865636b3d7374726963742c6d61703d61636f726e2c726f6f74636f6e746578013d73797361646d5f752c61707072616973652c30626662363330612d653100622d003333002d373362002d32660064646300002c686173682c66756e633df6c4dc040591749c68dad943524544535f434845434b2c736d61636b66737472616e736d7574653d002c0000000000009590a3f5fb36933feda86a1cfdd5b83e76b1217ae3429a431254c824322cdc9564844aefa75f5920ea961415bade938d2c246ec5b39deef47efffd455b4717ee587f38aef8d855ba208f87"]) setxattr$incfs_size(&(0x7f0000006700)='./file0\x00', &(0x7f0000006740), &(0x7f0000006780)=0xffff, 0x8, 0x0) setxattr$incfs_size(0x0, &(0x7f0000006800), &(0x7f0000006840)=0xe89f, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105842, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) lseek(r0, 0x0, 0x4) r1 = accept$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wg0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x28, 0x3, 0x5, 0x4, "8ddb17", 0x20, [0x4b6, 0x4, 0x9, 0x10000, 0x3f]}}) setxattr$trusted_overlay_opaque(&(0x7f0000006a00)='./file0\x00', 0x0, &(0x7f0000006a80), 0x2, 0x0) [ 172.700234] hrtimer: interrupt took 16601 ns [ 172.728613] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.748583] loop4: detected capacity change from 0 to 256 [ 172.757936] loop5: detected capacity change from 0 to 2048 20:40:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') pread64(r2, &(0x7f0000000180)=""/234, 0xea, 0x5) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 20:40:08 executing program 3: r0 = socket$inet(0x2, 0x1, 0xc01) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xff, 0xd7, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x6d, 0x38, 0x2d1, 0xffff, 0x0, 0x20, 0x1, 0x0, 0x2, 0x2}, [{0x9c7733e60d010aca, 0x7f, 0xcaaf, 0x401, 0x0, 0xf, 0x7fff, 0x42b6}, {0x6, 0x10001, 0xfffffffd, 0x7, 0x3, 0x3, 0x2}], "7d412df4a4cf9855f863376deaccedc2f1e34398f08155d2decdfd3b26b444aed5550508718436bf6f412cf5b11f4e30d94b07d9dffd46356329e3bea54633542a1b040240a2e76ea54f787ef1e593121d506953e0533d036f3d873daf8c18a9b5f47e8b7cec6b0fde36336f807d9896b1be97003c633a595dfb2f23", ['\x00', '\x00', '\x00', '\x00']}, 0x4f4) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x87, [0x7, 0x10000, 0x40, 0x2, 0x6, 0x3], 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000540)=""/135}, &(0x7f0000000680)=0x78) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007340)=[{{&(0x7f00000006c0), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001940)=""/253, 0xfd}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/124, 0x7c}, {&(0x7f0000002ac0)=""/156, 0x9c}, {&(0x7f0000002b80)=""/106, 0x6a}, {&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/156, 0x9c}, {&(0x7f0000002d80)=""/161, 0xa1}, {&(0x7f0000002e40)=""/36, 0x24}], 0x9, &(0x7f0000002f40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000004480)=[{&(0x7f00000030c0)=""/149, 0x95}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/247, 0xf7}, {&(0x7f0000004280)=""/79, 0x4f}, {&(0x7f0000004300)=""/107, 0x6b}, {&(0x7f0000004380)=""/229, 0xe5}], 0x6, &(0x7f0000004500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000045c0)=""/137, 0x89}, {&(0x7f0000004680)=""/198, 0xc6}, {&(0x7f0000004780)=""/157, 0x9d}, {&(0x7f0000004840)=""/235, 0xeb}, {&(0x7f0000004940)=""/115, 0x73}, {&(0x7f00000049c0)=""/30, 0x1e}], 0x6, &(0x7f0000004a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000004b00)=@abs, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/56, 0x38}], 0x1, &(0x7f0000004c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000007200)=[{&(0x7f0000004d80)=""/128, 0x80}, {&(0x7f0000004e00)=""/128, 0x80}, {&(0x7f0000004e80)=""/204, 0xcc}, {&(0x7f0000004f80)=""/169, 0xa9}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/239, 0xef}, {&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/130, 0x82}], 0x8, &(0x7f0000007280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x6, 0x12040, &(0x7f00000074c0)) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000007500)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r10, &(0x7f0000007600)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000007640)={{0x1, 0x1, 0x18, r8, {0x7}}, './file0\x00'}) r11 = openat2(r9, &(0x7f0000007680)='./file0/file0\x00', &(0x7f00000076c0)={0x4000, 0x65, 0xb}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f00000077c0)={'filter\x00', 0x0, 0x3, 0x69, [0x6c, 0x1000, 0x400, 0x9, 0x400, 0x5], 0x0, &(0x7f0000007700), &(0x7f0000007740)=""/105}, &(0x7f0000007840)=0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000007880)={0x0, 0x2ab, 0x1000}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r12, 0x6, 0x21, &(0x7f0000007c80)=""/200, &(0x7f0000007d80)=0xc8) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000007dc0)=0x3, 0x4) mount$cgroup(0x0, &(0x7f0000007e00)='./file0\x00', &(0x7f0000007e40), 0x288016, &(0x7f0000007e80)={[{@noprefix}, {@clone_children}, {@cpuset_v2_mode}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r7}}]}) openat$sr(0xffffffffffffff9c, &(0x7f0000007f00), 0x581, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000007f40)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) bind$inet(r13, &(0x7f0000007f80)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) connect$inet(r9, &(0x7f0000007fc0)={0x2, 0x4e20, @loopback}, 0x10) [ 172.777961] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 172.785717] audit: type=1400 audit(1664743208.114:9): avc: denied { write } for pid=4441 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 172.790873] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 20:40:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x2, 0x81, 0x0, 0x9e, 0x0, 0x1, 0x108, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6f, 0x4, @perf_config_ext={0x7, 0xfa23}, 0x809, 0x1, 0x0, 0x1, 0x207, 0x80, 0x1, 0x0, 0x9, 0x0, 0x511}, 0x0, 0x9, r0, 0xb) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x25, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 20:40:08 executing program 7: io_setup(0x3, &(0x7f0000000440)=0x0) r1 = io_uring_setup(0x46ca, &(0x7f0000000480)={0x0, 0x0, 0x2}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) [ 172.890189] EXT4-fs (loop5): unmounting filesystem. [ 172.903844] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. VM DIAGNOSIS: 20:40:08 Registers: info registers vcpu 0 RAX=00000000000103f6 RBX=ffff88806cf3d5e0 RCX=ffffc900007c5000 RDX=0000000000040000 RSI=ffffffff813bbaa7 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff8880314ef700 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e7abd R14=ffff88806cf3d5e8 R15=0000000000000001 RIP=ffffffff813bbaa9 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f379f928700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f37a24c6018 CR3=000000003530c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f37a24997c0 00007f37a24997c8 YMM02=0000000000000000 0000000000000000 00007f37a24997e0 00007f37a24997c0 YMM03=0000000000000000 0000000000000000 00007f37a24997c8 00007f37a24997c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803531f348 R8 =0000000000000001 R9 =ffff88803531f2d3 R10=ffffed1006a63e5a R11=0000000000000001 R12=0000000000000067 R13=ffffffff8765a960 R14=ffffffff8765a9b0 R15=ffffffff8765ac10 RIP=ffffffff823bb0c1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f22836b0700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcd6417d004 CR3=0000000035320000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f22862217c0 00007f22862217c8 YMM02=0000000000000000 0000000000000000 00007f22862217e0 00007f22862217c0 YMM03=0000000000000000 0000000000000000 00007f22862217c8 00007f22862217c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000