Warning: Permanently added '[localhost]:63621' (ECDSA) to the list of known hosts. 2022/10/03 16:02:56 fuzzer started 2022/10/03 16:02:56 dialing manager at localhost:35095 syzkaller login: [ 43.148281] cgroup: Unknown subsys name 'net' [ 43.260503] cgroup: Unknown subsys name 'rlimit' 2022/10/03 16:03:10 syscalls: 2215 2022/10/03 16:03:10 code coverage: enabled 2022/10/03 16:03:10 comparison tracing: enabled 2022/10/03 16:03:10 extra coverage: enabled 2022/10/03 16:03:10 setuid sandbox: enabled 2022/10/03 16:03:10 namespace sandbox: enabled 2022/10/03 16:03:10 Android sandbox: enabled 2022/10/03 16:03:10 fault injection: enabled 2022/10/03 16:03:10 leak checking: enabled 2022/10/03 16:03:10 net packet injection: enabled 2022/10/03 16:03:10 net device setup: enabled 2022/10/03 16:03:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 16:03:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 16:03:10 USB emulation: enabled 2022/10/03 16:03:10 hci packet injection: enabled 2022/10/03 16:03:10 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 16:03:10 802.15.4 emulation: enabled 2022/10/03 16:03:10 fetching corpus: 50, signal 25117/26960 (executing program) 2022/10/03 16:03:10 fetching corpus: 100, signal 34417/37982 (executing program) 2022/10/03 16:03:10 fetching corpus: 150, signal 40635/45830 (executing program) 2022/10/03 16:03:10 fetching corpus: 200, signal 47626/54353 (executing program) 2022/10/03 16:03:10 fetching corpus: 250, signal 52945/61182 (executing program) 2022/10/03 16:03:10 fetching corpus: 300, signal 60371/69955 (executing program) 2022/10/03 16:03:10 fetching corpus: 350, signal 64425/75440 (executing program) 2022/10/03 16:03:10 fetching corpus: 400, signal 70616/82883 (executing program) 2022/10/03 16:03:10 fetching corpus: 450, signal 73777/87445 (executing program) 2022/10/03 16:03:10 fetching corpus: 500, signal 77284/92200 (executing program) 2022/10/03 16:03:10 fetching corpus: 550, signal 79911/96133 (executing program) 2022/10/03 16:03:10 fetching corpus: 600, signal 82485/99994 (executing program) 2022/10/03 16:03:10 fetching corpus: 650, signal 84805/103582 (executing program) 2022/10/03 16:03:11 fetching corpus: 700, signal 88175/108059 (executing program) 2022/10/03 16:03:11 fetching corpus: 750, signal 90729/111825 (executing program) 2022/10/03 16:03:11 fetching corpus: 800, signal 97367/119168 (executing program) 2022/10/03 16:03:11 fetching corpus: 850, signal 100122/123038 (executing program) 2022/10/03 16:03:11 fetching corpus: 900, signal 102912/126866 (executing program) 2022/10/03 16:03:11 fetching corpus: 950, signal 106120/131032 (executing program) 2022/10/03 16:03:11 fetching corpus: 1000, signal 107717/133742 (executing program) 2022/10/03 16:03:12 fetching corpus: 1050, signal 110055/137074 (executing program) 2022/10/03 16:03:12 fetching corpus: 1100, signal 111084/139254 (executing program) 2022/10/03 16:03:12 fetching corpus: 1150, signal 112379/141623 (executing program) 2022/10/03 16:03:12 fetching corpus: 1200, signal 114221/144444 (executing program) 2022/10/03 16:03:12 fetching corpus: 1250, signal 115677/146955 (executing program) 2022/10/03 16:03:12 fetching corpus: 1300, signal 117551/149762 (executing program) 2022/10/03 16:03:12 fetching corpus: 1350, signal 118618/151871 (executing program) 2022/10/03 16:03:12 fetching corpus: 1400, signal 120318/154518 (executing program) 2022/10/03 16:03:12 fetching corpus: 1450, signal 122217/157263 (executing program) 2022/10/03 16:03:12 fetching corpus: 1500, signal 123535/159511 (executing program) 2022/10/03 16:03:13 fetching corpus: 1550, signal 126387/162966 (executing program) 2022/10/03 16:03:13 fetching corpus: 1600, signal 127694/165168 (executing program) 2022/10/03 16:03:13 fetching corpus: 1650, signal 129574/167831 (executing program) 2022/10/03 16:03:13 fetching corpus: 1700, signal 131493/170537 (executing program) 2022/10/03 16:03:13 fetching corpus: 1750, signal 133384/173112 (executing program) 2022/10/03 16:03:13 fetching corpus: 1800, signal 134146/174809 (executing program) 2022/10/03 16:03:13 fetching corpus: 1850, signal 135745/177170 (executing program) 2022/10/03 16:03:13 fetching corpus: 1900, signal 137451/179599 (executing program) 2022/10/03 16:03:13 fetching corpus: 1950, signal 139154/181997 (executing program) 2022/10/03 16:03:14 fetching corpus: 2000, signal 141215/184569 (executing program) 2022/10/03 16:03:14 fetching corpus: 2050, signal 142465/186563 (executing program) 2022/10/03 16:03:14 fetching corpus: 2100, signal 143493/188369 (executing program) 2022/10/03 16:03:14 fetching corpus: 2150, signal 144749/190329 (executing program) 2022/10/03 16:03:14 fetching corpus: 2200, signal 146591/192711 (executing program) 2022/10/03 16:03:14 fetching corpus: 2250, signal 148376/195016 (executing program) 2022/10/03 16:03:14 fetching corpus: 2300, signal 149430/196751 (executing program) 2022/10/03 16:03:14 fetching corpus: 2350, signal 150236/198341 (executing program) 2022/10/03 16:03:15 fetching corpus: 2400, signal 151659/200332 (executing program) 2022/10/03 16:03:15 fetching corpus: 2450, signal 153057/202321 (executing program) 2022/10/03 16:03:15 fetching corpus: 2500, signal 154203/204108 (executing program) 2022/10/03 16:03:15 fetching corpus: 2550, signal 155765/206144 (executing program) 2022/10/03 16:03:15 fetching corpus: 2600, signal 156764/207796 (executing program) 2022/10/03 16:03:16 fetching corpus: 2650, signal 157399/209159 (executing program) 2022/10/03 16:03:16 fetching corpus: 2700, signal 158599/210903 (executing program) 2022/10/03 16:03:16 fetching corpus: 2750, signal 159462/212410 (executing program) 2022/10/03 16:03:16 fetching corpus: 2800, signal 160393/213999 (executing program) 2022/10/03 16:03:17 fetching corpus: 2850, signal 161126/215374 (executing program) 2022/10/03 16:03:17 fetching corpus: 2900, signal 162201/217026 (executing program) 2022/10/03 16:03:17 fetching corpus: 2950, signal 163302/218601 (executing program) 2022/10/03 16:03:17 fetching corpus: 3000, signal 164017/219970 (executing program) 2022/10/03 16:03:17 fetching corpus: 3050, signal 165847/222022 (executing program) 2022/10/03 16:03:17 fetching corpus: 3100, signal 167583/223981 (executing program) 2022/10/03 16:03:18 fetching corpus: 3150, signal 168238/225261 (executing program) 2022/10/03 16:03:18 fetching corpus: 3200, signal 169036/226636 (executing program) 2022/10/03 16:03:18 fetching corpus: 3250, signal 169733/227919 (executing program) 2022/10/03 16:03:18 fetching corpus: 3300, signal 170447/229217 (executing program) 2022/10/03 16:03:18 fetching corpus: 3350, signal 171195/230498 (executing program) 2022/10/03 16:03:18 fetching corpus: 3400, signal 171846/231753 (executing program) 2022/10/03 16:03:18 fetching corpus: 3450, signal 173077/233404 (executing program) 2022/10/03 16:03:18 fetching corpus: 3500, signal 174313/234924 (executing program) 2022/10/03 16:03:19 fetching corpus: 3550, signal 174726/235999 (executing program) 2022/10/03 16:03:19 fetching corpus: 3600, signal 175247/237116 (executing program) 2022/10/03 16:03:19 fetching corpus: 3650, signal 175828/238300 (executing program) 2022/10/03 16:03:19 fetching corpus: 3700, signal 176921/239730 (executing program) 2022/10/03 16:03:19 fetching corpus: 3750, signal 177747/241030 (executing program) 2022/10/03 16:03:19 fetching corpus: 3800, signal 178529/242271 (executing program) 2022/10/03 16:03:19 fetching corpus: 3850, signal 179023/243334 (executing program) 2022/10/03 16:03:20 fetching corpus: 3900, signal 179943/244608 (executing program) 2022/10/03 16:03:20 fetching corpus: 3950, signal 180721/245833 (executing program) 2022/10/03 16:03:20 fetching corpus: 4000, signal 181291/246881 (executing program) 2022/10/03 16:03:20 fetching corpus: 4050, signal 181963/247979 (executing program) 2022/10/03 16:03:20 fetching corpus: 4100, signal 182775/249121 (executing program) 2022/10/03 16:03:20 fetching corpus: 4150, signal 183185/250121 (executing program) 2022/10/03 16:03:20 fetching corpus: 4200, signal 183785/251207 (executing program) 2022/10/03 16:03:21 fetching corpus: 4250, signal 184113/252136 (executing program) 2022/10/03 16:03:21 fetching corpus: 4300, signal 185298/253451 (executing program) 2022/10/03 16:03:21 fetching corpus: 4350, signal 185788/254480 (executing program) 2022/10/03 16:03:21 fetching corpus: 4400, signal 186276/255528 (executing program) 2022/10/03 16:03:21 fetching corpus: 4450, signal 186779/256528 (executing program) 2022/10/03 16:03:21 fetching corpus: 4500, signal 187483/257591 (executing program) 2022/10/03 16:03:21 fetching corpus: 4550, signal 188510/258812 (executing program) 2022/10/03 16:03:22 fetching corpus: 4600, signal 190195/260265 (executing program) 2022/10/03 16:03:22 fetching corpus: 4650, signal 191345/261510 (executing program) 2022/10/03 16:03:22 fetching corpus: 4700, signal 191755/262404 (executing program) 2022/10/03 16:03:22 fetching corpus: 4750, signal 192236/263350 (executing program) 2022/10/03 16:03:22 fetching corpus: 4800, signal 192552/264228 (executing program) 2022/10/03 16:03:22 fetching corpus: 4850, signal 193057/265148 (executing program) 2022/10/03 16:03:23 fetching corpus: 4900, signal 193858/266195 (executing program) 2022/10/03 16:03:23 fetching corpus: 4950, signal 194396/267120 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/267939 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/268668 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/269382 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/270133 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/270874 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/271557 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/272260 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/272950 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/273696 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/274403 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/275137 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/275851 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/276604 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/277314 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/278058 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/278802 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/279539 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/280216 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/280911 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/281685 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/282434 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/283163 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/283876 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/284608 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/285320 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/286093 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/286804 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/287558 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/288318 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/289034 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/289766 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/290498 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/291259 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/291941 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/292669 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/293359 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/294101 (executing program) 2022/10/03 16:03:23 fetching corpus: 5000, signal 194783/294829 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/295581 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/296326 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/297067 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/297828 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/298562 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/299302 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/300018 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/300734 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/301501 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/302221 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/302905 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/303637 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/304390 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/305105 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/305125 (executing program) 2022/10/03 16:03:24 fetching corpus: 5000, signal 194783/305125 (executing program) 2022/10/03 16:03:26 starting 8 fuzzer processes 16:03:26 executing program 0: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/4096) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001000)=0x800) r0 = signalfd(0xffffffffffffffff, &(0x7f0000001040)={[0x3]}, 0x8) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000001080)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000010c0)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000001100)={0x8, 0x4, 0x49cd, 0x1000, 0xf87, 0xffc1}) ioctl$TCSBRKP(r0, 0x5425, 0xffffffffffff0000) r1 = memfd_secret(0x80000) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001140)={'bridge0\x00'}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001180), 0x20000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000011c0)) r3 = epoll_create(0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200)={0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000001280)={0x2, 0x1, 0x40, 0x8, r4}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000012c0), 0x80042, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000001300)={0x8, 0x7f, 0x1}) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x38, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10000) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001480)) 16:03:26 executing program 1: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x44) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000180)={0x0, 0x0, @status={[0x40, 0x80000001, 0x0, 0x0, 0xc1b, 0x3]}, [0x0, 0x1ff, 0x1000, 0x6, 0x40, 0x6, 0x2, 0x55, 0x2, 0x400, 0x78, 0x401, 0x0, 0x5, 0x162a00000000000, 0x1, 0xfffffffffffffa3f, 0xfffffffffffffffa, 0x7, 0x9, 0x9, 0x200, 0x80000001, 0x3f, 0x2, 0x1, 0x10d7, 0x3ff, 0xcd2, 0x9, 0x800, 0x3f, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7, 0x7ff, 0x6, 0xffffffffffff6b7c, 0x8, 0xc2, 0x6, 0x8, 0x6, 0xc346, 0x60, 0xf9e1, 0xfffffffffffffffe, 0x7f, 0x1, 0x5, 0xdb, 0x7f, 0x0, 0xad7d, 0x6, 0x2, 0x2, 0x5, 0x10000, 0xfffffffffffffffd, 0x1]}) r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000bc0)) link(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)='./file1\x00') ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000c80)="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") ioctl$FIOCLEX(r5, 0x5451) mount$9p_rdma(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0xf393d55d90fbd3b, &(0x7f0000000e40)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq}, {@timeout={'timeout', 0x3d, 0x9b}}, {}, {@rq={'rq', 0x3d, 0x48000000000}}, {@sq={'sq', 0x3d, 0x2}}, {@common=@access_uid={'access', 0x3d, r3}}, {@common=@cache_mmap}, {@sq={'sq', 0x3d, 0x84c3}}], [{@appraise}, {@audit}, {@dont_measure}, {@audit}, {@subj_user={'subj_user', 0x3d, '!'}}]}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000f40), 0x20000) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000f80)={0xffff, 0xfffffffffffffffb, 0x5, 0x0, 0x0, [{{r5}, 0x80000000}, {{r4}, 0x3}, {{r6}, 0xf61}, {{r4}, 0x8001}, {{r2}, 0x1a899d6}]}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000010c0)={'syztnl0\x00', &(0x7f0000001040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf1, 0x3, 0x5a, @private1, @mcast2, 0x700, 0x40, 0xfffffffe, 0x5}}) unlink(&(0x7f0000001100)='./file0\x00') r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001140), 0x3, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000001180)=0x5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x440d4}, 0x20044000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000001340)) 16:03:26 executing program 3: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x801) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0xe04, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1b, 0x401, @l2={'eth', 0x3a, 'hsr0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x240000d4}, 0x8080) recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)=""/31, 0x1f}], 0x2, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x70}, 0x0) r3 = openat(r0, &(0x7f0000000340)='./file0\x00', 0x103000, 0x20) r4 = syz_mount_image$nfs4(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000400)="df1d74e76958176dd1297be26ba96190d8", 0x11, 0x7fffffff}, {&(0x7f0000000440)="d744364ca2639b9f844a86352f3539cdcc8a9eaae34a493e412c7aa79d5189f274a22b5f63d03931922e74dfba40188695b1144fbc42acf0d7a6d52728186a6106851f119eee95d13f889feb2ba82d949729d335d94de52443302db1e166835b772a81d477453c1f448cb64812b86ce19d038913b8b6bc3f42166f5058a3dd3a132b6000053a2a470efa60cddb33475f47975e90d64ab88d036ad0c297699a69259666dd791ff699925cbd0e7f780079ba48607bf021eedb", 0xb8, 0x1}, {&(0x7f0000000500)="17e403eb310601cca0cb95c3cb39a5fffab429d38697d11a5122be0d56f6e89efeb3d178e53ed614400c537b6e0deca2bc0319a13dbd9443a939ee0919b0ba6e0271d0ca76699ec0c6766ebda6e84dcdd5e12e08c3b7debbb6dc4e73831a5cb97667d9bca09b4f7bfd760eae535a5bce0b25c0b25a2022163aa8b92cbb0cba25cc43f6a8e62d415ead0f83e033ece30d46d145ad", 0x94, 0x7}, {&(0x7f00000005c0)="2f161d1c3228d90b966480d452491f1d360c262a61149bc35f6b3f020b7232f23dadd14aef9e2c118c36d786020ffa4b2d42cc22f6b8786b7b36b6018f39ebc8bf0ae73209549b51c605154a884c1e8f0ee6eddb380c138264c317b8528fe2c1a65db86c987985e8558964ca91c1a2cca7126c4f304af0d6d0bd45d0d2f7f48b9a4b2a9da0f922f1328d68c3a9b12a3e3ea1be5fd7dcd579f12ac57a26f99f1bab17011eac6a55b7b6e7f7909ea6b83cdbbce11a585f204d1b3cbd22618f80930264a97c6c1930b74df85024762f3a5e", 0xd0}], 0x64c01, &(0x7f0000000740)={[{'eth'}, {'eth'}, {'eth'}, {}], [{@appraise_type}, {@euid_gt={'euid>', r2}}, {@euid_lt={'euid<', r2}}, {@pcr={'pcr', 0x3d, 0xf}}, {@pcr={'pcr', 0x3d, 0x38}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'hsr0\x00'}}]}) open_tree(r4, &(0x7f0000000840)='./file0\x00', 0x80100) openat(r1, &(0x7f0000000880)='./file0\x00', 0x200080, 0x40) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x70}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0xcdfba451b1bfb85f}, {0x48, 0x1}, {0x12}, {0x48, 0x1}, {0x9}, {0x12}, {0x24, 0x1}, {0x60}, {0x6, 0x1}, {0x48}, {0x5}, {0x3, 0x1}, {0x1b, 0x1}, {0x3}, {0x1b, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0xc, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x6c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r7 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0xa0000, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000c00)) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) futimesat(r0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000cc0)={{0x0, 0xea60}, {r8, r9/1000+10000}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400}, 0x1050) fallocate(0xffffffffffffffff, 0x18, 0x7, 0x800) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) futex(&(0x7f0000000e00)=0x2, 0xa, 0x1, &(0x7f0000000e80)={r10, r11+60000000}, &(0x7f0000000ec0)=0x1, 0x2) utimes(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={{}, {0x77359400}}) [ 72.946974] audit: type=1400 audit(1664813006.624:6): avc: denied { execmem } for pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:03:26 executing program 2: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) r1 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1000008, 0x11, 0xffffffffffffffff, 0x421be000) r3 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffa000/0x1000)=nil) shmat(r3, &(0x7f0000ffa000/0x6000)=nil, 0x0) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget(0x1, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r4, &(0x7f0000ffa000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff3000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff4000/0x3000)=nil) 16:03:26 executing program 4: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40004) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x20000000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xdbd1}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1c0, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xb4, 0x45, "e500b28d87e3acf464fe9d99d3c54d2b953fceee274240beeceeac8057581c3c219ad794ecd4eb3efff4c40951378aea0490fc274eb73d722096167228029a605bc7f72cb09fcb050c5ea3ed468624963f1dc7be386c6fdd5150c6a2330f70c5fb2d497e52ff5f79b128113861945de17d3182f5d642add014f80baa4e755dbacacea4749dce43f41460edd52c610349cd268cc2a96d4322fe8c03b658eedb43c9545103fa767a00ccac141f43aa4343"}, @NL80211_ATTR_TESTDATA={0xf8, 0x45, "05259d9aa0050d18e2b76623cded9af891c5784f006d360c4d6d48a66071a54ff670fe2199a04ae1f2c3c9f748e5e1cbee0fd97c96df448f8cf0bd8dd823cd8d8a70ea1ea56ca115fed50ca1a92a9846a76173c4fb991a085604ddd9bc007702111b5ccae76e337bdece5b8dc23d4a6557cbb35a611cfa673eb5505d50864067707c6599f3f023ebe24105ce6c165ef9dbd8beff262c7cb9e52c4b5ee06bfb06dac30fe722b4286364c4d097b8a1325ad0c26e232faef12e9076ffa7ed4bb0280f93b928c69ffa0c4145b320d3053f4625973fc13ef09faa9d54b18a6188ac555f1430adde655adce55ce518fcca570a9c442348"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1e4, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xac, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a49a88b57e94dc6ad395923c2137d593"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4a93aa1ab64031344ebdde051b8caf91"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cddce94951740c70f7033394cf07c4d1ed7d648fe00d4ee7329f895841725193"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ad81f579768ff9049e85e0e37218bcb1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "11d63cda1f9c670e887e3218d784f645d5b04722bd7cb9452d553367f2390bf8"}]}, @NL802154_ATTR_SEC_KEY={0x6c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eb7f722479acd63437c6e8ee94eaebc08b546ec7ecd0d041801a7f2ce8a9d455"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6da629d2d4e3af159e3640cd4a63d1f6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "442b0e74e904e53877f595584de8674f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a75c64e119d705b6fdba1588f3703044"}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "225980056b61306b1a4a31f0b1e5b2bfee7432b569a70fb2e0402d8729f32fb3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8753ef143293c4ec6d4d47a5e9fd636a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "715744ea87c6dbd0463b3dcc1713389eee45c4bc0e615d7c418f18cca77c6f56"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "698fae3954ae49ce6160a9f7201d9163"}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x148, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e2fa9eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b6bd88f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57779e6c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x124029e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x134d4257}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x724babed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e68ad80}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x5) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r2, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf9ed, 0x38}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x31}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3dcb}]}, 0x40}, 0x1, 0x0, 0x0, 0x48811}, 0x80) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000cc0), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8091}, 0x20000040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020011}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x120, 0x0, 0x220, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x408c1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 16:03:26 executing program 5: ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x1) ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000000)={0xac, 0x46, 0xf4, 0x8}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x3f, 0x6cc1, 0x738, 0x0, 0x8374}, {0x101, 0x0, 0xd9, 0x6, 0x5, 0x1}], ['\x00']}) write$P9_RRENAMEAT(r0, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x640040, 0x0) r1 = signalfd4(r0, &(0x7f0000000200)={[0x9]}, 0x8, 0x80800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000000, 0x40010, r1, 0x8000000) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000b, 0x40010, r1, 0x0) r3 = syz_io_uring_complete(r2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000007c0)={0x0, {{0x2, 0x4e22, @remote}}, 0x1, 0x4, [{{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @remote}}]}, 0x290) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f0000000ac0)={0x36, 0x3, 0x3, 0x5, 0x0, 0x8}) pread64(0xffffffffffffffff, &(0x7f0000001540)=""/196, 0xc4, 0xc3) r5 = syz_mount_image$vfat(&(0x7f0000001640), &(0x7f0000001680)='./file0\x00', 0x2, 0x1, &(0x7f0000001740)=[{&(0x7f00000016c0)="d35f5e2555646247f8e526457b74873bb46a3a19e04fbd010c6533a939a1791e9d4e7245266d6cbba19fed8d991e8351b3b4b2bab91cdac7ddb9a9e6ee47385af7b64e72b2db4011a0c4f9f6fcc8836c70fa8deadd64a5a0b4744c374983decb22a5a6bc", 0x64, 0x5b59}], 0x8008, &(0x7f0000001780)={[{@numtail}, {}, {@nonumtail}, {@rodir}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-!&):\xe6'}}, {@euid_lt}, {@appraise}]}) openat(r5, &(0x7f0000001800)='./file0\x00', 0x204401, 0x103) openat$incfs(0xffffffffffffffff, &(0x7f0000001880)='.log\x00', 0x10d000, 0x0) 16:03:26 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0xd, 0x7, 0x2, 0x0, 0x0, [{{r0}}, {{r2}, 0x380000000000000}]}) r3 = dup2(0xffffffffffffffff, r1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = dup(r4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x3, 0x36c7}) write$cgroup_freezer_state(r5, &(0x7f00000001c0)='FROZEN\x00', 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"2f51f3779ebcd80d0713eb116be57150", 0x0, 0x0, {0x9, 0x1000}, {0x4, 0x5}, 0x7, [0x401, 0x2, 0xffff, 0x7a36, 0x4, 0xfff, 0xfffffffffffffff9, 0x5da, 0xb0, 0x7ec, 0x93e3, 0x7, 0x3, 0x80000001, 0x6, 0x1]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000300)) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000340)={{r6}, "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"}) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000001380)) r8 = dup(0xffffffffffffffff) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000013c0)={0x5, 0x1, 0x5}) 16:03:26 executing program 7: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x7) r1 = getpgid(r0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x21, 0x37, 0x1, {0x2, 0x40, 0x100000001, r1, 0x3, ':}\xec'}}, 0x21) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) clone3(&(0x7f0000000340)={0x1000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0xd}, &(0x7f0000000140)=""/136, 0x88, &(0x7f0000000200)=""/161, &(0x7f0000000300)=[r0, r1, r0, r0, r0, r0, r1, r2], 0x8}, 0x58) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000003c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000400)={0x9, 0xfff, 0x2, 0x9, 0x3, [0x81, 0x5, 0x8000, 0x2]}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x5, 0x4, 0x3, 0x5, 0x0, 0x4, 0x42, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x1000, 0x4}, 0x10090, 0x3f, 0x2, 0x1, 0x34f2, 0x0, 0x3, 0x0, 0x2, 0x0, 0x333b}, r4, 0x4, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x115002, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000500)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000540)='map_files\x00') ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000640)={r5, 0x3, 0x80, 0x40}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x5, 0x6, 0x5, 0x1f, 0x0, 0xa, 0x80020, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1c85, 0x5, @perf_bp={&(0x7f0000000580), 0x6}, 0x0, 0x10000, 0x3522, 0x0, 0xfffffffffffffffc, 0x3ff, 0xe9, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff9f}, r2, 0xd, r8, 0x0) fchdir(r8) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0xe06, 0x7, 0x6, 0x8001, 0xfffa, 0x2}) r10 = accept4(r8, 0x0, &(0x7f0000000700), 0x80000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f0000000740)={0x3, "782b5094515f5660e431b6fbe17bfd88dc9198cd52d60710cc53b647b6f750617851e58cbe9fbc3b545fd0b49101c645c604cf95eb5cdc2fcdf664bf3679fd5fb4ed7fbe4301f6cafe62d33667695961a11fe542776a7babaeee61e391ee6ec2da76d4464afa2c5e008b7ae49378b32d629422c2db8a4f00f4d0dbe65ee9026a79b54484fd7c8cf9a3699ea5b6c57d98a87a4254570e06fd0ddbd39072ccb0f6106654b92ae0b7ec577a2582e16cc3e85904aa8133374754c48f3f987275b12b3a97da3bcb82ce312b20cac49d46ce77939803541938afed59f44bfa7471a2de0ee166aebc8ab8ee117aac747e267aedd20b453d299fabf6a90f8c102ff001f19318bb5e7749890a7fa4cd897e02d800f3b3025fb253ae55a871615e553f7d6e708575f61dbd6a6c321c042080a95d246098ebf3673cad34d7b857816e3a1a0a793d17e9568011edf9646717d5982c01a81a9dcafd7852be66a0877afa86bf338151009a8231bc31a9b37f2c3eebe4f940ef626b0b522c65484805f5db7863e20c8b84b84437828d28fe74b93038637a760947b66956f73ca80237326d1e3faf685c9bcafb4b7dd3aca4b191c84ca78489a538d4c1939e6badaf5afac5cdf19c49b2ee9b66c81369616fc2a677745b8f08e8a30d875389520df07490156e9a5b39064466b625a6c1583e48c2f86497a4f79d687df37eb97ae2ddc7a510c0d366"}) [ 74.222100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.229359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.234047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.237229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.239933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.241317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.245634] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.352814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.354113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.355931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.357169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.358697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.359956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.360696] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.361439] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.362205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.363212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.363945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.364811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.365458] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.370728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.371614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.372391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.373374] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.375127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.375906] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.376490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.377140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.378052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.378813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.379387] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.380148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.386291] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.386899] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.391052] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.391631] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.435237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.436881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.439008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.440102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.448906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.462101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.463595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.471009] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.473506] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.474425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.478961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.488639] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.489218] Bluetooth: hci4: HCI_REQ-0x0c1a [ 76.302043] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 76.303263] Bluetooth: hci0: command 0x0409 tx timeout [ 76.430579] Bluetooth: hci6: command 0x0409 tx timeout [ 76.431329] Bluetooth: hci3: command 0x0409 tx timeout [ 76.432123] Bluetooth: hci7: command 0x0409 tx timeout [ 76.432772] Bluetooth: hci5: command 0x0409 tx timeout [ 76.557687] Bluetooth: hci4: command 0x0409 tx timeout [ 76.558480] Bluetooth: hci2: command 0x0409 tx timeout [ 78.349688] Bluetooth: hci0: command 0x041b tx timeout [ 78.477683] Bluetooth: hci5: command 0x041b tx timeout [ 78.478273] Bluetooth: hci7: command 0x041b tx timeout [ 78.478910] Bluetooth: hci3: command 0x041b tx timeout [ 78.479474] Bluetooth: hci6: command 0x041b tx timeout [ 78.605603] Bluetooth: hci2: command 0x041b tx timeout [ 78.606195] Bluetooth: hci4: command 0x041b tx timeout [ 80.397649] Bluetooth: hci0: command 0x040f tx timeout [ 80.526740] Bluetooth: hci6: command 0x040f tx timeout [ 80.527559] Bluetooth: hci3: command 0x040f tx timeout [ 80.528315] Bluetooth: hci7: command 0x040f tx timeout [ 80.529124] Bluetooth: hci5: command 0x040f tx timeout [ 80.653740] Bluetooth: hci4: command 0x040f tx timeout [ 80.654592] Bluetooth: hci2: command 0x040f tx timeout [ 81.421769] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 82.445678] Bluetooth: hci0: command 0x0419 tx timeout [ 82.573728] Bluetooth: hci5: command 0x0419 tx timeout [ 82.574393] Bluetooth: hci7: command 0x0419 tx timeout [ 82.575071] Bluetooth: hci3: command 0x0419 tx timeout [ 82.575673] Bluetooth: hci6: command 0x0419 tx timeout [ 82.701620] Bluetooth: hci2: command 0x0419 tx timeout [ 82.702228] Bluetooth: hci4: command 0x0419 tx timeout [ 86.222655] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 88.975924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.010062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.016698] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.022087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.040160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.042570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.047951] Bluetooth: hci1: HCI_REQ-0x0c1a [ 91.086667] Bluetooth: hci1: command 0x0409 tx timeout [ 93.134590] Bluetooth: hci1: command 0x041b tx timeout [ 95.181584] Bluetooth: hci1: command 0x040f tx timeout [ 97.229600] Bluetooth: hci1: command 0x0419 tx timeout 16:04:23 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) io_setup(0x0, &(0x7f0000000180)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe0, 0xff, 0x4, 0x40, 0x0, 0x7, 0x2020d, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffc00, 0x0, @perf_config_ext={0x4, 0x200}, 0x10002, 0x6, 0x7, 0x6, 0x1, 0x5, 0xfb9, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x6) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1820) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) socketpair(0x25, 0x1, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0xfc, 0x6, 0x40, 0x0, 0x0, 0x80500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x51021, 0x100000000, 0x9, 0x4, 0x7, 0xbf, 0x7, 0x0, 0x51ac12b3, 0x0, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000140)='ip_vti0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) [ 130.151240] audit: type=1400 audit(1664813063.828:7): avc: denied { open } for pid=3776 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.153222] audit: type=1400 audit(1664813063.830:8): avc: denied { kernel } for pid=3776 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.174607] ------------[ cut here ]------------ [ 130.174631] [ 130.174634] ====================================================== [ 130.174638] WARNING: possible circular locking dependency detected [ 130.174643] 6.0.0-rc7-next-20220930 #1 Not tainted [ 130.174650] ------------------------------------------------------ [ 130.174654] syz-executor.2/3777 is trying to acquire lock: [ 130.174660] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 130.174703] [ 130.174703] but task is already holding lock: [ 130.174706] ffff88800d57d820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.174735] [ 130.174735] which lock already depends on the new lock. [ 130.174735] [ 130.174738] [ 130.174738] the existing dependency chain (in reverse order) is: [ 130.174742] [ 130.174742] -> #3 (&ctx->lock){....}-{2:2}: [ 130.174757] _raw_spin_lock+0x2a/0x40 [ 130.174769] __perf_event_task_sched_out+0x53b/0x18d0 [ 130.174781] __schedule+0xedd/0x2470 [ 130.174796] schedule+0xda/0x1b0 [ 130.174810] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.174824] irqentry_exit_to_user_mode+0x5/0x30 [ 130.174838] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.174853] [ 130.174853] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 130.174867] _raw_spin_lock_nested+0x30/0x40 [ 130.174879] raw_spin_rq_lock_nested+0x1e/0x30 [ 130.174893] task_fork_fair+0x63/0x4d0 [ 130.174911] sched_cgroup_fork+0x3d0/0x540 [ 130.174926] copy_process+0x4183/0x6e20 [ 130.174938] kernel_clone+0xe7/0x890 [ 130.174948] user_mode_thread+0xad/0xf0 [ 130.174959] rest_init+0x24/0x250 [ 130.174971] arch_call_rest_init+0xf/0x14 [ 130.174990] start_kernel+0x4c6/0x4eb [ 130.175007] secondary_startup_64_no_verify+0xe0/0xeb [ 130.175028] [ 130.175028] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 130.175042] _raw_spin_lock_irqsave+0x39/0x60 [ 130.175054] try_to_wake_up+0xab/0x1930 [ 130.175068] up+0x75/0xb0 [ 130.175083] __up_console_sem+0x6e/0x80 [ 130.175100] console_unlock+0x46a/0x590 [ 130.175117] vprintk_emit+0x1bd/0x560 [ 130.175134] vprintk+0x84/0xa0 [ 130.175151] _printk+0xba/0xf1 [ 130.175163] kauditd_hold_skb.cold+0x3f/0x4e [ 130.175182] kauditd_send_queue+0x233/0x290 [ 130.175198] kauditd_thread+0x5f9/0x9c0 [ 130.175212] kthread+0x2ed/0x3a0 [ 130.175228] ret_from_fork+0x22/0x30 [ 130.175241] [ 130.175241] -> #0 ((console_sem).lock){....}-{2:2}: [ 130.175255] __lock_acquire+0x2a02/0x5e70 [ 130.175273] lock_acquire+0x1a2/0x530 [ 130.175290] _raw_spin_lock_irqsave+0x39/0x60 [ 130.175302] down_trylock+0xe/0x70 [ 130.175318] __down_trylock_console_sem+0x3b/0xd0 [ 130.175335] vprintk_emit+0x16b/0x560 [ 130.175352] vprintk+0x84/0xa0 [ 130.175369] _printk+0xba/0xf1 [ 130.175379] report_bug.cold+0x72/0xab [ 130.175397] handle_bug+0x3c/0x70 [ 130.175415] exc_invalid_op+0x14/0x50 [ 130.175433] asm_exc_invalid_op+0x16/0x20 [ 130.175445] group_sched_out.part.0+0x2c7/0x460 [ 130.175465] ctx_sched_out+0x8f1/0xc10 [ 130.175483] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.175496] __schedule+0xedd/0x2470 [ 130.175512] schedule+0xda/0x1b0 [ 130.175528] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.175539] irqentry_exit_to_user_mode+0x5/0x30 [ 130.175552] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.175567] [ 130.175567] other info that might help us debug this: [ 130.175567] [ 130.175570] Chain exists of: [ 130.175570] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 130.175570] [ 130.175586] Possible unsafe locking scenario: [ 130.175586] [ 130.175588] CPU0 CPU1 [ 130.175591] ---- ---- [ 130.175593] lock(&ctx->lock); [ 130.175599] lock(&rq->__lock); [ 130.175606] lock(&ctx->lock); [ 130.175613] lock((console_sem).lock); [ 130.175619] [ 130.175619] *** DEADLOCK *** [ 130.175619] [ 130.175621] 2 locks held by syz-executor.2/3777: [ 130.175628] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 130.175659] #1: ffff88800d57d820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.175687] [ 130.175687] stack backtrace: [ 130.175691] CPU: 1 PID: 3777 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 130.175704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.175712] Call Trace: [ 130.175716] [ 130.175720] dump_stack_lvl+0x8b/0xb3 [ 130.175740] check_noncircular+0x263/0x2e0 [ 130.175757] ? format_decode+0x26c/0xb50 [ 130.175774] ? print_circular_bug+0x450/0x450 [ 130.175792] ? simple_strtoul+0x30/0x30 [ 130.175808] ? __lockdep_reset_lock+0x180/0x180 [ 130.175826] ? format_decode+0x26c/0xb50 [ 130.175844] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 130.175863] __lock_acquire+0x2a02/0x5e70 [ 130.175886] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.175910] lock_acquire+0x1a2/0x530 [ 130.175927] ? down_trylock+0xe/0x70 [ 130.175946] ? lock_release+0x750/0x750 [ 130.175963] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.175986] ? vprintk+0x84/0xa0 [ 130.176005] _raw_spin_lock_irqsave+0x39/0x60 [ 130.176017] ? down_trylock+0xe/0x70 [ 130.176034] down_trylock+0xe/0x70 [ 130.176051] ? vprintk+0x84/0xa0 [ 130.176069] __down_trylock_console_sem+0x3b/0xd0 [ 130.176087] vprintk_emit+0x16b/0x560 [ 130.176105] ? lock_downgrade+0x6d0/0x6d0 [ 130.176124] vprintk+0x84/0xa0 [ 130.176143] _printk+0xba/0xf1 [ 130.176155] ? record_print_text.cold+0x16/0x16 [ 130.176170] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 130.176185] ? lock_downgrade+0x6d0/0x6d0 [ 130.176204] ? report_bug.cold+0x66/0xab [ 130.176223] ? group_sched_out.part.0+0x2c7/0x460 [ 130.176242] report_bug.cold+0x72/0xab [ 130.176262] handle_bug+0x3c/0x70 [ 130.176281] exc_invalid_op+0x14/0x50 [ 130.176300] asm_exc_invalid_op+0x16/0x20 [ 130.176314] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.176335] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.176348] RSP: 0000:ffff88803db5fc68 EFLAGS: 00010006 [ 130.176357] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.176365] RDX: ffff888009808000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 130.176374] RBP: ffff88801f3985c8 R08: 0000000000000005 R09: 0000000000000001 [ 130.176381] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d57d800 [ 130.176389] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 130.176401] ? group_sched_out.part.0+0x2c7/0x460 [ 130.176422] ? group_sched_out.part.0+0x2c7/0x460 [ 130.176443] ctx_sched_out+0x8f1/0xc10 [ 130.176464] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.176479] ? lock_is_held_type+0xd7/0x130 [ 130.176494] ? __perf_cgroup_move+0x160/0x160 [ 130.176505] ? set_next_entity+0x304/0x550 [ 130.176524] ? update_curr+0x267/0x740 [ 130.176544] ? lock_is_held_type+0xd7/0x130 [ 130.176559] __schedule+0xedd/0x2470 [ 130.176577] ? io_schedule_timeout+0x150/0x150 [ 130.176597] schedule+0xda/0x1b0 [ 130.176613] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.176626] irqentry_exit_to_user_mode+0x5/0x30 [ 130.176640] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.176655] RIP: 0033:0x7f6912b4a6a0 [ 130.176664] Code: 41 0a 0f 94 c3 e9 26 ff ff ff 48 83 ec 08 31 c0 41 51 4d 89 c1 49 89 c8 48 89 d1 48 89 f2 48 89 fe 4c 89 d7 e8 61 94 05 00 59 <5e> eb 8e 48 8d 3d d2 27 0b 00 e8 f1 6f ff ff 48 8d 3d 7a 45 0a 00 [ 130.176676] RSP: 002b:00007f6910119198 EFLAGS: 00000203 [ 130.176685] RAX: 0000000000000003 RBX: 00007f6912cb6f60 RCX: 0000000000000000 [ 130.176692] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020001840 [ 130.176700] RBP: 00007f6912bfdf6d R08: 0000000000000003 R09: 0000000000000000 [ 130.176708] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 130.176715] R13: 00007ffc906d978f R14: 00007f6910119300 R15: 0000000000022000 [ 130.176729] [ 130.237255] WARNING: CPU: 1 PID: 3777 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 130.238108] Modules linked in: [ 130.238408] CPU: 1 PID: 3777 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 130.239084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.239917] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.240333] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.241691] RSP: 0000:ffff88803db5fc68 EFLAGS: 00010006 [ 130.242091] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.242612] RDX: ffff888009808000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 130.243143] RBP: ffff88801f3985c8 R08: 0000000000000005 R09: 0000000000000001 [ 130.243693] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d57d800 [ 130.244237] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 130.244778] FS: 00007f6910119700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 130.245384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.245818] CR2: 00007fddfe78c6f4 CR3: 000000001f282000 CR4: 0000000000350ee0 [ 130.246359] Call Trace: [ 130.246556] [ 130.246734] ctx_sched_out+0x8f1/0xc10 [ 130.247070] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.247560] ? lock_is_held_type+0xd7/0x130 [ 130.247963] ? __perf_cgroup_move+0x160/0x160 [ 130.248342] ? set_next_entity+0x304/0x550 [ 130.248662] ? update_curr+0x267/0x740 [ 130.248954] ? lock_is_held_type+0xd7/0x130 [ 130.249270] __schedule+0xedd/0x2470 [ 130.249554] ? io_schedule_timeout+0x150/0x150 [ 130.249894] schedule+0xda/0x1b0 [ 130.250149] exit_to_user_mode_prepare+0x114/0x1a0 [ 130.250506] irqentry_exit_to_user_mode+0x5/0x30 [ 130.250863] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.251367] RIP: 0033:0x7f6912b4a6a0 [ 130.251665] Code: 41 0a 0f 94 c3 e9 26 ff ff ff 48 83 ec 08 31 c0 41 51 4d 89 c1 49 89 c8 48 89 d1 48 89 f2 48 89 fe 4c 89 d7 e8 61 94 05 00 59 <5e> eb 8e 48 8d 3d d2 27 0b 00 e8 f1 6f ff ff 48 8d 3d 7a 45 0a 00 [ 130.252946] RSP: 002b:00007f6910119198 EFLAGS: 00000203 [ 130.253343] RAX: 0000000000000003 RBX: 00007f6912cb6f60 RCX: 0000000000000000 [ 130.253877] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020001840 [ 130.254413] RBP: 00007f6912bfdf6d R08: 0000000000000003 R09: 0000000000000000 [ 130.254948] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 130.255500] R13: 00007ffc906d978f R14: 00007f6910119300 R15: 0000000000022000 [ 130.256038] [ 130.256218] irq event stamp: 768 [ 130.256474] hardirqs last enabled at (767): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.257154] hardirqs last disabled at (768): [] __schedule+0x1225/0x2470 [ 130.257747] softirqs last enabled at (762): [] __irq_exit_rcu+0x11b/0x180 [ 130.258353] softirqs last disabled at (579): [] __irq_exit_rcu+0x11b/0x180 [ 130.258955] ---[ end trace 0000000000000000 ]--- 16:04:23 executing program 4: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xa, 0xffffffffffffffff) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000018, r0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, r0) 16:04:24 executing program 4: sched_getattr(0x0, &(0x7f0000000740)={0x38}, 0x38, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x61, 0xfff, 0x8, 0x4, 0x5, 0x1, 0xc2f0, 0x8}, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) [ 130.392529] hrtimer: interrupt took 17272 ns [ 130.537063] loop3: detected capacity change from 0 to 264192 [ 130.562717] loop3: detected capacity change from 0 to 264192 [ 131.525805] loop5: detected capacity change from 0 to 91 VM DIAGNOSIS: 16:04:24 Registers: info registers vcpu 0 RAX=ffffffff862445f0 RBX=0000000000000001 RCX=ffffffff8424eb7a RDX=0000000000000000 RSI=ffffffff862445cc RDI=ffffffff85dff420 RBP=ffff88801d90f9d0 RSP=ffff88801d90f8f0 R8 =ffffffff862445cc R9 =ffffffff85eec59e R10=ffffed1003b21f3c R11=000000000003603d R12=ffff88801d90f9b9 R13=ffff88801d90f9d8 R14=ffff88801d90f978 R15=ffffffff8424eb7a RIP=ffffffff81119bb1 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd62e785540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe72d23fd8 CR3=000000000ec12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0070656474666f73 2e73656c75646f6d YMM01=0000000000000000 0000000000000000 0070656474666f73 2e73656c75646f6d YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000ff00000000ff YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803db5f6b0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6910119700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fddfe78c6f4 CR3=000000001f282000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f6912c8a7c0 00007f6912c8a7c8 YMM02=0000000000000000 0000000000000000 00007f6912c8a7e0 00007f6912c8a7c0 YMM03=0000000000000000 0000000000000000 00007f6912c8a7c8 00007f6912c8a7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000