Warning: Permanently added '[localhost]:65005' (ECDSA) to the list of known hosts. 2023/02/25 17:44:19 fuzzer started 2023/02/25 17:44:19 dialing manager at localhost:41417 syzkaller login: [ 35.180252] cgroup: Unknown subsys name 'net' [ 35.309061] cgroup: Unknown subsys name 'rlimit' 2023/02/25 17:44:32 syscalls: 202 2023/02/25 17:44:32 code coverage: enabled 2023/02/25 17:44:32 comparison tracing: enabled 2023/02/25 17:44:32 extra coverage: enabled 2023/02/25 17:44:32 setuid sandbox: enabled 2023/02/25 17:44:32 namespace sandbox: enabled 2023/02/25 17:44:32 Android sandbox: enabled 2023/02/25 17:44:32 fault injection: enabled 2023/02/25 17:44:32 leak checking: enabled 2023/02/25 17:44:32 net packet injection: enabled 2023/02/25 17:44:32 net device setup: enabled 2023/02/25 17:44:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/25 17:44:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/25 17:44:32 USB emulation: enabled 2023/02/25 17:44:32 hci packet injection: enabled 2023/02/25 17:44:32 wifi device emulation: enabled 2023/02/25 17:44:32 802.15.4 emulation: enabled 2023/02/25 17:44:32 fetching corpus: 0, signal 0/0 (executing program) 2023/02/25 17:44:33 starting 8 fuzzer processes 17:44:33 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x492}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000017c0)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x64, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40804}, 0x400c041) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001980)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b40), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001cc0)={'tunl0\x00', &(0x7f0000001b80)={'syztnl0\x00', r0, 0x700, 0x1, 0x2, 0xff, {{0x40, 0x4, 0x3, 0x3, 0x100, 0x68, 0x0, 0xc4, 0x4, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0xf, 0x17, [@rand_addr=0x64010100, @private=0xa010102, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0xb, [{@multicast1, 0x4d}, {@empty, 0x2}, {@empty, 0xfc}]}, @lsrr={0x83, 0x23, 0xbc, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @loopback, @empty, @broadcast, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x4, [@loopback, @private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0xe4, 0x3, 0x9, [{@remote, 0x7fffffff}, {@broadcast, 0xead}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}]}, @timestamp_addr={0x44, 0x3c, 0xa5, 0x1, 0x1, [{@rand_addr=0x64010101, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x8}, {@empty, 0x5}, {@remote, 0x4f}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x3, [{@multicast1, 0x5bf3}, {@rand_addr=0x64010100, 0x318}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x9}, {@private=0xa010100, 0x3}, {@empty, 0xffffffff}]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x44, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x60, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ba}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000808) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r1, 0xd5890000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000001f80)) 17:44:33 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/192, 0xc0}], 0x2}, 0x40010100) pipe2(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001900)={'gretap0\x00', &(0x7f0000001840)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x200, 0x7fff, {{0x20, 0x4, 0x2, 0x5, 0x80, 0x65, 0x0, 0xf3, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x85, 0xd, "14de4866db6b169a814005"}, @timestamp_addr={0x44, 0x34, 0x11, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x40}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x6d}, {@loopback}, {@loopback, 0xffffffc1}, {@empty, 0x7}]}, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xf4, [@private=0xa010101, @multicast1, @multicast2, @broadcast, @loopback, @loopback, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) pipe2(&(0x7f0000001940)={0xffffffffffffffff}, 0x4000) getpeername$unix(r3, &(0x7f0000001980), &(0x7f0000001a00)=0x6e) syz_80211_inject_frame(&(0x7f0000001a40), &(0x7f0000001a80)=@ctrl_frame=@bar={{}, {0x8}, @device_a, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0xe}, {0x1, 0x1}}}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'syztnl2\x00', r2, 0x4, 0x20, 0x2, 0x0, {{0xa, 0x4, 0x3, 0x33, 0x28, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast2, @private=0xa010100, {[@noop, @generic={0x82, 0x11, "bf4d439ad68480ea4f047c2c54d644"}]}}}}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001b80), 0x34200, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001bc0), 0x690080, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000001e00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x174, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x618}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008415}, 0x40048081) r7 = io_uring_setup(0x7360, &(0x7f0000001e40)={0x0, 0x2ecf, 0x1, 0x1, 0x1f, 0x0, r5}) r8 = eventfd(0x9) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003300), 0x1b1a03, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = openat$cgroup_procs(r1, &(0x7f0000003340)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000033c0)={0x80000001, 0x0, &(0x7f0000003380)=[r8, r9, r6, r3, r10, r11]}, 0x6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000003580)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003540)={&(0x7f0000003440)={0xf0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x881}, 0x4000004) sendmsg$802154_raw(r5, &(0x7f0000003700)={&(0x7f00000035c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000036c0)={&(0x7f0000003600)="34fdfd4e2c6d795c155ef6574752f25fb70a3dd86cf7eb3d166b31b9c08dd9fddcf941481b9340f7a510da7b6e2e1afd3ed04ead7e788b3689cb0d1934074cd70ead521f93cef6d30ab2462e4df3076996993bb3a3f60d1361b3a841400896866d61edef27a31c5efbb58e1ec046ff7b09d42dc1d1d86540ba4545e773aba3ff085c63e30f6e695274d381d37d2276e78c094e198db3ccace601ad4bd907f86a920ab2e0ebd07237bd2632605aa8d01d13", 0xb1}, 0x1, 0x0, 0x0, 0x20000040}, 0x200008d4) 17:44:33 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x26010000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2402440}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8054) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x421210c4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3d}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xe96}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xc0, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80) r4 = gettid() r5 = getpgid(r4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) pipe2$9p(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r7, &(0x7f0000000b80)={0x26, 0x37, 0x2, {0x0, 0x101, 0xffffffff, r5, 0x8, 'devlink\x00'}}, 0x26) process_vm_writev(r5, &(0x7f00000010c0)=[{&(0x7f0000000bc0)=""/84, 0x54}, {&(0x7f0000000c40)=""/213, 0xd5}, {&(0x7f0000000d40)=""/235, 0xeb}, {&(0x7f0000000e40)=""/50, 0x32}, {&(0x7f0000000e80)=""/173, 0xad}, {&(0x7f0000000f40)=""/120, 0x78}, {&(0x7f0000000fc0)=""/205, 0xcd}], 0x7, &(0x7f00000016c0)=[{&(0x7f0000001140)=""/249, 0xf9}, {&(0x7f0000001240)=""/120, 0x78}, {&(0x7f00000012c0)=""/193, 0xc1}, {&(0x7f00000013c0)=""/137, 0x89}, {&(0x7f0000001480)=""/88, 0x58}, {&(0x7f0000001500)=""/146, 0x92}, {&(0x7f00000015c0)=""/237, 0xed}], 0x7, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 47.908668] audit: type=1400 audit(1677347073.800:6): avc: denied { execmem } for pid=259 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:44:33 executing program 3: io_pgetevents(0x0, 0x80, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000080)={[0x5]}, 0x8}) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="135ae3e2ce4d481acd991aa6b18d389a8c6cd7dd9e724d3b46670d1a40255c9493c5033abd2a108d29420dae1531399f9228b24517f00c92e24b380aa27a8fc45c20c3c6d823ec2f200efe7ae94c43a45b9005b33bdce361d2956f80596c6dc382c12de73d07a72eafd8f59db0b798c40d3bab0839876c", 0x77, 0x5, 0x0, 0x2, r1}, &(0x7f0000000240)) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000280)="bb064b0debc9db4f42b0944684ba627eb118eec5dedef808845e535023247720b44af5d9c0d765640d3dbb0477d46caf3641d32a049e45eb5b8e2651f895508f957ce9483a22629c08f93eee4affb09f25e5eabbc00ef81a507d6a78f1fec45c26a760299f0c51561e46d99463149bda5f5537e2dff70d039d30f1638cc2443078c6b7f20d043975180775fd9ec717b6d4035caa9b75a438e9738d38a20a36801267919ccafce2a52f74a3776757568286cc97c4bf9a8758f2b993c1cc3d5245fadecf08332ef53887b644f19527246ff104d03f0ce13ca26ad8c8dfc63904d464cbacd25efea3cda673f66b1b54f788c48d3ce601f90ce13a0a3c32c555", 0xfe, 0x4}, &(0x7f00000003c0)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) r4 = syz_mount_image$nfs4(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x1000, 0xfff}], 0x4, &(0x7f0000001500)={[{}, {'./binderfs/binder-control\x00'}, {'./binderfs/binder-control\x00'}], [{@uid_gt={'uid>', r2}}]}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000015c0)={0x8, 0x0, &(0x7f0000001580)=[0xffffffffffffffff, r3, r4, r5]}, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x31fd, &(0x7f0000001600)={0x0, 0x237b, 0x8, 0x2, 0x1cb, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001680), &(0x7f00000016c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001700)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0xa, 0x5, 0x0, 0x8001, 0x0, 0x1}, 0xffffffe0) r8 = socket(0x3, 0x2, 0x81) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20010800) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000001d40)={'ip6tnl0\x00', &(0x7f0000001cc0)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x81, 0x7fff, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x1, 0x1, 0x2, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f0000001e00)={'ip6_vti0\x00', &(0x7f0000001d80)={'syztnl0\x00', r10, 0x29, 0x0, 0x5, 0xffff, 0x24, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x7800, 0x80, 0x5, 0x3}}) openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x2040, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000001ec0)=@buf={0x15, &(0x7f0000001e80)="58015ac70cdcd40f3e3374c787785debee4da65044"}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x4df21000) 17:44:33 executing program 4: ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x115203, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x0, 0x1}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000000c0)="18e099ce39e7250ed09c99640891b37c452d940275952f27", 0x18, 0xfffffffffffffffd, 0x0, 0x1, r0}, &(0x7f0000000140)) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r2, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd_index=0x8, 0x8000, 0x6, 0x200, 0x14, 0x0, {0x1}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) r6 = socket(0x23, 0x80003, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd4, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x84c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x4040040) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r7 = io_uring_setup(0x29b4, &(0x7f0000000840)={0x0, 0x6914, 0x0, 0x2, 0x19b}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r7, 0x8000000) 17:44:33 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x80000001, 0x7ff, {{0x41, 0x4, 0x3, 0x9, 0x104, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x38, 0xffffffffffffffff, [{0x1, 0x5, "2953dd"}, {0x7, 0x10, "c1d3132041ad946f197063f15a36"}, {0x5, 0x10, "3c8377e441104ad6e5d076a05279"}, {0x1, 0x3, 'Q'}, {0x2, 0xa, "3b22fa0557bebddd"}]}, @cipso={0x86, 0x30, 0x2, [{0x1, 0x8, "2e64a248db1e"}, {0x2, 0x2}, {0x7, 0xf, "accf4098673215f3986ab65d4f"}, {0x1, 0x11, "256cb77e97563930ef429c55c09f4c"}]}, @timestamp={0x44, 0x8, 0x53, 0x0, 0x1, [0xdc]}, @generic={0x88, 0x11, "503af1bc35e5c837630033fd32c571"}, @timestamp_addr={0x44, 0x14, 0x46, 0x1, 0x1, [{@private=0xa010100, 0x7}, {@rand_addr=0x64010100, 0xfff}]}, @ssrr={0x89, 0x7, 0x83, [@empty]}, @ssrr={0x89, 0x23, 0xc7, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @rr={0x7, 0x1f, 0xea, [@loopback, @multicast1, @broadcast, @empty, @private=0xa010101, @local, @loopback]}, @lsrr={0x83, 0xf, 0xd1, [@loopback, @remote, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', r0, 0x1, 0x8, 0x3f3, 0x1, {{0x9, 0x4, 0x1, 0x12, 0x24, 0x68, 0x0, 0xfb, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x2, [{@local, 0x10000}]}, @end]}}}}}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x10010, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x2409f41bfe4737df, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x10001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', r0, 0x40, 0x700, 0x85b, 0x3e, {{0x1d, 0x4, 0x1, 0x6, 0x74, 0x66, 0x0, 0x20, 0x4, 0x0, @loopback, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x34, 0xe2, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x9}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0xffff}, {@empty, 0x4}]}, @ssrr={0x89, 0xf, 0xe1, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @cipso={0x86, 0x19, 0x1, [{0x0, 0x7, "fc7bd4979a"}, {0x1, 0xc, "da4e42358a67a15caf15"}]}, @noop]}}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', r3, 0x40, 0x700, 0xffffff00, 0xcde, {{0x28, 0x4, 0x0, 0x22, 0xa0, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback, {[@generic={0x86, 0xb, "b0b67221e6c952f794"}, @timestamp_addr={0x44, 0x34, 0x60, 0x1, 0x8, [{@rand_addr=0x64010100, 0x2}, {@loopback, 0x4}, {@empty, 0xbf04}, {@multicast2, 0xaf}, {@private=0xa010102, 0x9}, {@loopback, 0xffffffff}]}, @timestamp_prespec={0x44, 0x44, 0xe2, 0x3, 0x3, [{@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x10000}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010101, 0x6}]}, @rr={0x7, 0x7, 0xf, [@broadcast]}, @noop, @noop]}}}}}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$P9_RSETATTR(r4, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000500)=r4, 0x1) sendmsg$unix(r4, &(0x7f00000008c0)={&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000005c0)="822ebb2b", 0x4}, {&(0x7f0000000600)="54d871af8e20ad68571a4f016429c6f1620bfc99a7763d4bc4409d9c19c0b48a3f25eec4c60c2676211615262c711c5c980e885007e071797e8c1087d3c63e325fd096595ffecdc15c2558377fa40715445c180ff4206acad800ceb5fd653e784459145d6dadbe75e2776e29570252e1beec9e6c80335aab1c11da35cd9f4c50d02446", 0x83}, {&(0x7f00000006c0)="5fe3ad366ecc1c55265ec97394c9e54bfb0ababf2b5162186ffde8b7426fddeaaca1f35b977d8c8c42fad623f51b31958ffdb5b7a1d3272dfec4165bff98e5bf180190ae717f56bab836f3d5488c26b7d9fa208b602a50ef77d3d0228778bc2ef5b4e005b16edc62a8fdf88349745c97de87ab3d75260ef76d649dbf90001b40425c38acae78c2481b42406f61720dda76310d5fd3beda50924deb28f2f19ed4d201d866201fdea9433d2c50e9ed8e798a7261367e148543d398ce01f3bd2d950c5f63b33cc7f9f4ac078457649c74df83156abb0218a97372f28f930f5149e86945bf8468eb893f7a0ba4c636", 0xed}, {&(0x7f00000007c0)="e05b684b80bb7ad6debb784b171c051bb60cb9d154ec2cdb6815a237103d9b6342d675473c17e9cc20b7fd8cf98c76200d861af951824ec3941f57658c696799a7096086d9313e2d7f4c0911c2a10f976afa55b113d629064ee95c7bbe2b73b74c9b86cd1de81c9790fa0112a5db42ddec316e175af2951e4189e46fff1fa54720e9d306de39b737ee3ade23378f6c716868b18888", 0x95}], 0x4, 0x0, 0x0, 0x4}, 0xc565351e233e73d1) syz_io_uring_submit(r1, r2, &(0x7f0000000900)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd=r5, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x7) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) r6 = syz_mount_image$nfs4(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x1, 0x3, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="31938afccf790c02727e72ac2d963276c9009c1ffc76953598ca5828b36b0dc8e63891703b68259efbce7ebcbcf1e16514169beeace1ebe586e9af4fe78c3bd8796bc2fa16260e8a80cfb03034900f3d39a77e42d56a43870b30e7e07575561f0da308cc19d39af9d2f4993a3d43f55a6e95dc8b273de8a7f09969bd0b051b294026dedc0952e913446b846bc6fa32c55ed43e6824fb6e1e1f535bb0470349f611c37732dd36dc64246aa1bf5b991e6f341319e082e2cd9027", 0xb9, 0x7}, {&(0x7f0000000b40)="4cb5413451d627a7bedb0fa6e491d1ca32780a1584daf02c3a500e19f9fe64307b16d2", 0x23, 0x93}, {&(0x7f0000000b80)="b07defb870416814ce3453563a047898b7d5bd50fdf07ecb8b9a880c94a67cff2bef7bf60a1a8019755aec6d38f092f8f0", 0x31, 0x2}], 0x2887030, &(0x7f0000000c40)={[{'^*!{'}], [{@subj_type={'subj_type', 0x3d, 'syztnl0\x00'}}, {@appraise_type}, {@obj_user={'obj_user', 0x3d, '\']'}}, {@seclabel}]}) fstat(r6, &(0x7f0000000cc0)) socket$inet_udplite(0x2, 0x2, 0x88) r7 = syz_io_uring_setup(0x4fe4, &(0x7f0000000d40)={0x0, 0x9efb, 0x2, 0x0, 0x23d, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000e40)=r6, 0x1) 17:44:33 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x7392fb64a8a3cecc, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000240)="6cf72ef2a8c71b29eeabfafacc738c144d212ff0bf663c8b4b5577961dab4222da0cbb3f6ee07ea72960d9b844eed777845a5e910c49a9a6e27f179437e8474d21bd385353a445c1c42688cf5eb1b06524fd20e9610eb3ccd91605d5de58d4e4668797691363dfff443b4c53853c1428d53f8add221898e6ec9ee6dec448a2f04c1df26e2e2df306d37793931291b25e3d8bd3db06e38815e90157e08b237d81d3cb6b6b86e6eebbb79eaab6f1", 0xad, 0x3ff, 0x0, 0x2, r0}, &(0x7f0000000340)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x2, 0x215, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x80) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x16c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x408000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xaa61}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb201}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x880) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe8, r1, 0x320, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x80}}]}, 0xe8}}, 0x800) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x1) r5 = syz_mount_image$nfs4(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x5, 0x5, &(0x7f0000001c80)=[{&(0x7f0000000a80)="a2541a3407c8d3a4557ff3fcf70771b509ee49ae4a06cd846c4e", 0x1a, 0xf71}, {&(0x7f0000000ac0)="c638a123c8f57631d077b9a9a6822c01eea029f4388c410b8bf58024a844254f1e0cd7bbc90c07502ff0c11ac7936350b491c43ff3d83dfcbb04bbbcd4425fa33c27fedc611631508f9220af30fcc8adf9628f05228c7d58ffe79646ac10b6ecda542139b31ab350f1a7f2d084bc7d71d7d202db1e215b9df7ba057282357ccb1275754dfbff045c7e0a9fa5059f0c5895f7eb5e5df37880f4ca308e579713960b4b7fcde7aed019b31fdaffb3996b6aef4d01970497965c0b79ad202d753d116e1cf2f74cf7bbd9e60b07eecd1e1a1b1bf37a9b552050c2a3446081c861e25123dee48acdfa968b6b6bd06462d668be30cb5ac76559e5dd78cca9bd8735c840be7a096ef71e03ac01a889492e0bf5b0efe6a8e6efddd8f011ebb43ccd75b2e307e5696ef65663053fb4f6ff2da89d7cb2b5d567fbd682fa18c79fa316b7da2404b804b869899ce6e0c98f7ca1a378372ade1f0832fd9599a2b4950f19be9ae7cebb7b74e6eefc71f5aa72cda2e751f7d1b6cfb8074cc73baf6293835cced9926fdfd8df8b61bd8092c98c8587b41dcdee88fb715485b5e9055acaa991b3b162befbbde866c17136b99681efdad71b477f087337a27f110b938c9262af738af4c86f7b2b136d83a5693a29acfd3a3629ab9ef04ac9cb731c757541ec78a5b5d4a1da0154359cb6a0803aa2b0759e4546a4fa4f47b954c0e1c39923c0e85f94a587ba953342ba0a261f50feefc05eb29daebf4d68514c5dda24452a3427443aa5bb5b7b1ad5b0a15cab54ceecbbbea417d9c8120e50693116f5ddce995347dda44586592ae7eed279018a7da9925f65242bd13d71071cddb2d1df2565f7456d3e6fcb01e8fea92e66115c5e3c9145c08988f7b0b30127f9876675cf1a12c7376f04a87198c50e9cf72c707c5a16c01e8d24331fccb8c95e79844e8560c7e65759f4ec645d8786d5447c2609fba65960aac54e01e075e419701d50dd2e0090c3f69ca042265156cf02b3855c171e2ce462c7ca4a9a4d6f0a7a5f6eadace27a05489f20ebec4acd27f227141b478c85fd4bcb8d395f48ae1cab6bb0c9fa488935519124c836f68a6e74019e99d65a53c984f2895199cbd81616a0cc712b64fd7020b9a0b799600c2643e62b34f853415f559935f6d03b267345a00bd5974e9e0fc7f6be53e009e6f49d82c641316fbc060e709f4dbe84cccc4b45aa4705df5a9f249e344035900bc8df5b5a285471ecf65c2418b2f0c5d6994051c6992cb14328c86ef265a70a652d393b5d75fcc3af43ea25d9106d6e4708b5bfcc139312f0e5224629ec885554af3f4213cb27033f1d823713f5975a1d2077f9123522ba41412f6541c3e7ce71560e1a8f1d7f16518895ac6b59497219917e654609b9e5f8bf5442a0aad6fc0bef9c44ebf43460ff47f4d19b924071ffb72d4cf1beadfa3de8bc4689769f20bae4d542eca0a3d163d0b459045b6ab5079502009300484ae44891f36eb565064e7d7f50ca796f669b271bbfaaeb8164d4289bb92818ad9e091500309a8a2c6cf2c6f38043bc4b3594e4b4c246050c35cac8b836a687299004628dc805d38f788ef3ec9c439a086491f74ee4eb9d9281eee6ed24868f4f98ab92b2b79f3387a06732449420b354ea555b02918101b6103c7b23160af6c944a05488707f04f75c41c10a403d75a5f3781510f4839af4a53307811e6879c26c707e8d4e39fcf340898431d4584ec7677bcac92616f4c40ec8f8bd84eaaa2f464dc18c3e1e031f570f10beefe2a020790386e488616c62a05b8473ebc94cbb1ab8593ce135f919c64643345355ed64065be8ad0a4769eb84392a02251f1ba03495596c559b2bacc0850a49885daa1f752e46105c3e0803d410c9dceefd765be96ce3c73baa96354e8cc64fb0d56fa5329b54e18e69f9d3da889e31a4493d04d46be576d88a7cfc96a43eca56d07ce17d5a885417199f9e688fa593b90d6fff05d4b1b1ee9b85fd9ea832cc19597fe390f8012be7ad706fad14acd2506ab701f3fa1d52c0e4620a9c04d9fee9583b66854aafc428be3e88c4298d06b587425400939cb34534b82bff6d1262dc47bceaaf63cda3a6002ac1c9d9c9d5f86d84000b904338bb8cbdff293b01341af9e66edf8a38e6664e8b726660c5d08a0375b2115e26cc0d74eac2b7509ac787b6f04ffb383b9050d6cc5437e6be3d468877a7a5478a4deecd2e385cda484592439e31f2bd2b05d8afe59ec652046f8f91169017358388b00615050ec3ad0dc8e232d75b3161b462cdeb073406b912416e826ae21a579a6a0409198dbf5ee01e44ed0f67a51f3e7a33f532032ca63e5d5718c6c5c6eb7bc3cc7ea5ede50ef55d327dd59a2def705cd91cead1c743ecf431061deca6f931c672d9dc6274072c150cb6ed95d7aedf98c6f097d465bc10a47081cc6ae7d877cafb4eb617b8152a494f90a7e5f8e1809fe2c73a19e65a37e96c97559641158443d988cb28fc1e5df6abc26f556693d4babc42cd3ca55e183e11c32b0f3313a8666a46e8b4276b050d00a9682a266f1a4fa8698ff5bed1b93000785dc079c589ca4cca0dddbb189295944fdf227011b164e3913d015597cc2f3d73e57fb34a6a23dbce3caed711f4522fb18f939d190bea1c69b560933798d6149e4c8fb46e42ea5be7b24e783a0c672fd389c5cac861e2d4ef8e53b7c283ff39e421a5c01275daa5e0b6b80e752e9b08768ef50cd648b9cccf53b6b6c2fdf3d48e66427ef42b1bf20e6b769817f3c164d738b94187879bbf45b46500a5ab7553108b587a4d866a15c2873b122f13e12152ff26f23cef91699ab645bc4bce38b94e957b97aacf1c25e065e24bb27490684f284d976dfd32b34936dfd5ce6fc8adacb56973b853b81cc7dfd216a348707a774875bef83b66a4f30b11412e208d5055aafbc7dab44f07d369fd0721ae00edeb27c08e1c6b8af40e93e6a69110001a945a7066a9cc3e21e3ba790389b2c616ab536fb79ab0b9af4e359d73a79cf8c7e2c2eeba6a2680d5de2005fa5bbf4fc7649a85cb45be19b7af1f990db58095dfd679d14f18b72f100d4c689bfd54c79e6bd6dfd0c6ea25bf44a609bd7d04bfb1988ec37895864fcfd1de1664c48ae025abe998a33357f807fa43712faa596244ceb95310dbf28ba5d9d374c3e0c4f06263783078b9c8ba5f48c6b3e2518d6af9e818c5126e00bb100f879c54b2a901b58ee8c36b0806a9390fb22d2537a7a597863cce46c9336f0c8fabaae601e47b7f9b418c1852501aa9b49b458f2648b9f247e2304d35c237b45b0ac3276c78701df73ba2dc4879971642ec4f583f0a1a98428169d5125f4513bf3690050487bbc289eac1033b638981ef1f5fd71bc8c38941bb86835f011bff97025d0879b49ca1300de85dd5b9cee964d4ded7b48bbfc72424134b550f0be3c48ddbb1a04b15e4bff9e9e3017c9ac04e0fa100682c923a84ea8a293aeac6f3fcf27d1ab2d03471412c2cdd847fa3b88432714efd9a9e7e723b9d06e51db2e0b949bcac3c128836ce93841b72bec67b332c8b3646e0fdd484083843ee936e9a1500d42910ed96e188dd249c5a28cc8b63c53e5f52a57e8f1cd067b79724f9b8a4854a4419f90b7dd03f7d55cd64f3b5c1f4ab509277388c0af3bcda9ebc66dc30f0ae75a2076a0bf26ed56d3dc72cd16ba1c60ff5a431beb373d24dac649e777c243701ccd0736ac08f18d7d245138f499e0b5f75cd356877f35d7957f3805061c23503208c433ad2b7797fbec6a50e0ba9438b290705f24b2bd4c21125c1a25362dcff85b578aaefe4b330b7df031977ab336cc2a066a93f306092b03f9e7e7ac7122bb32f423d8df3a125d9f39a14299a6624b7aa9716332fe79603055582d98a2dcd0d4c610218f706e3c5fed562ff5256722dd1f15fafa0e39dd2a1ced4c79cc8888b0e7e68ab63d9ff2d1353b2411ebe522ed09e2f6f4b56ba23aaf79e69792902ea32cb2978b4739a0e902bf3fc16b5f49d7c3dd93723505947590acd8835b88c1482da9b043a6c75a3591caea3e4d2ff030d015223b881436df9d73b5908f579b9f759bfa776dfdb53569dae2aa9496fa97267f9a68ed6e10b4251a23af3850d43f04cd0aa040cb0ca719d34eca6515c4cd97e8b1d0205af42f57b0018ced0b0049924fc2dee081c3ca83c038ea2ba1b0aa04dbb2c59bac590fcf3c24f07b138f47e62ef9300339bf639c18e9dda9f2ef376b884f814760126f5f3311686a2dfd9534bc8241c8cbc50d2efba56b761e159cd1486272c435cf2d1e29aefdb04f6bd42b6b1599883e41a6d621de3689d31b41d490253368d13e9f30750a5be3970226241e05c9c28db3ac6627cd0dac8279d89b13e6516bb59b8c170e53cb8c3f20726b20c6cbb3fc3170ed43df9136cff6d11575fa33d7d5a0911f332af780ee3ec99ee8a2f4854db6c3a843a009767481f378676900e2e76004d0e423474ed6368b4ef373924e4a446fff71297e64418847c7d56c466dfab6c304ecd249a1cf464b6e570f9f27042766ec6e7a1dfdec6543558d770003bb581db20b827c6a487eb7d0a0d4b44308d0ba38c3c615b6626052ae6d9e3f17a8b8f768a2250d3debfba37b18b3b729335c8cc03fedb5a12cbe6de4597f4f8df9de21174421c32b7e796d278046bda5dfa3bf6ea59462348c69623ebf6e1b92b3324b8ecdde4f6935060f75bd6f6f55c6707830730ea0be3f01aba79750f43322ce08f483c06fea8d573fe8cc9356cfa81588d247038932af0c3f88561ac50591265e6e39bd9c29cf70deb7a03c27d3cab6e5dc334506dca3cb38bc95ed58602778663d8edb42a99517aea61ff2b04a93d072b400a58e9698bdfa68d265a897e2cfd50cc80485073589a5e17829130dc820489dff2b2f69a1f02660808297a35dd3b4ea920ef975897bdaef5ff4e4fdb8f0b1f894a6271364df95377b19c21263cd05d46c630e668aa1752fa90deefa145fd2caa77c8a2302a9939c2ce8e4022d62a44cc1bcdab0a16640bdb7386fc151c461e1503e4d74dc187e38da45d25a0eef72fb93a61f75c3c45f9137ff61554216ce54689b7832487c7197c54eb6df6835cfbb51eb78cebbc4466829d929b0082ffcf499ff468df01a28885b3f678c8ed523a28144b3c89e7327aaadffa2f35737fc703c60476f3501556eecd3a5091269f75ad69f38added9ef56b25fafe613c3ee8dfa9c87c5136db2b28c616e65e61fe77117dc21bdc70b191b2fae2994c953bd28ec694b44fe06af2bdbbbf0f8be593f7bb8e6ac0da87b8f0f038517d56a117bf88aab757df78ce4324850e7dc6dbdc1a61bdbf50d59e01e98ab0d681c66d3bc770dead74feec2695a8bff7bd9a0e764cfacf12e49794e07eaabcc1fe839944f12b6efbab725e4cbde34b73c2b296f766d73dca885e393f92f1d8e88eb3ac91836c1a96c81e62662cd3f77071a0e497f708975d9543debf79a4b7c67fa3bf4f5ffa9078ca58d29b8afe76967139e294741165d1ab4f76d31a8cf08e537304e33d946e379303200b1e708b9825625a2c6ba4e8bc97c75448702de5c296b798a9a6a69774d77af8a8186b7b692c2b41cb8725e6a77052c53567f55e331068b6ef23e84910ed0ca06937f35e4b3babb27c1e6e678830ac5ccce5f68038fcbaf942572c0cfb35fc8d13824ec6be53f5dc05f0ad3dd551a95a622f434f8ab7bacd071d25baa729dcb4448f0fe53954adc3be0748b82e20cd994b3e173aefd3409f97553eadc5ac0499fbe986d336f6dbbee7ee", 0x1000, 0x7}, {&(0x7f0000001ac0)="41bc319a4e51bdb581b139ae00", 0xd, 0x9}, {&(0x7f0000001b00)="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", 0xfa}, {&(0x7f0000001c00)="2a2ed8173f7189849ed7411666190fc07c064b79b7f711ffeb99ca5d20b46f82202eea0b1180b5d022a05bc23e09317b819abf2e8a7773aee12d7ac0c17046264285e6d8e6427e9b58ac694b39a778c9dbd3ed9fb70ebe83f63774ec170fd941", 0x60, 0x9}], 0x22, &(0x7f0000001d00)={[{'netdevsim'}, {}, {'.}/'}, {'0000:00:10.0\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '^'}}, {@dont_hash}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001d80)=[r0, r0, r0, r5, r0, r0], 0x6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) prctl$PR_SVE_GET_VL(0x33, 0xf8a2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xc5, 0x6, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x10, 0x80, 0x81, 0x1}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x4c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000002140)={'gre0\x00', &(0x7f00000020c0)={'syztnl0\x00', r6, 0x700, 0x80, 0x5, 0x0, {{0xf, 0x4, 0x3, 0x2, 0x3c, 0x68, 0x0, 0x5d, 0x29, 0x0, @multicast2, @private=0xa010102, {[@end, @lsrr={0x83, 0x27, 0x4c, [@remote, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 17:44:33 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc3a1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc811) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x10802, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x174, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd7, 0xa8, @random="bf741f2a831f2e9ad0cb9181407f55739535c9d4be46b8044ecf1036d6b7be0318b4c038abd5d3cb809e6bbf124daa8b7840656da66115a491e1d94f0a162fa93d9adfdf584c7e78c17436326a8873b263e2d6aa9a1c1fea806f41b4bb537d14cb41b252596693d2fb3cb1a19fb29512389bc09c3fa1e856df24a51fb4f33cdbffa85f9d97ead9044ca48a2d117af9d7084650959e285249afb71fcd3b826b1439fc23785e3040fb63495651772c637ce4c073d4de775fb8718e3d22eb1eeda516b144b54324f6368ee4b6b8620dee829fd806"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0xc000) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f00000004c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x14) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x21c000, 0x50) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000005c0)=[r0, r8, r0], 0x3) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x4, 0xb6, {{0xe, 0x4, 0x2, 0x1, 0x38, 0x64, 0x0, 0x1, 0x0, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@rr={0x7, 0x3, 0x81}, @lsrr={0x83, 0x13, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @local]}, @cipso={0x86, 0xb, 0x0, [{0x6, 0x5, "04d2be"}]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x412900, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r12, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[r6, r6, 0xffffffffffffffff], 0x3) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10a10201}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x1041) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r6) [ 49.112778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.115864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.117524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.120890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.123520] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 49.125474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.162689] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.167224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.168773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.170412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.173753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.176524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.178123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.178995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.179820] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 49.180378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.184927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.186031] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.191685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.192699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.196668] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 49.197787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 49.203847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.203859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.322779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 49.324548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 49.326447] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 49.329797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 49.331101] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 49.334397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 49.335331] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 49.336272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 49.343618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 49.344596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 49.345823] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 49.352526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 49.354564] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 49.355709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 49.362630] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 49.363899] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 49.365547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 49.366835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.191928] Bluetooth: hci0: command 0x0409 tx timeout [ 51.255254] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 51.255282] Bluetooth: hci1: command 0x0409 tx timeout [ 51.257554] [ 51.257747] ====================================================== [ 51.258361] WARNING: possible circular locking dependency detected [ 51.258975] 6.2.0-next-20230224 #1 Not tainted [ 51.259429] ------------------------------------------------------ [ 51.262986] syz-executor.5/275 is trying to acquire lock: [ 51.263532] ffff88800fdb0880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 51.264627] [ 51.264627] but task is already holding lock: [ 51.265203] ffff88800fdb0920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 51.266169] [ 51.266169] which lock already depends on the new lock. [ 51.266169] [ 51.266966] [ 51.266966] the existing dependency chain (in reverse order) is: [ 51.267688] [ 51.267688] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 51.268393] __mutex_lock+0x133/0x14a0 [ 51.268883] hci_cmd_sync_work+0x1e6/0x320 [ 51.269382] process_one_work+0xa0f/0x1790 [ 51.269889] worker_thread+0x63b/0x1260 [ 51.270364] kthread+0x2e9/0x3a0 [ 51.270771] ret_from_fork+0x2c/0x50 [ 51.271216] [ 51.271216] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 51.272042] __lock_acquire+0x2d56/0x6380 [ 51.272548] lock_acquire.part.0+0xea/0x320 [ 51.273054] __flush_work+0x109/0xd80 [ 51.273515] __cancel_work_timer+0x39c/0x4e0 [ 51.274016] hci_cmd_sync_clear+0x52/0x250 [ 51.274507] hci_unregister_dev+0xf9/0x410 [ 51.274996] vhci_release+0x80/0x100 [ 51.275437] __fput+0x263/0xa40 [ 51.275836] task_work_run+0x174/0x280 [ 51.276300] do_exit+0xad8/0x2800 [ 51.276733] do_group_exit+0xd4/0x2a0 [ 51.277188] __x64_sys_exit_group+0x3e/0x50 [ 51.277688] do_syscall_64+0x3f/0x90 [ 51.278133] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 51.278701] [ 51.278701] other info that might help us debug this: [ 51.278701] [ 51.279480] Possible unsafe locking scenario: [ 51.279480] [ 51.280076] CPU0 CPU1 [ 51.280549] ---- ---- [ 51.281009] lock(&hdev->cmd_sync_work_lock); [ 51.281468] lock((work_completion)(&hdev->cmd_sync_work)); [ 51.282282] lock(&hdev->cmd_sync_work_lock); [ 51.282981] lock((work_completion)(&hdev->cmd_sync_work)); [ 51.283558] [ 51.283558] *** DEADLOCK *** [ 51.283558] [ 51.284148] 1 lock held by syz-executor.5/275: [ 51.284562] #0: ffff88800fdb0920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 51.285414] [ 51.285414] stack backtrace: [ 51.285785] CPU: 0 PID: 275 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1 [ 51.286425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 51.287098] Call Trace: [ 51.287322] [ 51.287517] dump_stack_lvl+0x91/0xf0 [ 51.287848] check_noncircular+0x263/0x2e0 [ 51.288220] ? __pfx_check_noncircular+0x10/0x10 [ 51.288647] __lock_acquire+0x2d56/0x6380 [ 51.289015] ? lock_is_held_type+0x9f/0x120 [ 51.289403] ? __pfx___lock_acquire+0x10/0x10 [ 51.289802] ? __pfx_register_lock_class+0x10/0x10 [ 51.290234] ? __wait_for_common+0x394/0x550 [ 51.290627] ? __pfx_lock_release+0x10/0x10 [ 51.291008] lock_acquire.part.0+0xea/0x320 [ 51.291392] ? __flush_work+0xdd/0xd80 [ 51.291741] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 51.292166] ? __flush_work+0xdd/0xd80 [ 51.292530] ? rcu_read_lock_sched_held+0x42/0x80 [ 51.292946] ? trace_lock_acquire+0x170/0x1e0 [ 51.293347] ? __flush_work+0xdd/0xd80 [ 51.293694] ? lock_acquire+0x32/0xc0 [ 51.294032] ? __flush_work+0xdd/0xd80 [ 51.294378] __flush_work+0x109/0xd80 [ 51.294711] ? __flush_work+0xdd/0xd80 [ 51.295052] ? __pfx_mark_lock.part.0+0x10/0x10 [ 51.295460] ? __pfx___flush_work+0x10/0x10 [ 51.295825] ? lock_acquire.part.0+0xea/0x320 [ 51.296212] ? hci_cmd_sync_clear+0x45/0x250 [ 51.296590] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 51.297007] ? hci_cmd_sync_clear+0x45/0x250 [ 51.297392] ? rcu_read_lock_sched_held+0x42/0x80 [ 51.297813] ? trace_lock_acquire+0x170/0x1e0 [ 51.298208] ? lock_is_held_type+0x9f/0x120 [ 51.298589] ? mark_held_locks+0x9e/0xe0 [ 51.298956] __cancel_work_timer+0x39c/0x4e0 [ 51.299339] ? __pfx___cancel_work_timer+0x10/0x10 [ 51.299760] ? __cancel_work_timer+0x2aa/0x4e0 [ 51.300155] ? __pfx___cancel_work_timer+0x10/0x10 [ 51.300589] ? lock_release+0x1e3/0x710 [ 51.300944] ? __pfx_lock_release+0x10/0x10 [ 51.301320] ? do_raw_write_lock+0x11e/0x3b0 [ 51.301707] ? __pfx_vhci_release+0x10/0x10 [ 51.302087] hci_cmd_sync_clear+0x52/0x250 [ 51.302454] ? __pfx_vhci_release+0x10/0x10 [ 51.302833] hci_unregister_dev+0xf9/0x410 [ 51.303197] vhci_release+0x80/0x100 [ 51.303517] __fput+0x263/0xa40 [ 51.303816] task_work_run+0x174/0x280 [ 51.304161] ? __pfx_task_work_run+0x10/0x10 [ 51.304558] ? do_raw_spin_unlock+0x53/0x220 [ 51.304947] do_exit+0xad8/0x2800 [ 51.305259] ? lock_release+0x1e3/0x710 [ 51.305616] ? __pfx_lock_release+0x10/0x10 [ 51.305991] ? do_raw_spin_lock+0x125/0x270 [ 51.306359] ? __pfx_do_exit+0x10/0x10 [ 51.306699] do_group_exit+0xd4/0x2a0 [ 51.307034] __x64_sys_exit_group+0x3e/0x50 [ 51.307408] do_syscall_64+0x3f/0x90 [ 51.307734] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 51.308174] RIP: 0033:0x7f08a39c6b19 [ 51.308510] Code: Unable to access opcode bytes at 0x7f08a39c6aef. [ 51.309027] RSP: 002b:00007fffbfccfee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 51.309659] RAX: ffffffffffffffda RBX: 00007fffbfcd06c8 RCX: 00007f08a39c6b19 [ 51.310256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 51.310849] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007fffbfcd06c8 [ 51.311445] R10: 0000000000000020 R11: 0000000000000246 R12: 00007f08a3a20233 [ 51.312043] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 51.312650] [ 51.319211] Bluetooth: hci2: command 0x0409 tx timeout [ 51.319324] Bluetooth: hci3: command 0x0409 tx timeout [ 51.383344] Bluetooth: hci6: command 0x0409 tx timeout [ 51.447868] Bluetooth: hci7: command 0x0409 tx timeout [ 51.511305] Bluetooth: hci4: command 0x0409 tx timeout [ 53.239183] Bluetooth: hci0: command 0x041b tx timeout [ 53.303174] Bluetooth: hci1: command 0x041b tx timeout [ 53.367204] Bluetooth: hci2: command 0x041b tx timeout [ 53.368249] Bluetooth: hci3: command 0x041b tx timeout [ 53.432211] Bluetooth: hci6: command 0x041b tx timeout [ 53.495191] Bluetooth: hci7: command 0x041b tx timeout [ 53.559180] Bluetooth: hci4: command 0x041b tx timeout [ 55.287182] Bluetooth: hci0: command 0x040f tx timeout [ 55.351207] Bluetooth: hci1: command 0x040f tx timeout [ 55.416183] Bluetooth: hci3: command 0x040f tx timeout [ 55.416549] Bluetooth: hci2: command 0x040f tx timeout [ 55.480207] Bluetooth: hci6: command 0x040f tx timeout [ 55.544198] Bluetooth: hci7: command 0x040f tx timeout [ 55.607214] Bluetooth: hci4: command 0x040f tx timeout [ 55.864165] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 57.335227] Bluetooth: hci0: command 0x0419 tx timeout [ 57.399168] Bluetooth: hci1: command 0x0419 tx timeout [ 57.463242] Bluetooth: hci2: command 0x0419 tx timeout [ 57.463255] Bluetooth: hci3: command 0x0419 tx timeout [ 57.527176] Bluetooth: hci6: command 0x0419 tx timeout [ 57.591894] Bluetooth: hci7: command 0x0419 tx timeout [ 57.655172] Bluetooth: hci4: command 0x0419 tx timeout [ 60.215231] Bluetooth: hci5: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 17:44:37 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff888033e4f190 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe37723a8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe37723a6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f266fcf38e0 CR3=000000003470c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88801686f620 RBX=ffff88801686f860 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888018a33cb8 RDI=ffff88801686f658 RBP=ffff88801686fce0 RSP=ffff88801686f500 R8 =0000000000000007 R9 =00000000000000f8 R10=0000000000000040 R11=0000000000000001 R12=0000000000000007 R13=0000000000000040 R14=0000000000000001 R15=ffff88801686f870 RIP=ffffffff84484796 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe2384b73000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe2384b71000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f98bf364260 CR3=000000003466e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000