Warning: Permanently added '[localhost]:13177' (ECDSA) to the list of known hosts. 2022/09/30 15:55:15 fuzzer started 2022/09/30 15:55:16 dialing manager at localhost:40535 syzkaller login: [ 45.474285] cgroup: Unknown subsys name 'net' [ 45.561612] cgroup: Unknown subsys name 'rlimit' 2022/09/30 15:55:30 syscalls: 2215 2022/09/30 15:55:30 code coverage: enabled 2022/09/30 15:55:30 comparison tracing: enabled 2022/09/30 15:55:30 extra coverage: enabled 2022/09/30 15:55:30 setuid sandbox: enabled 2022/09/30 15:55:30 namespace sandbox: enabled 2022/09/30 15:55:30 Android sandbox: enabled 2022/09/30 15:55:30 fault injection: enabled 2022/09/30 15:55:30 leak checking: enabled 2022/09/30 15:55:30 net packet injection: enabled 2022/09/30 15:55:30 net device setup: enabled 2022/09/30 15:55:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 15:55:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 15:55:30 USB emulation: enabled 2022/09/30 15:55:30 hci packet injection: enabled 2022/09/30 15:55:30 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 15:55:30 802.15.4 emulation: enabled 2022/09/30 15:55:30 fetching corpus: 50, signal 32232/33967 (executing program) 2022/09/30 15:55:30 fetching corpus: 100, signal 42915/46174 (executing program) 2022/09/30 15:55:30 fetching corpus: 150, signal 49926/54667 (executing program) 2022/09/30 15:55:30 fetching corpus: 200, signal 55593/61703 (executing program) 2022/09/30 15:55:30 fetching corpus: 250, signal 60107/67569 (executing program) 2022/09/30 15:55:30 fetching corpus: 300, signal 63823/72567 (executing program) 2022/09/30 15:55:31 fetching corpus: 350, signal 66524/76554 (executing program) 2022/09/30 15:55:31 fetching corpus: 400, signal 71737/82842 (executing program) 2022/09/30 15:55:31 fetching corpus: 450, signal 76166/88368 (executing program) 2022/09/30 15:55:31 fetching corpus: 500, signal 79251/92564 (executing program) 2022/09/30 15:55:31 fetching corpus: 550, signal 81201/95664 (executing program) 2022/09/30 15:55:31 fetching corpus: 600, signal 84802/100193 (executing program) 2022/09/30 15:55:31 fetching corpus: 650, signal 89077/105377 (executing program) 2022/09/30 15:55:31 fetching corpus: 700, signal 91463/108779 (executing program) 2022/09/30 15:55:32 fetching corpus: 750, signal 92730/111128 (executing program) 2022/09/30 15:55:32 fetching corpus: 800, signal 95478/114739 (executing program) 2022/09/30 15:55:32 fetching corpus: 850, signal 98286/118336 (executing program) 2022/09/30 15:55:32 fetching corpus: 900, signal 100326/121272 (executing program) 2022/09/30 15:55:32 fetching corpus: 950, signal 102472/124275 (executing program) 2022/09/30 15:55:32 fetching corpus: 1000, signal 104431/127033 (executing program) 2022/09/30 15:55:32 fetching corpus: 1050, signal 105895/129326 (executing program) 2022/09/30 15:55:32 fetching corpus: 1100, signal 109280/133185 (executing program) 2022/09/30 15:55:33 fetching corpus: 1150, signal 111323/135938 (executing program) 2022/09/30 15:55:33 fetching corpus: 1200, signal 112860/138207 (executing program) 2022/09/30 15:55:33 fetching corpus: 1250, signal 115659/141462 (executing program) 2022/09/30 15:55:33 fetching corpus: 1300, signal 117574/143967 (executing program) 2022/09/30 15:55:33 fetching corpus: 1350, signal 119669/146606 (executing program) 2022/09/30 15:55:33 fetching corpus: 1400, signal 120972/148634 (executing program) 2022/09/30 15:55:33 fetching corpus: 1450, signal 122847/151109 (executing program) 2022/09/30 15:55:33 fetching corpus: 1500, signal 126002/154379 (executing program) 2022/09/30 15:55:34 fetching corpus: 1550, signal 129014/157514 (executing program) 2022/09/30 15:55:34 fetching corpus: 1600, signal 130361/159366 (executing program) 2022/09/30 15:55:34 fetching corpus: 1650, signal 132360/161725 (executing program) 2022/09/30 15:55:34 fetching corpus: 1700, signal 133546/163488 (executing program) 2022/09/30 15:55:34 fetching corpus: 1750, signal 135606/165836 (executing program) 2022/09/30 15:55:34 fetching corpus: 1800, signal 136798/167515 (executing program) 2022/09/30 15:55:34 fetching corpus: 1850, signal 138063/169242 (executing program) 2022/09/30 15:55:34 fetching corpus: 1900, signal 138958/170686 (executing program) 2022/09/30 15:55:34 fetching corpus: 1950, signal 140137/172285 (executing program) 2022/09/30 15:55:35 fetching corpus: 2000, signal 141595/174129 (executing program) 2022/09/30 15:55:35 fetching corpus: 2050, signal 142826/175760 (executing program) 2022/09/30 15:55:35 fetching corpus: 2100, signal 144041/177363 (executing program) 2022/09/30 15:55:35 fetching corpus: 2150, signal 145266/178963 (executing program) 2022/09/30 15:55:35 fetching corpus: 2200, signal 146427/180491 (executing program) 2022/09/30 15:55:35 fetching corpus: 2250, signal 147522/181972 (executing program) 2022/09/30 15:55:35 fetching corpus: 2300, signal 148533/183400 (executing program) 2022/09/30 15:55:35 fetching corpus: 2350, signal 149427/184683 (executing program) 2022/09/30 15:55:36 fetching corpus: 2400, signal 150699/186182 (executing program) 2022/09/30 15:55:36 fetching corpus: 2450, signal 151761/187523 (executing program) 2022/09/30 15:55:36 fetching corpus: 2500, signal 152689/188772 (executing program) 2022/09/30 15:55:36 fetching corpus: 2550, signal 154495/190426 (executing program) 2022/09/30 15:55:36 fetching corpus: 2600, signal 156255/192096 (executing program) 2022/09/30 15:55:36 fetching corpus: 2650, signal 157026/193237 (executing program) 2022/09/30 15:55:36 fetching corpus: 2700, signal 157968/194419 (executing program) 2022/09/30 15:55:36 fetching corpus: 2750, signal 159382/195889 (executing program) 2022/09/30 15:55:37 fetching corpus: 2800, signal 160488/197131 (executing program) 2022/09/30 15:55:37 fetching corpus: 2850, signal 160966/198055 (executing program) 2022/09/30 15:55:37 fetching corpus: 2900, signal 162075/199300 (executing program) 2022/09/30 15:55:37 fetching corpus: 2950, signal 163144/200507 (executing program) 2022/09/30 15:55:37 fetching corpus: 3000, signal 163643/201392 (executing program) 2022/09/30 15:55:37 fetching corpus: 3050, signal 164453/202403 (executing program) 2022/09/30 15:55:37 fetching corpus: 3100, signal 165125/203382 (executing program) 2022/09/30 15:55:37 fetching corpus: 3150, signal 165884/204359 (executing program) 2022/09/30 15:55:38 fetching corpus: 3200, signal 166888/205366 (executing program) 2022/09/30 15:55:38 fetching corpus: 3250, signal 167400/206174 (executing program) 2022/09/30 15:55:38 fetching corpus: 3300, signal 168319/207167 (executing program) 2022/09/30 15:55:38 fetching corpus: 3350, signal 169278/208169 (executing program) 2022/09/30 15:55:38 fetching corpus: 3400, signal 170131/209149 (executing program) 2022/09/30 15:55:38 fetching corpus: 3450, signal 170881/210033 (executing program) 2022/09/30 15:55:38 fetching corpus: 3500, signal 171509/210819 (executing program) 2022/09/30 15:55:38 fetching corpus: 3550, signal 172374/211743 (executing program) 2022/09/30 15:55:38 fetching corpus: 3600, signal 173181/212620 (executing program) 2022/09/30 15:55:39 fetching corpus: 3650, signal 173668/213303 (executing program) 2022/09/30 15:55:39 fetching corpus: 3700, signal 174472/214127 (executing program) 2022/09/30 15:55:39 fetching corpus: 3750, signal 175125/214909 (executing program) 2022/09/30 15:55:39 fetching corpus: 3800, signal 175714/215653 (executing program) 2022/09/30 15:55:39 fetching corpus: 3850, signal 177005/216607 (executing program) 2022/09/30 15:55:39 fetching corpus: 3900, signal 178072/217477 (executing program) 2022/09/30 15:55:39 fetching corpus: 3950, signal 178641/218123 (executing program) 2022/09/30 15:55:39 fetching corpus: 4000, signal 179262/218826 (executing program) 2022/09/30 15:55:40 fetching corpus: 4050, signal 179718/219429 (executing program) 2022/09/30 15:55:40 fetching corpus: 4100, signal 180879/220289 (executing program) 2022/09/30 15:55:40 fetching corpus: 4150, signal 181642/221011 (executing program) 2022/09/30 15:55:40 fetching corpus: 4200, signal 182248/221664 (executing program) 2022/09/30 15:55:40 fetching corpus: 4250, signal 183002/222364 (executing program) 2022/09/30 15:55:40 fetching corpus: 4300, signal 183487/223016 (executing program) 2022/09/30 15:55:40 fetching corpus: 4350, signal 184157/223627 (executing program) 2022/09/30 15:55:40 fetching corpus: 4400, signal 184741/224245 (executing program) 2022/09/30 15:55:41 fetching corpus: 4450, signal 185355/224828 (executing program) 2022/09/30 15:55:41 fetching corpus: 4500, signal 186097/225459 (executing program) 2022/09/30 15:55:41 fetching corpus: 4550, signal 187010/226095 (executing program) 2022/09/30 15:55:41 fetching corpus: 4600, signal 187868/226769 (executing program) 2022/09/30 15:55:41 fetching corpus: 4650, signal 188448/227310 (executing program) 2022/09/30 15:55:41 fetching corpus: 4700, signal 189016/227849 (executing program) 2022/09/30 15:55:41 fetching corpus: 4750, signal 189504/228345 (executing program) 2022/09/30 15:55:41 fetching corpus: 4800, signal 190022/228864 (executing program) 2022/09/30 15:55:41 fetching corpus: 4850, signal 190591/229364 (executing program) 2022/09/30 15:55:41 fetching corpus: 4872, signal 190746/229771 (executing program) 2022/09/30 15:55:41 fetching corpus: 4872, signal 190746/230124 (executing program) 2022/09/30 15:55:41 fetching corpus: 4872, signal 190746/230526 (executing program) 2022/09/30 15:55:41 fetching corpus: 4872, signal 190746/230941 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/231338 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/231707 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/232139 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/232560 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/232960 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/233355 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/233761 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/234165 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/234561 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/234955 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/235346 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/235771 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/236190 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/236602 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/237006 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/237345 (executing program) 2022/09/30 15:55:42 fetching corpus: 4872, signal 190746/237345 (executing program) 2022/09/30 15:55:45 starting 8 fuzzer processes 15:55:45 executing program 1: r0 = socket(0x22, 0x2, 0x76) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x1, 0x0, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x67, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x34, 0x2, [{0x1, 0xb, "9043c635c21c053431"}, {0x2, 0x9, "027723863035fb"}, {0x1, 0xb, "ef8ee58f5b596526c7"}, {0x1, 0xf, "e524de764cfc01ab8c5ae94040"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x80, 0x700, 0x1, 0x7fffffff, {{0x22, 0x4, 0x3, 0x1d, 0x88, 0x67, 0x0, 0x1f, 0x29, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x1b, 0xbc, [@remote, @empty, @rand_addr=0x64010100, @multicast1, @private=0xa010101, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x180}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x7, [{@broadcast}, {@rand_addr=0x64010100, 0xffffff51}]}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0x5, "5333a2"}, {0x0, 0x12, "eb7b105625ed16093ac2f0b5ee5242e8"}, {0x6, 0xf, "ff38e26d851a1c0579c01c16aa"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x80, 0x48, 0x1d, 0x7f, {{0x9, 0x4, 0x3, 0x28, 0x24, 0x64, 0x0, 0x5, 0x2f, 0x0, @local, @broadcast, {[@noop, @ssrr={0x89, 0x7, 0xf, [@dev={0xac, 0x14, 0x14, 0x18}]}, @lsrr={0x83, 0x3, 0x72}, @ra={0x94, 0x4}]}}}}}) r4 = signalfd4(r0, &(0x7f0000000280)={[0x10000]}, 0x8, 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', r3, 0x40, 0x80, 0x8001, 0x3, {{0x2e, 0x4, 0x3, 0x29, 0xb8, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@generic={0x42, 0x8, "98e10f5266ef"}, @lsrr={0x83, 0x23, 0x72, [@empty, @remote, @private=0xa010102, @remote, @multicast2, @multicast1, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x1c, 0xef, 0x0, 0x3, [0x400, 0x4, 0xffff8001, 0x5, 0x2000000, 0x7]}, @ssrr={0x89, 0xf, 0x62, [@broadcast, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x6, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x40}]}, @ssrr={0x89, 0x7, 0x5c, [@private=0xa010100]}, @timestamp_addr={0x44, 0x1c, 0x27, 0x1, 0x0, [{@rand_addr=0x64010101, 0x3}, {@loopback, 0x1}, {@multicast1, 0x3}]}, @rr={0x7, 0x13, 0x8b, [@dev={0xac, 0x14, 0x14, 0x19}, @local, @empty, @multicast2]}, @generic={0x86, 0x2}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r1, 0x2f, 0x6a, 0xc1, 0x10001, 0x4, @mcast1, @private0, 0x1, 0x80, 0x0, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', r6, 0x4, 0xe1, 0xf2, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x10, 0x0, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', r3, 0x20, 0x8, 0x80000001, 0x401, {{0x1a, 0x4, 0x2, 0x14, 0x68, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x15, 0x1, 0x7, [{@multicast1, 0x8001}, {@local, 0x9}, {@multicast2, 0x8}]}, @noop, @lsrr={0x83, 0x13, 0xfa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @noop, @ssrr={0x89, 0x23, 0xeb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @broadcast, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) clock_gettime(0x6, &(0x7f0000000680)) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000006c0)={0x0, @private, @dev}, &(0x7f0000000700)=0xc) r9 = mq_open(&(0x7f0000000740)='ip6_vti0\x00', 0x1, 0x0, &(0x7f0000000780)={0x3, 0xfffffffffffff800, 0x3, 0xff}) sync_file_range(r9, 0x3, 0x7, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000007c0)=0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={0x0, @local, @empty}, &(0x7f0000000880)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r4, {0x7a}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000a00)={'ip_vti0\x00', r8, 0x10, 0x40, 0x8, 0x3, {{0x8, 0x4, 0x1, 0x5, 0x20, 0x64, 0x0, 0x5, 0x2f, 0x0, @broadcast, @local, {[@generic={0x82, 0x9, "f25755cc47571a"}]}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000011c0)={0x20000000}) 15:55:45 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x9e2fb4dbae2656d9, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20004004) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1001040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4048881) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x80, 0x101, 0x29, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x80, 0x6, 0x7}}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c80)={&(0x7f00000009c0)={0x22a8, 0x13, 0x300, 0x70bd27, 0x25dfdbff, {0x15, 0x3, 0x23, 0x6, {0x4e24, 0x4e24, [0x6, 0x9, 0x305, 0x8001], [0x3, 0x5, 0x290494cb, 0xffffffff], r6, [0x7ff, 0x7]}, 0x7fffffff, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "20f0acf3ae11a8843565ed212d47e68389439d917e5b824157afff8a46c3e97edd4c9da65bf7ffbfd18a90e00828bbb8d5ed33608a7aadab0ed1309f51f26669e831f58a63cc58400598bff0a73cb5f1daec077f708da6f03188dec26b87a71e4721c5264c90bb2782893955b550510865c75bfbd440f83a16921d1bde257df788fb9743b929724694283ec0fa5354bf594cadb934147b0ddd4451a43f7f39e70ce1d28fc3c050a68f5bd83a112e4eeb35fed64a4268e6e5bb55e2b5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "9d12929bd459b0eba896ac0e568c41b428596e547d9a27c3ae8f8996c0552493d41a0bfe8838063cc5aef3336bc0aadf210438a989e4d9c106dce8d7a323e325c85e6b723c122fd794cc0250ee3bdfa64b6a6016c901f1b718bb148f53713051b05008975bc06bf6531b6901a61d67ff9e47824479ee684659e998c5f084fe30d43f706256c27a087a19c16e940f8664aedfdcfa60d72c8a20e388d9e8cfa6e332d38c1870b41728b2aacc573b721928e807ec7cb1e89f5f862a249f92136c358d1fed9610fd94d87f0f9ccf6411b37244abcead9f39a89afd02ac0338e05233b393059562f1b9e02f61389ccaeb053e90813c9432d015162687c8745865e1c6b5689bfb5e1812ae2bfcc0d44a7846234c4e5da48368078c848ae8b0a71833e2bef7e5704acc025abfbf6da8868f50e6805a2226d233067394fab25bcc0c7a04fe42cc838f0267f118d31d5f081dca30d6106597e52405299659a81d1e557751b45ca95851d22d85ac57a627b966d64667f1667b868d563ca6020c4d899dcd273c81273d7cac53e9efc117b4e818e270a6a00e58626b02878ba4272c2bb4ff33575cf1857e953c1aab4e2b6e5c72134375b12f0e5ac86317b3f96eb6d519bfb6ce44ffec3b827330408e53e0576800a096179a9b421fcec577d10102384d42a8fca87726eda5d2688aa53e62f513cc59b22321ab85947997a39be8dfbb110cca64dd12f8bcb45a4f6cdbd71a7cbd2d3dc189a9943575aa30c909213ecbd374dd670678cfeb1891464c7fde3d6f0164e09bf20b617e281053fefe3fa69092702276441b72cc618fdfaea6280146020b504f41abb3684b574aa775c9cb20b0a4674369ab39f19610adc04267feaa60099faa23b026f27895db1436ee667ddef9aa6173efefb38dc91cea9a36780d337def2b742bb021566d59c5d798bbd8cc3eabce11134a6a924297538df416680b5b4a9db872ba876f4c55d6bfdd7edf8dc3c3947d488bcfc5bfb7331dfa14d33d185dfe518879daa4c8cc1ad85443645598d5df077af05dbd2748de393f9611bfb1f088d9a2d7fe1a2ff34c127e27329bf6ff2d3f3c91609cbc2c4270f32451d439f5d2515ac3e05c13e07a917b6a2de9f3ba5caf20b991c94d2a3f65d985507f45b88935b4170994b28e48f982171dc2341874a0876e5238093fb4369b099295d101a3b2d94d43e278b667761b816727c8c0b9ea3c09cb7af98347684a144466d3f0b6a10e2fa2f8239538a9f20f17de42c8979094fbf2f4d2559b82df74f5cdc47a058399c123ba015e169df6038488387c32f7f7bbb28947852ce337a1d8a3fc14bb34a9f96f70bcd9f1fcaa126bdf5c10a74610c48db4f4f9ad7ce797e4b6d42bb5faf8cf18250266ba406a84b2a16454df258e05252d8db78d318d3d5c47c63e76ed5fdc5c6044b3ec06656b4a11f2094d7a5f216d3b35da417780db9945df6bb05d4e965ac3b47025b026c93d118b0839d13d9645538d546fcd71d2d22d898ad2f64a62d95f8ec4fc416712d392284161005ca1bddcfd3d34875b772aea1be73b954b0c02cccfaddb9c15571b9e5f35dfb5ab96029d32e5923f90983f94648a49637f727e76aac38d68a615e7b8443af72e71f948333e701416e661117cbfddbaa2f213240347d154da296f0766ef3bbf21f56623b29aaf053f9f3c058fd987beddab60060ad4effbf5ae57517c0b3f7e676e9a90801d7d1b58fa5573757f0733586d033d229009309be26475de61359fa4eaac5ce241ed00f0b878b730918fc90ad6b05b9286538f25ec65099af294508938ca6f9ff79840e11ccd76a55c8fc1c035e791ba900b9a1ff560695d0974e9f9e81d5c197be78d20c5fa06556e8a59c14b173a0e20a82dc411d6286a0268914ce7a81f01a86dfd3cd779d18483b11b03d85abceccf494fb3ae8d1321e948267827aca9bff9111dcec1672c549431873a798bf3167eac760da9bd81334fc1396a1d103ccba1ea2866eef6952c71cd70ab467a8efac28769972d04234594337e4210454b2d43fc08efe3bb04d86893ed996f38489b68012521c00663ce4f9372fbe677daff8d1b574509f3be256dc1e08c971192b31556260d681233b53d1698c85360f710782b8b0f10d8313a5967b838660d675d41588af7f33c00f0acc387c1c5893aa318b336c7c6c50905afaec9f983a73a2c78e894ebf487add2b503d6d284c29b85b33d8781b6da163e89be6ee1c801435e7f3527f7a4779b6aaa4eb0e8c67045c8c6add9ba016d1eeea87956f129430864b4957363a7218ac48dd02b7a254595f1c711c0d08e48d3f28d9aa5740e81705d2f1ec24398fe79b75dcd03c4d0bedf816aed79e8df7beb0bbd21b783ccf670cb909d2b9079c189bd6ed2cdcc4d03578b37f70ec40e58ef3f2dd0c9ca4f12121bdb1e991e47fe59640e4849993071d57b81fa41b6b9ff9bc85899f6f16d65ed85c21a84fd5bf1ab026064ef5186df44d1232a6d0d6f798ef293f8b88adb78633fe1cc06b47e183f20751888ae9f8ac0010c47972a33f8cbda776ba03221cb930e9214a9e51e174114452d153794132858a993418f4067fc2ddae95b43d5c2e52c8fe3d96ae52cb878732863598d24e4854b8025df705ca72dfa745886992203cb1b55d2c6200b071083f9028fbb98e200fcf47790311dc7e6544e906161b6ff25fd6131b630f8a6dc6676938e926b9beb45bc3f873d9e54e841b78f4edc0bcdff2997b28abe08e5ee744f6d9e2becf719388ed902094b460c6f8ad6a5270af027d487aabd52227ad9885348f076f9d20b2df8ed5a867353ee969582c22523875327f708ea743b33eb8992031301a9318f70eb8173f4f01e1ccfd01036cc15da07588cc19a1293bf2325123bc9d026a6a73beabcea7083f0a8b463b1f8e6e82629033268583197c71b6de96687a9fbcb212ae959b2d8dc3cafd526baad4827c63daed0a1aaa1731d3a4472b1afa4cdd25d581bf3e943166711df2c61ca66f48225ddd677181c704c54f082351e0fd3c51c7e521c998c2a10b7be4cf38537f6c55ae990df6b18dff07dea2a211524fd3cb36385e2e89047362f9bd5585c90d5c91a206cb4e3ffd909ff36f19f56bf21d393ad0352b4f8ddf68e67cb4097e13450abaeacf28024940fd3dd9a04fbebbcfcb73995573906251507732ec85772e6570129ef3c8659ff2ab1bb995a528104a4f241a1dfe8665f47f00c4116d0097275c12c9b7bfa347dae8cee9c9c5e3924a012fe6751d0f301d3ecf3efdc8adce24181c6d40803e9c9e7fff0fdfce269bc63a72444e92157cc6020b563dbd3ed97818e3caee7b5a484df9c14c577418c8df8ea671bde11243065b132fdfc8d27080db42a5ed072018337dc2a68da005427f68f6d7400ab11e74bc4bf91b456eaa3e1583028383bb1ce3e56e5d48387995f4e6fee2b1f1fd3140dca66456ef6d70929cb973cf0c81449bfaa57ff2fe581745a159b454c2440a70604738f783978c2edefe880ca73bf00ed79886a5afc2fc4344ca0253d249deb7b63226efc66b1eae2f9186a4c8831ac027b7e07bc5ac20dd19cbd68767a24ade76c684ae8365d4e04cd8af42c9ef04c4ebb3f7ae041bc018bae50069e85467a8a1d16c442c368294b759aa824a3f26dda5b403be05384aeed6f7ab32f8e763cb87d9572bf2105f1108b9e2c2e5d5d8bb7eab2b877dd7d1e26f179bd21dba6c2a0ae6d24fb44576794517628b6f0a4e4538bc46dc6ccb4cdaf499ee64840f5f22beb40dc60c1e87b50f9c1d5cc3142d803b8ae26185e52b5c40c428adb1118ed7d137c9f81ccae5f9cfd3f90d5c193f14f513c18f412c4a96781e78a2633df7b5b9fd6b8c996da039a38eb135e68958cfbf686a8ad870c3ede6c420519569dd0b7acc57bf091f2f51f1edd7f9155038d69658e43842063ee9d457efb52dccf68dc9d51d6634c308c28f109714c75532ead1d5d08a0a85731e1b2d1dda8247be6dbb5868011c2760dac3a5a4286c21a554e67b81bc02d8064e1840bf1e22ac907754e8909925239dbaf165eb639888da1ee7317efc54026aae4522c7e1495bda47bc42bc889804ff2e0538df5b85658544e8f4b09833568f77a93b8c8f9aaf278d0467aa0f8a2aef64f751ea6e9310addf21ce83dbeca7d4c22753dabf724fea2f8b81c89f906f6d44400ba293f7f95f78a91d9f3e10e59a74904191ea1f9f1f9a2814e39a51c1ad15d91e0b7fc28b716588508b1b91ebdd09207adecbe6f50e050bb883bfe982bee960f947b41ca24dc269c80490389f041640e49fd9f646a1057cfabfd3a5b2a8dba35826ec467268f12339c80bbe4c18ba1c43755968c1c593220add541196a4421ca329b51682469606320e07c4186aa594c5f986624ae95b971d6b5817218625efaef577a13d7cb83f355466455600b786d7fd5305e36750d56be0025238f2b786e46581d04e10b5fbb3f0b0a4681dba031592b7bfed1e27265538ecdeb5fb46d143cdd6ceb18ccd311825af47c519c65c9294d34606ec25b878fa85ec3bc8dd7c1a16c0854afb68cab71936677241dc5bebedc05e54136a6f7b5d4383875eef9c02dd00e46dd448466ee150659eaca1afb7728f7f21be30299616972a19a0eca54dc791e01485399ffe1a19a514deffad8996f8c59b8a1efa23c0215b2e88d3ea49e1ebe3355b96294e8a00fff05910fa1bfa9a2a3e3812fe9ec661696e85bc38dd795bd2b191850b9c95a5d4d5749b063d04cf1ef38dc1526de10726e37a5c837ccf1ed6ab217fb48b55ad5e560b6a8ddf54134497cb369d5c9b89394e189fd81dfcc4b848de3936b5e5fa87d5571dd494bef7d99ebbcc1e63b51cd80532e15fb73e0ee9554204a2a8114bc4e50403879061e0735f38e1a5d1b15ad2e5801b3c38063d6c2015c35727755e9856ea0e0043fb601c5f82b7bb874fa14b669057053b376335e3a90c5f201380aa130f081b189267a00beae8bff07e7b8b54f393f39a2615a01cf0dffebd61f34f0eebc8307ffd39e1da3400cb588dba7902592efb502d9ee22514332c9961e106e59329158c23f18b02cf83ab0cd8ebc2ad16322ef58bcd159b93b06379ba585d4677a63707a96050d0b6ad4d9f4c8f2883bed5944de111716cb5f79966fe29963af9bb311346c55577b0ae7a645f0b6ff731aeb2b4cbaa95bd98ee70656859d5420834d35d6755868dec0044041a07813c2763b10e49c57a2024c20e1c7b893542bac7b7593da049c2b0e9121df0286d4b1ae3a28d18032df01768170a37f6a0e39d06f3298b1c20c370eb3f4739d7879b1e60f265c5dbbe3d158e7bac37e4095920a36ca7f2f750441acf61980cf2469559e04be8ef51193cd92c00d5afb630951b5036886d7c2c9c42a958f9335e3f07ec57d257408284ed330ec7e49ef52ccadeb50ae9108be2f58f83be89dce56865d52f2bf28d186f5f4b05f29c5d3e8a7f5eb5f9a1850aeec3cbcd468a10e471fe231cf40ea99974d61a469b67a8e19407836c6f2b36b6ad0b7ba02b598849482f0ee3f5230f29fab10dd9ecf4655efbb9083bcaad4ef5d8cdc0978d36d6d1c85b0e31125ca94a172812f79cd9b9eedcf5c72d90c5cd58b907e1872fff13926caf9f4e348668144b7b32656467bb5e8e78a598c306905caae926a4c4b2936144c9737514effe4354ff0ca7a12531b1aceea8e2f5a15daf6a69f923e230c91ff94c4a706aaaa6dc4c9248bd7772d3c1d75a98e170adc962b0521e8efdb230829bb0a047884cc5c99c326f99d0ce47d"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "db76cd217a4ee860785da6bcd11e3e0424c466f8c01eea3c21a8708776df047be5a3d245a480b067107d8837e0342401fc73527df93ca7aa88d5fe35dc6639ce1489b63b8d6e5af291221e3fd268ebc9cba28dbc13ea8398d3a9f3eeb48246029248a2cca44b8d6c5d0280c01fb3721566a54817c8e3411378f241830014548bbccfa1acdc55086d968d2729bdb6b7b81d73eb57f0f8aee1e18a9dd666ad0617b5bcd8bfc19acc9b3731b45c027685d8ea1260a33d7970a2d1c68b34cf"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "130ff40bbbb2cb2edd44269e13f76d7cf9f3bf7306db9fe52a403f1c9a85ae09efd8b6adb67ab411cf23e4b6e88b0e752c7ca358925a8d16638c793711358e69d1d2d9ee10a95df66b37a085"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "6109acdfb9f338c708e9be3399c9a8a5b6376a0c4611c5257b9d9271f7379fd7648e0b637487d9ece49dabd8be3c16a88fcb3be06bc67cfb598badd73cd8896b7aeca3e1e4eecc2a23167dd28ad2e6b44ed321672a305140a7416fd3183e977c0475533f45a975ac7e4e8b65159285d39c4be222c01224b5cf"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x22a8}, 0x1, 0x0, 0x0, 0x810}, 0x20040001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d40), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x24, r7, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003140)={&(0x7f0000003080)={0x94, 0x3ed, 0x10, 0x70bd28, 0x25dfdbff, "47ac29a48961934bd61e21d37f61ad41bc87f25585ff025b998a0581463548ffde934b26ca3c78fb2c7d5adab79e9a126d69964d7990d2c0f481b0a339919c82a432c5af3c2564fee4970db584fe4e6d411499cc94e1f7036c9d344747598320410befdba0035fef17b06139c4f420ce6d328a53872fdc4b4c33f1c1a334ed21df26f7", ["", "", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x84000) 15:55:45 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) r2 = accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) close(r2) r3 = accept$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) ioctl$FIBMAP(r3, 0x1, &(0x7f00000001c0)=0x3) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, &(0x7f0000000280)="070ce2351924f19f6193607e6bfeaba96b5cc89640fd4a06ab4cbcd85729e96350e3e39e78268af01dc4351a1278decca47254159f47a28b1e2f6eb612ca3b9a9c0d47b11e723e631c5e0776e35bc9f53988fca337b627fd0f7295a7d4357a7112e72913d93b8bc45cd1edd0eeb1529b7ae9de232185f881", 0x78, 0x102, 0x1, {0x0, r6}}, 0x4) syz_io_uring_setup(0x2015, &(0x7f0000000340)={0x0, 0xa44d, 0x10, 0x0, 0x3f}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r8 = syz_mount_image$iso9660(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x5, 0x4, &(0x7f0000000840)=[{&(0x7f00000004c0)="999803e974ca69011ba40d851584f274298625535a32373062097089d0f67fc4df95f611ed476ec70cd7f8e5571b9154f6d715272a0a1f6c2e255b3b2146b363bb542225af34ddd97f2044db3020a028e341a06b42ed2db86f80541ece91bf0006540f46395fbcb31d59dcf0f52746013ed645d402e9550b447a2282cc18fd08812e45da06008293186e579ed6e051a56af8cd9514e812d3ea515383f8e06b0b1bd034f2a2e718f05e9a10b6a930b9d75ee47b050153d8b2ec3bc7ab64504c5854eda5a689b3ce8d40296a7c90dad6e866", 0xd1, 0x7}, {&(0x7f00000005c0)="072ab3552cde3bfb573ede193236ddcb3e0cc9f0f07edc00d6381914f4bcc6e97b6e0ecd9dd16f9c77c1503381337ae3bfcb6c56cda5842320cf9e99ff8595f8dea2ce00f9c532479ec17fd8fde3ba0615cc0dfa3989fd53faae4b7a8b1000c4b229e78e7341f0b872761e2131a4d63fffe4bd32519e2833ff29d9e14ad3dd780d30435ab6f21f0120c308657122fca5bf7c638937f3825e629ab58eb1370a661e7a227331f2724dac8b921d2c2cd2b85c285ec1fbf3a3ed2545635fec7fde4e378ac36c", 0xc4, 0x80000001}, {&(0x7f00000006c0)="df24ac70f79904a16a1fce277ad8aad5fdb00d29e796b3ee5f58b7e7d17922d937cd49c5d464db859fdc10b426db76953b066a0729088d9e16d3574fa26e968442144ad0052c41de8d7a7070cda386821946b270255e71053a42b42973219bd9ac5971e9d17b80cf4c3f3910fd9b83c4a590cb89db9f3fe1b2d62abeb24559e6e9ad46f2e12834f9a0af80aed1ae380e8898ac4a347a0579a76cf0086a3d55a1e2e3a504295036fe", 0xa8, 0x2}, {&(0x7f0000000780)="93fff3e806091b87b91270c2cb03134dabb3d5f91d1ab658dfa866488845176397a9525faf2f053380b6b761f458aca2d520ff173d1760798ec3466925c2b2bd274b9801deb8637f07ae565f42486b1394c9585e6f7c66f38cde46661e6406a971d597942dc5156795616a252337c0110a92b1ce6606d78bdb3560968d2ca57c0b2e4312c4e85630f382a75d3ffa00e17718ce1fd85ec8de6eefbb3e501d38837e9616fe9c2389242249989640a4bf456d9a09a54d81db07", 0xb8, 0x4764000000000000}], 0x80, &(0x7f00000008c0)={[{@unhide}, {@uid={'uid', 0x3d, r1}}], [{@dont_hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_lt={'euid<', r1}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) syz_io_uring_submit(0x0, r7, &(0x7f0000000a80)=@IORING_OP_STATX={0x15, 0x5, 0x0, r8, &(0x7f0000000940), &(0x7f0000000a40)='./file0\x00', 0x20, 0x2000, 0x3, {0x0, r6}}, 0x101) r9 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) r10 = fork() ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000b00)=r10) ptrace$getsig(0x4202, r10, 0x9, &(0x7f0000000b40)) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000bc0)) 15:55:45 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/4096) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001000)={0x0, 0x2, 0x7f, 0x1f}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000001040)=""/131) r1 = dup(r0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001100)=""/168) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000011c0)={0x3b, 0x0, '\x00', [@pad1]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001200)={0x84, 0x14, 0x0, 0x1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00', @local, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}, 0xa8) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000012c0)=""/78) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001340), 0x1, 0x0) pwrite64(r2, &(0x7f0000001380)="4dbb5db3e4a6e31449e09eacffe2a81f79cc7d01c5e72df70793e5a5b71b8cc08f1660b8bd2de247a7a0d4b0fa85ae0a0f15621dfd72847835e8bcf61bb4ced28fa9ef99b8b328dc7caa357242a574d8c12e259171d48370fd32fbffd447517edbe458f693d0ba898fa087c9ad209832367cd521cca9015ed85b8b9e9ca21a186fdf54002d98af07ac656d8eba8eb0d722d6670f207435df", 0x98, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fgetxattr(r3, &(0x7f0000001480)=@known='trusted.overlay.upper\x00', &(0x7f00000014c0)=""/4096, 0x1000) fchdir(r0) ioctl$int_out(r3, 0x5460, &(0x7f00000024c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002500)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002540), 0x4800, 0x0) poll(&(0x7f0000002580)=[{r4, 0x2000}, {r5, 0xa000}, {r0, 0x142b}, {r0, 0x608}, {r1, 0x12}, {r6, 0x4000}], 0x6, 0x400) fsync(0xffffffffffffffff) [ 74.487815] audit: type=1400 audit(1664553345.295:6): avc: denied { execmem } for pid=287 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:55:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7f, 0x101000) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000100)={{r1}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000080)={0x0, 0x5, 0x9, 0x7, {0x22, 0x40, 0xfffffffffffff3be, 0x1000}, [0x400, 0x3, 0x9, 0xe622, 0x5e3d]}}, @subvolid=0x5}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000001100)=0xfffffffffffffff7) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001180)={0x1e0, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff2fa1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffd079}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000001, @mcast1, 0x3ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfe0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f362ac}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x447c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb47}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc53777ef52c21e66}, 0xc0) pwritev2(r1, &(0x7f0000001480)=[{&(0x7f0000001400)="807abbe94a70c8f0a0ba861632cc1185dce6c330adb7e5a2376bdee77d70bd298f243b321d35ff0b05fb84fcf3984b1411739494f1d4267fd6a4", 0x3a}, {&(0x7f0000001440)="4804dd7cfc4050c6e128e3510c070a38273d2b15656d93a4c8e0bdca", 0x1c}], 0x2, 0x7, 0xffff, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044850}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x44, r3, 0x126, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000100) unlinkat(r1, &(0x7f0000001740)='./file0\x00', 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f00000017c0)={0x1e0, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_IE={0x1bd, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @measure_req={0x26, 0x72, {0x80, 0x7, 0x2, "56bd6d32f097f30871b30ca7444d1c9a59f94abbe7ad29a38d4d45aedd9f2f458feea77df2da17afc5262a2bcbf89a39bba0206784300f70c935b852df6fd4b466fc8c43c47793c947e8946715c5ebc2c922079dda13971c00204cbeaa5472dcdaf26a88aca209334dc5097c1ffaf2"}}, @perr={0x84, 0x43, {0x1, 0x5, [@not_ext={{}, @broadcast, 0x3, "", 0x9}, @not_ext={{}, @broadcast, 0x5f, "", 0x25}, @not_ext={{}, @broadcast, 0x12000, "", 0x8}, @not_ext={{}, @broadcast, 0x0, "", 0x2}, @not_ext={{}, @broadcast, 0x10000, "", 0x1f}]}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @random={0x4, 0xb3, "21fe9a70fbe60ead0174c08b007c549ff9772aff6d8b2b7f16341ac8a0dfaead4bfa7175663ed42393a2c22fd7cbb55a14d63b135208b8b53aa6a969de3e1930762fadd99e75ebc620f43c5a83f73a4cbf1d6a440bb896617f6b1523326099a717d8d1c60f95103e973c424284780167a5c9befe5e07d903f8cfaa9992ade7386646d80d90caf120299bc3fd0bc70e6b1b43d1a00a1fd4216d5c706f228784088952b232fa6256ae1f97a3f49f3a5bc15982d2"}, @cf={0x4, 0x6, {0x80, 0x0, 0x7, 0x8d}}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xb2}, @random_vendor={0xdd, 0x12, "c4310671284a27f0c611ceae1500a7dbd415"}]}]}, 0x1e0}}, 0x20000000) r4 = openat2(r1, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x8400, 0x10, 0x2}, 0x18) clock_gettime(0x0, &(0x7f00000052c0)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001b00)=""/34, 0x22}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/214, 0xd6}, {&(0x7f0000002c80)=""/227, 0xe3}, {&(0x7f0000002d80)=""/3, 0x3}, {&(0x7f0000002dc0)=""/79, 0x4f}], 0x7, &(0x7f0000002ec0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002f00)=""/78, 0x4e}, {&(0x7f0000002f80)=""/67, 0x43}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/159, 0x9f}], 0x4, &(0x7f0000004100)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000004280), 0x0, &(0x7f00000042c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000004340), 0x6e, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/45, 0x2d}], 0x1, &(0x7f0000004440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000004540), 0x6e, &(0x7f0000004900)=[{&(0x7f00000045c0)=""/43, 0x2b}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/218, 0xda}, {&(0x7f0000004800)=""/206, 0xce}], 0x4, &(0x7f0000004940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000004a00), 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004a80)=""/12, 0xc}, {&(0x7f0000004ac0)=""/76, 0x4c}, {&(0x7f0000004b40)=""/1, 0x1}], 0x3, &(0x7f0000004bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x118}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000005000)=[{&(0x7f0000004d80)=""/95, 0x5f}, {&(0x7f0000004e00)=""/140, 0x8c}, {&(0x7f0000004ec0)=""/126, 0x7e}, {&(0x7f0000004f40)}, {&(0x7f0000004f80)=""/103, 0x67}], 0x5, &(0x7f0000005080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x58}}], 0x7, 0x22, &(0x7f0000005300)={r5, r6+10000000}) fchownat(r4, &(0x7f0000001ac0)='./file0\x00', r11, 0x0, 0x400) recvmmsg$unix(r10, &(0x7f000000aa00)=[{{&(0x7f0000005340)=@abs, 0x6e, &(0x7f0000006680)=[{&(0x7f00000053c0)=""/169, 0xa9}, {&(0x7f0000005480)=""/246, 0xf6}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/38, 0x26}, {&(0x7f00000065c0)=""/13, 0xd}, {&(0x7f0000006600)=""/97, 0x61}], 0x6, &(0x7f0000006700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f00000067c0)=""/119, 0x77}], 0x1, &(0x7f0000006880)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000006980)=@abs, 0x6e, &(0x7f0000008d80)=[{&(0x7f0000006a00)=""/161, 0xa1}, {&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/66, 0x42}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/207, 0xcf}, {&(0x7f0000008c40)=""/96, 0x60}, {&(0x7f0000008cc0)=""/183, 0xb7}], 0x7, &(0x7f0000008e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008e40), 0x6e, &(0x7f000000a2c0)=[{&(0x7f0000008ec0)=""/23, 0x17}, {&(0x7f0000008f00)=""/247, 0xf7}, {&(0x7f0000009000)=""/43, 0x2b}, {&(0x7f0000009040)=""/4096, 0x1000}, {&(0x7f000000a040)=""/89, 0x59}, {&(0x7f000000a0c0)=""/247, 0xf7}, {&(0x7f000000a1c0)=""/65, 0x41}, {&(0x7f000000a240)=""/85, 0x55}], 0x8, &(0x7f000000a340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f000000a380)=@abs, 0x6e, &(0x7f000000a4c0)=[{&(0x7f000000a400)=""/62, 0x3e}, {&(0x7f000000a440)=""/66, 0x42}], 0x2, &(0x7f000000a500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f000000a600), 0x6e, &(0x7f000000a940)=[{&(0x7f000000a680)=""/203, 0xcb}, {&(0x7f000000a780)=""/92, 0x5c}, {&(0x7f000000a800)=""/242, 0xf2}, {&(0x7f000000a900)}], 0x4, &(0x7f000000a980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x6, 0x0, &(0x7f000000ab80)={0x77359400}) kcmp(r12, r7, 0x6, r9, r8) lstat(&(0x7f000000ad80)='./file0\x00', &(0x7f000000adc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f000000abc0), &(0x7f000000ac00)='./file0\x00', 0x2, 0x1, &(0x7f000000ad40)=[{&(0x7f000000ac40)="e93a58ba50271084a19ffc3ad917405b3a88752e93f5328337817af43ef5de69685d9246f1e221325c56ae5210090b766182ccae15e0fa313982c671f91e60f69f25e052689e916094116e0284c853ffda008c34a24b3c500ef91d027032da78e2638a70669a21ec91cfd46555ff517851769e985079293414e092cdd1bf0032e5e967dcda709897e6c1600a5f7ccb9373d79a7910f7fdd2f973202ad8f9b5b30e4bdd7368b24f21330b03f160231c4c0316dabef6e91b6c1ff7efb4a11eb646777ce9f56fd744baba25befb0bfe8f27d75b56", 0xd3, 0x4a}], 0x800000, &(0x7f000000ae40)={[{@fat=@sys_immutable}, {@nodots}, {@fat=@check_normal}, {@dots}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}], [{@euid_eq={'euid', 0x3d, r13}}]}) 15:55:45 executing program 5: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='&\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40943, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000140)={0x6, 0x9, 0x2, 0x0, 0xff, 0x3}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x8, 'vlan1\x00', {'bridge_slave_1\x00'}, 0x3}) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/126, 0x7e}], 0x6, &(0x7f0000000640)=""/42, 0x2a}, 0x40010002) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='async\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000700)=@req={0x1, 0x400, 0x7f}, 0x10) getpeername(r1, &(0x7f0000000740)=@hci, &(0x7f00000007c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) fsmount(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4048040) ioctl$CDROMGETSPINDOWN(r1, 0x531d, &(0x7f0000000980)) r4 = syz_open_dev$vcsa(&(0x7f00000009c0), 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x840) perf_event_open$cgroup(&(0x7f0000000b40)={0x3, 0x80, 0xf1, 0x5, 0x9, 0x0, 0x0, 0x5, 0x400, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d1, 0x2, @perf_bp={&(0x7f0000000b00)}, 0x20, 0x6, 0x3ff, 0x6, 0x3, 0xd1, 0x200, 0x0, 0x7, 0x0, 0x8}, r3, 0x7, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) 15:55:45 executing program 6: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @remote}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x3, 0x422, [0x20000080, 0x0, 0x0, 0x200001de, 0x20000472], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x8, 0xf5, 'veth0_virt_wifi\x00', 'veth1_to_batadv\x00', 'veth0_to_batadv\x00', 'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xde, 0x12e, [], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9d0, 'syz0\x00', {0x852f}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x5, 0xc, 0x444e, 'veth1_to_team\x00', 'geneve1\x00', 'bridge_slave_0\x00', 'geneve1\x00', @multicast, [0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@common=@dnat={'dnat\x00', 0x10, {{@remote}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}, {0x9, 0x81, 0x6000, 'netdevsim0\x00', 'lo\x00', 'veth1_to_batadv\x00', 'erspan0\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @random="2b4fee28b457", [0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0x156, 0x186, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'gretap0\x00', {0xff}, 'bridge_slave_1\x00', {}, 0xa, 0x1a}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x1, 0x81, 0x0, 0x0, "ca1d1410193b4118b0bd50fa34dd8ba8c0512be462f1b6b22bdad9c633a4f96745dce22cdf7dad73ff7b11a2c5e229ab69c4365d65faf8baf7dd8ff6a97e9e5e"}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3f}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x49a) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)={0x3b, @empty, 0x4e20, 0x3, 'none\x00', 0x18, 0x80000001, 0xd}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000600)={0x9, 0x18, [0xffffffff80000001, 0x1e0, 0x7, 0x200], &(0x7f00000005c0)=[0x0, 0x0, 0x0]}) r1 = syz_mount_image$nfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x1, 0x2, &(0x7f0000000800)=[{&(0x7f00000006c0)="99e5b780fd56f316f83e01cc7cb3f014c2ecfe854c64", 0x16, 0x5}, {&(0x7f0000000700)="3c59c6f6f5c6d8df272d2cf7484dcf75888afb09511f8cacd137324d4a8c6bc03f01c3dedf4674854b40f42541f2562276aaa18f1cfdc3df0a34a54ef744cf8b18bb62bcf1fa5283291d202f841fbe9e82ccf8769021c876c6cf222a10e008f6e0fb887db8d6114806ae0c22bfcbdbf66f0ff643fec93f7681d34f44241aad2a1f8fd3677a44899c9a7491d02e8222d87ab729569a7c610657163dad69be0852790a5afbfe97e0223f7f1b53faa55682067b41993aac1672e262c146bc3e362924440ecd0535230c6c039440e35470b8c1cdbae164a0544d943a18d628", 0xdd, 0x80000000}], 0x104000, &(0x7f0000000840)={[{'('}, {'IDLETIMER\x00'}, {'veth0_macvtap\x00'}, {'@'}, {')?/'}, {}, {'geneve1\x00'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x13}}]}) fsetxattr$security_capability(r1, &(0x7f00000008c0), &(0x7f0000000900)=@v1={0x1000000, [{0x100, 0x9d}]}, 0xc, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mkdirat(r1, &(0x7f0000000980)='./file0\x00', 0x182) r3 = pidfd_getfd(r2, r1, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000009c0), 0x8001, 0x400001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = openat(r0, &(0x7f0000000a40)='./file0\x00', 0x6405c1, 0x1d0) pwritev2(r5, &(0x7f0000000c40)=[{&(0x7f0000000a80)="1970e651678153d06f716d9082d7d191ac9c62421bb41af155ec6d25d58599455bf10d31f6bd650c739e2f7186476edfe6fa682de733e54835e4444ae705f6df6f785ab4f57c38f5d61633aba0c05e6b5ce5a6eab76c9bac17197357", 0x5c}, {&(0x7f0000000b00)="8375dcb7adafe9162c33734f29f18d15f1da1e59a79396ca79c833f57218fdbd53c45e027b99a96f43a6544796c2fe432f75d5df3f477ac765431fe2d0fffa03d1262dd8744bb9fc7facbd5ad373ba548980fd65ac5e99a71867351f8d90c41604a71fbc708494703e73846d2a488083fe9daaf613e1d0fdd0c5f89211bf43ca47094761c963", 0x86}, {&(0x7f0000000bc0)="bc28c73e7c1e240bbe848d1e5eb773475b375a78e86fc0d710ef047c4613dc5975e93a283089644b8b9b93bfcc1faaaa6aecd373e798147efb6ba5b5bc250f16f0edcd8f6454a1ed4001478f3871feff4720b4a253e909b59c253191", 0x5c}], 0x3, 0x6, 0x1, 0x1f) openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x8a400, 0xa0) pidfd_open(0x0, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000cc0), 0x4, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000d40)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x81}, @isdn={0x22, 0x1f, 0xfe, 0x3, 0x2}, @nfc={0x27, 0x1, 0x2, 0x5}, 0xfffd, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000d00)='bond0\x00', 0x6, 0x100000000, 0xfffb}) pwritev(r2, &(0x7f00000013c0)=[{&(0x7f0000000dc0)="19030407af410a50419ee05d2f19486d7c25e702aba309beeae99d209bc4f55bdd8bc89466731c089d8bffa3ef84fffa97c42654817405e4471c04927bd7cdeee4659b2961cce7633da74d535b9f69f0ef0b3c", 0x53}, {&(0x7f0000000e40)="49865013e6d5dd0cee4cb49b4326e763db011c243247b2a7a915", 0x1a}, {&(0x7f0000000e80)="92a68bc708ed58126c85d1f6a66872b3df534046f6fc32bcdd3839ac5605a6b72939cc41254f610a4d0a0bc5faf5fbf1f1d415fd536da14401524c7558eb65bc1bc975219e346e7084524bd4237ed451dc93e023f8c0c6f9f3997f6b247eee8b0b3b2c9e024a81e85e30906f5270a22c8f3d0f7dff02e51df01a6dbcc016b68914ea52f4bfe23e85af24e0eca7b160a5a3061b08b9254fe51545998c329fd20084b36c9bdec4fbf369dd2c7ef4cc16cdff69e0c3974faeffa2c8ba8166e071fc0607ebe146501e0efd", 0xc9}, {&(0x7f0000000f80)="12dc67c1f719790616a48ae74b9cc33897521e9ef7e68a9325df5ccc5911e02d884fa77f832aa475c16ec0d3bde6cd116b92c7779c9cd19e0332a6897ed34d3a68e16f3e73fd935e3af0856d9067f176ab628e81cad0400dd55b51d3a91e3a803b8f76a5b6705981e379396abfe92f3c574c203da4403f1d4e0a59", 0x7b}, {&(0x7f0000001000)="153588ceae9cd67440e0a2df1047a517b79992bc6cd2a4b56406cf1b58a34192bf8e55759cb3b91deff5b89db9a5f9bbfd9e365e19405d484695194e24c8f10cbf63a5453ca9e803dee6a2d1fb34ecde5da7545de1dc6c53a76afb2c957388c9bb6891a77edab9d38cc58fb13151657f88098a56e18baa88f7caaaf7eb050e5b0e378e7fb1b6fab3310b2088d0cc190ba90461f11a2abe1e029f5bf8e7a952ff5a16519a57264e38f1dbd5c4bfbafb72594daaae37a92a2734625fab0ce16f81dc29ef", 0xc3}, {&(0x7f0000001100)="de10b8d93b8f31497802d248d12c08c4c0e80278a557f418e96835e05b11fdb7e396b7a44b7da8a42e49872b7047cb4512d0bae0d2f65f0f48ccd87cf1f28f4725071b403a723ca0ed226c2a851c974143613b49cdfbf17ccd770e5e", 0x5c}, {&(0x7f0000001180)="4c25e4fc5b0301d736dc7a3f1593fc2cc5ed865e15451aa706b00480f79331500b1473459903bb93251a3e82184f0b0258725d257c1b10417f8738b3812529afbe704c76a02bc125880d0835dfe77f328a15e6728e10119a9082f5efda792c8371c8ba05f6cc9014dc207c18cf4e4508", 0x70}, {&(0x7f0000001200)="a8f0ed5f0d80f0faf751b5c196be31da26bcc5aaddfdefec8b8cb6249adbdabad4cf9fd0b7289727f14e19c07b37130aeacbb10dabafa92a02420960f26164c9f2fe2a599d2f8a137ee52439ee", 0x4d}, {&(0x7f0000001280)="ee191c303e3fb4aca0cc327aaff59e6e2add83a74901b50e77107a17c64e6fb6467b4e93ca1cf515dd430eb96a2ce4f7a51f72e0fbbb743b5c", 0x39}, {&(0x7f00000012c0)="5b0b3ed6c07639536882e4beeeb9c08f873a1c66f2d1b654d5815416fb7aa40aa1e3364608418e7e8466f0e041d844b46ff54b549094a35cf50ee92f730ae7fda8d8ccb23dc85c2b57e6973ed1463e92fb5374d55346bc8365661bcc968a558333eca705db2a2cc9b7934b80932639926de0ba0e501f45f15806e8e0e0bd148beef1c97f334ac2e993fa5e4ea24cae969e0312d94522e85a1e65c7aa541d3335ff53af66806481d1221da820307ca4fb4b26bf0ad495c39d13b90bb86291c2ba16ec1596d51387fa25b73a3318dfd63f64ad1de0d9491104d9913f0ec3f26689a0fd2e8f4900a1436144740e5c21beb2c1f076a4", 0xf4}], 0xa, 0x7fff, 0xa00) openat2(r3, &(0x7f0000001480)='./file1\x00', &(0x7f00000014c0)={0x4000, 0x120}, 0x18) 15:55:45 executing program 7: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, @qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, @can={0x1d, 0x0}, @rc={0x1f, @any, 0x20}, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='veth1_macvtap\x00', 0x1c, 0x100}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001e40)={'syztnl0\x00', &(0x7f0000001dc0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x3, 0x80, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x8, 0x3ff8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000020c0)={'syztnl1\x00', &(0x7f0000002040)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x94, 0x3f38, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x9}}) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000002100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002200)={'syztnl2\x00', &(0x7f0000002180)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x9, 0x8, 0x1, @local, @mcast1, 0x10, 0x80, 0x0, 0x800}}) accept4$packet(0xffffffffffffffff, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002280)=0x14, 0x80000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002400)={&(0x7f00000022c0)={0x130, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x64000) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000002480)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x10) r10 = accept(r6, &(0x7f00000024c0)=@l2, &(0x7f0000002540)=0x80) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000002580)={'veth1\x00', {0x2, 0x0, @private}}) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f00000025c0)={0x1, 0x9, 0xfffffff8, 0x8, 0x100}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000002680)={'ip6tnl0\x00', &(0x7f0000002600)={'ip6gre0\x00', r5, 0x4, 0x8, 0xfe, 0x6, 0x4, @local, @private1, 0x80, 0x20, 0x5, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000002740)={'syztnl0\x00', &(0x7f00000026c0)={'erspan0\x00', r4, 0x0, 0x20, 0x56, 0x3, {{0xa, 0x4, 0x2, 0x2a, 0x28, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x13, 0xd5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}]}}}}}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000002780)={r12, 0x1, 0x6, @remote}, 0x10) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000027c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000002800)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000002840)={{{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e24, 0x800, 0x5, 0x60, 0x0, 0x16, r8, r2}, {0x8, 0x20, 0x80, 0x9, 0x0, 0x80, 0x6, 0xfff}, {0x4, 0x4d10e47a, 0xffff, 0x4}, 0x3ff, 0x6e6bb8, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4d6, 0x33}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x3, 0x9, 0x1, 0x3, 0x8}}, 0xe8) [ 75.803499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.807150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.808512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.811981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.815496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.818000] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.819332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.820763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.822377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.829241] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.831983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.834275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.836099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.843159] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.863813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.871166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.873277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.874408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.880161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.882239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.883577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.887685] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.912404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.914056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.916144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.917006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.917401] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.920054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.923596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.925362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.925805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.927079] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.928537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.929248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.930888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.932942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.934240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.934642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.938052] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.938546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.939860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.945486] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.946364] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.947160] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.950215] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.954384] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.955785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.973822] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.976475] Bluetooth: hci6: HCI_REQ-0x0c1a [ 77.878405] Bluetooth: hci1: command 0x0409 tx timeout [ 77.878987] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 77.879422] Bluetooth: hci0: command 0x0409 tx timeout [ 77.942270] Bluetooth: hci4: command 0x0409 tx timeout [ 77.943194] Bluetooth: hci3: command 0x0409 tx timeout [ 78.006113] Bluetooth: hci5: command 0x0409 tx timeout [ 78.006984] Bluetooth: hci7: command 0x0409 tx timeout [ 78.069981] Bluetooth: hci6: command 0x0409 tx timeout [ 79.925975] Bluetooth: hci0: command 0x041b tx timeout [ 79.926421] Bluetooth: hci1: command 0x041b tx timeout [ 79.990085] Bluetooth: hci3: command 0x041b tx timeout [ 79.990542] Bluetooth: hci4: command 0x041b tx timeout [ 80.054478] Bluetooth: hci7: command 0x041b tx timeout [ 80.054945] Bluetooth: hci5: command 0x041b tx timeout [ 80.117999] Bluetooth: hci6: command 0x041b tx timeout [ 80.933636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.935880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.945347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.958495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.991039] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.003750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.026996] Bluetooth: hci2: HCI_REQ-0x0c1a [ 81.974019] Bluetooth: hci1: command 0x040f tx timeout [ 81.974125] Bluetooth: hci0: command 0x040f tx timeout [ 82.038050] Bluetooth: hci4: command 0x040f tx timeout [ 82.038668] Bluetooth: hci3: command 0x040f tx timeout [ 82.101963] Bluetooth: hci5: command 0x040f tx timeout [ 82.102695] Bluetooth: hci7: command 0x040f tx timeout [ 82.166000] Bluetooth: hci6: command 0x040f tx timeout [ 83.062002] Bluetooth: hci2: command 0x0409 tx timeout [ 84.021995] Bluetooth: hci0: command 0x0419 tx timeout [ 84.022970] Bluetooth: hci1: command 0x0419 tx timeout [ 84.087026] Bluetooth: hci3: command 0x0419 tx timeout [ 84.087867] Bluetooth: hci4: command 0x0419 tx timeout [ 84.150074] Bluetooth: hci7: command 0x0419 tx timeout [ 84.150964] Bluetooth: hci5: command 0x0419 tx timeout [ 84.215000] Bluetooth: hci6: command 0x0419 tx timeout [ 85.110066] Bluetooth: hci2: command 0x041b tx timeout [ 87.158116] Bluetooth: hci2: command 0x040f tx timeout [ 89.207009] Bluetooth: hci2: command 0x0419 tx timeout [ 136.947123] FAT-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value 15:56:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r3, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r3, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffb) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r4) openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r5, 0x5327) [ 136.991685] audit: type=1400 audit(1664553407.799:7): avc: denied { open } for pid=3870 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.993759] audit: type=1400 audit(1664553407.799:8): avc: denied { kernel } for pid=3870 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.043095] ------------[ cut here ]------------ [ 137.043133] [ 137.043138] ====================================================== [ 137.043146] WARNING: possible circular locking dependency detected [ 137.043154] 6.0.0-rc7-next-20220929 #1 Not tainted [ 137.043168] ------------------------------------------------------ [ 137.043175] syz-executor.4/3871 is trying to acquire lock: [ 137.043188] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 137.043267] [ 137.043267] but task is already holding lock: [ 137.043273] ffff88800daebc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.043330] [ 137.043330] which lock already depends on the new lock. [ 137.043330] [ 137.043336] [ 137.043336] the existing dependency chain (in reverse order) is: [ 137.043343] [ 137.043343] -> #3 (&ctx->lock){....}-{2:2}: [ 137.043373] _raw_spin_lock+0x2a/0x40 [ 137.043397] __perf_event_task_sched_out+0x53b/0x18d0 [ 137.043422] __schedule+0xedd/0x2470 [ 137.043453] schedule+0xda/0x1b0 [ 137.043482] futex_wait_queue+0xf5/0x1e0 [ 137.043508] futex_wait+0x28e/0x690 [ 137.043530] do_futex+0x2ff/0x380 [ 137.043551] __x64_sys_futex+0x1c6/0x4d0 [ 137.043574] do_syscall_64+0x3b/0x90 [ 137.043611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.043639] [ 137.043639] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 137.043669] _raw_spin_lock_nested+0x30/0x40 [ 137.043693] raw_spin_rq_lock_nested+0x1e/0x30 [ 137.043720] task_fork_fair+0x63/0x4d0 [ 137.043757] sched_cgroup_fork+0x3d0/0x540 [ 137.043788] copy_process+0x4183/0x6e20 [ 137.043811] kernel_clone+0xe7/0x890 [ 137.043832] user_mode_thread+0xad/0xf0 [ 137.043855] rest_init+0x24/0x250 [ 137.043880] arch_call_rest_init+0xf/0x14 [ 137.043920] start_kernel+0x4c6/0x4eb [ 137.043952] secondary_startup_64_no_verify+0xe0/0xeb [ 137.043982] [ 137.043982] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 137.044012] _raw_spin_lock_irqsave+0x39/0x60 [ 137.044035] try_to_wake_up+0xab/0x1930 [ 137.044064] up+0x75/0xb0 [ 137.044095] __up_console_sem+0x6e/0x80 [ 137.044129] console_unlock+0x46a/0x590 [ 137.044164] vprintk_emit+0x1bd/0x560 [ 137.044199] vprintk+0x84/0xa0 [ 137.044235] _printk+0xba/0xf1 [ 137.044259] regdb_fw_cb.cold+0x6c/0xa7 [ 137.044295] request_firmware_work_func+0x12e/0x240 [ 137.044337] process_one_work+0xa17/0x16a0 [ 137.044374] worker_thread+0x637/0x1260 [ 137.044411] kthread+0x2ed/0x3a0 [ 137.044441] ret_from_fork+0x22/0x30 [ 137.044468] [ 137.044468] -> #0 ((console_sem).lock){....}-{2:2}: [ 137.044499] __lock_acquire+0x2a02/0x5e70 [ 137.044535] lock_acquire+0x1a2/0x530 [ 137.044569] _raw_spin_lock_irqsave+0x39/0x60 [ 137.044593] down_trylock+0xe/0x70 [ 137.044626] __down_trylock_console_sem+0x3b/0xd0 [ 137.044661] vprintk_emit+0x16b/0x560 [ 137.044697] vprintk+0x84/0xa0 [ 137.044732] _printk+0xba/0xf1 [ 137.044754] report_bug.cold+0x72/0xab [ 137.044789] handle_bug+0x3c/0x70 [ 137.044826] exc_invalid_op+0x14/0x50 [ 137.044863] asm_exc_invalid_op+0x16/0x20 [ 137.044889] group_sched_out.part.0+0x2c7/0x460 [ 137.044928] ctx_sched_out+0x8f1/0xc10 [ 137.044965] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.044989] __schedule+0xedd/0x2470 [ 137.045019] schedule+0xda/0x1b0 [ 137.045048] futex_wait_queue+0xf5/0x1e0 [ 137.045072] futex_wait+0x28e/0x690 [ 137.045094] do_futex+0x2ff/0x380 [ 137.045115] __x64_sys_futex+0x1c6/0x4d0 [ 137.045138] do_syscall_64+0x3b/0x90 [ 137.045174] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.045202] [ 137.045202] other info that might help us debug this: [ 137.045202] [ 137.045208] Chain exists of: [ 137.045208] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 137.045208] [ 137.045241] Possible unsafe locking scenario: [ 137.045241] [ 137.045246] CPU0 CPU1 [ 137.045251] ---- ---- [ 137.045256] lock(&ctx->lock); [ 137.045269] lock(&rq->__lock); [ 137.045283] lock(&ctx->lock); [ 137.045297] lock((console_sem).lock); [ 137.045309] [ 137.045309] *** DEADLOCK *** [ 137.045309] [ 137.045313] 2 locks held by syz-executor.4/3871: [ 137.045329] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 137.045394] #1: ffff88800daebc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.045488] [ 137.045488] stack backtrace: [ 137.045494] CPU: 0 PID: 3871 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 137.045522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.045538] Call Trace: [ 137.045545] [ 137.045553] dump_stack_lvl+0x8b/0xb3 [ 137.045593] check_noncircular+0x263/0x2e0 [ 137.045630] ? format_decode+0x26c/0xb50 [ 137.045665] ? print_circular_bug+0x450/0x450 [ 137.045703] ? enable_ptr_key_workfn+0x20/0x20 [ 137.045736] ? format_decode+0x26c/0xb50 [ 137.045760] ? memcpy+0x39/0x60 [ 137.045785] ? vsnprintf+0x4ba/0x1600 [ 137.045810] __lock_acquire+0x2a02/0x5e70 [ 137.045840] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.045871] lock_acquire+0x1a2/0x530 [ 137.045894] ? down_trylock+0xe/0x70 [ 137.045917] ? lock_release+0x750/0x750 [ 137.045946] ? vprintk+0x84/0xa0 [ 137.045971] _raw_spin_lock_irqsave+0x39/0x60 [ 137.045986] ? down_trylock+0xe/0x70 [ 137.046008] down_trylock+0xe/0x70 [ 137.046030] ? vprintk+0x84/0xa0 [ 137.046054] __down_trylock_console_sem+0x3b/0xd0 [ 137.046078] vprintk_emit+0x16b/0x560 [ 137.046104] vprintk+0x84/0xa0 [ 137.046128] _printk+0xba/0xf1 [ 137.046144] ? record_print_text.cold+0x16/0x16 [ 137.046166] ? report_bug.cold+0x66/0xab [ 137.046191] ? group_sched_out.part.0+0x2c7/0x460 [ 137.046216] report_bug.cold+0x72/0xab [ 137.046242] handle_bug+0x3c/0x70 [ 137.046266] exc_invalid_op+0x14/0x50 [ 137.046291] asm_exc_invalid_op+0x16/0x20 [ 137.046309] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.046337] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.046353] RSP: 0018:ffff8880351ff8f8 EFLAGS: 00010006 [ 137.046365] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.046376] RDX: ffff88801ace3580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 137.046387] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 137.046397] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800daebc00 [ 137.046408] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 137.046423] ? group_sched_out.part.0+0x2c7/0x460 [ 137.046451] ? group_sched_out.part.0+0x2c7/0x460 [ 137.046478] ctx_sched_out+0x8f1/0xc10 [ 137.046506] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.046526] ? lock_is_held_type+0xd7/0x130 [ 137.046545] ? __perf_cgroup_move+0x160/0x160 [ 137.046560] ? set_next_entity+0x304/0x550 [ 137.046584] ? update_curr+0x267/0x740 [ 137.046610] ? lock_is_held_type+0xd7/0x130 [ 137.046629] __schedule+0xedd/0x2470 [ 137.046653] ? io_schedule_timeout+0x150/0x150 [ 137.046674] ? futex_wait_setup+0x166/0x230 [ 137.046695] schedule+0xda/0x1b0 [ 137.046716] futex_wait_queue+0xf5/0x1e0 [ 137.046733] futex_wait+0x28e/0x690 [ 137.046751] ? futex_wait_setup+0x230/0x230 [ 137.046768] ? lock_is_held_type+0xd7/0x130 [ 137.046786] ? find_held_lock+0x2c/0x110 [ 137.046807] ? futex_hash+0x12/0x200 [ 137.046833] ? futex_wake+0x158/0x490 [ 137.046848] ? fd_install+0x1c7/0x640 [ 137.046875] ? fd_install+0x1f9/0x640 [ 137.046895] do_futex+0x2ff/0x380 [ 137.046910] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 137.046933] __x64_sys_futex+0x1c6/0x4d0 [ 137.046951] ? __x64_sys_futex_time32+0x480/0x480 [ 137.046969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.046989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.047010] do_syscall_64+0x3b/0x90 [ 137.047035] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.047053] RIP: 0033:0x7fc32bfcbb19 [ 137.047064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.047079] RSP: 002b:00007fc329541218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.047095] RAX: ffffffffffffffda RBX: 00007fc32c0def68 RCX: 00007fc32bfcbb19 [ 137.047106] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc32c0def68 [ 137.047116] RBP: 00007fc32c0def60 R08: 0000000000000000 R09: 0000000000000000 [ 137.047126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc32c0def6c [ 137.047136] R13: 00007fff0ee6302f R14: 00007fc329541300 R15: 0000000000022000 [ 137.047154] [ 137.112198] WARNING: CPU: 0 PID: 3871 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 137.112900] Modules linked in: [ 137.113149] CPU: 0 PID: 3871 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 137.113748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.114588] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.115004] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.116317] RSP: 0018:ffff8880351ff8f8 EFLAGS: 00010006 [ 137.116695] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.117201] RDX: ffff88801ace3580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 137.117712] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 137.118233] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800daebc00 [ 137.118738] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 137.119247] FS: 00007fc329541700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 137.119826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.120246] CR2: 00007f13582e6040 CR3: 000000003c3ba000 CR4: 0000000000350ef0 [ 137.120760] Call Trace: [ 137.120950] [ 137.121121] ctx_sched_out+0x8f1/0xc10 [ 137.121415] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.121804] ? lock_is_held_type+0xd7/0x130 [ 137.122127] ? __perf_cgroup_move+0x160/0x160 [ 137.122456] ? set_next_entity+0x304/0x550 [ 137.122788] ? update_curr+0x267/0x740 [ 137.123093] ? lock_is_held_type+0xd7/0x130 [ 137.123425] __schedule+0xedd/0x2470 [ 137.123721] ? io_schedule_timeout+0x150/0x150 [ 137.124076] ? futex_wait_setup+0x166/0x230 [ 137.124408] schedule+0xda/0x1b0 [ 137.124671] futex_wait_queue+0xf5/0x1e0 [ 137.124982] futex_wait+0x28e/0x690 [ 137.125265] ? futex_wait_setup+0x230/0x230 [ 137.125598] ? lock_is_held_type+0xd7/0x130 [ 137.125921] ? find_held_lock+0x2c/0x110 [ 137.126234] ? futex_hash+0x12/0x200 [ 137.126526] ? futex_wake+0x158/0x490 [ 137.126821] ? fd_install+0x1c7/0x640 [ 137.127121] ? fd_install+0x1f9/0x640 [ 137.127417] do_futex+0x2ff/0x380 [ 137.127689] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 137.128132] __x64_sys_futex+0x1c6/0x4d0 [ 137.128441] ? __x64_sys_futex_time32+0x480/0x480 [ 137.128824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.129204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 137.129596] do_syscall_64+0x3b/0x90 [ 137.129893] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.130278] RIP: 0033:0x7fc32bfcbb19 [ 137.130561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.131935] RSP: 002b:00007fc329541218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.132508] RAX: ffffffffffffffda RBX: 00007fc32c0def68 RCX: 00007fc32bfcbb19 [ 137.133046] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc32c0def68 [ 137.133588] RBP: 00007fc32c0def60 R08: 0000000000000000 R09: 0000000000000000 [ 137.134122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc32c0def6c [ 137.134653] R13: 00007fff0ee6302f R14: 00007fc329541300 R15: 0000000000022000 [ 137.135191] [ 137.135370] irq event stamp: 646 [ 137.135625] hardirqs last enabled at (645): [] syscall_enter_from_user_mode+0x1d/0x50 [ 137.136336] hardirqs last disabled at (646): [] __schedule+0x1225/0x2470 [ 137.136959] softirqs last enabled at (506): [] __irq_exit_rcu+0x11b/0x180 [ 137.137602] softirqs last disabled at (497): [] __irq_exit_rcu+0x11b/0x180 [ 137.138240] ---[ end trace 0000000000000000 ]--- [ 137.157608] audit: type=1400 audit(1664553407.965:9): avc: denied { write } for pid=3870 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.394912] hrtimer: interrupt took 17042 ns 15:56:48 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r3, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r3, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffb) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r4) openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r5, 0x5327) 15:56:48 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x303c2, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x8000000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r3, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xa9, 0x7f, 0xc1, 0x8, 0x0, 0x6f, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0xb}, 0x40, 0x8, 0x1, 0x6, 0xffffffff, 0x40, 0x6, 0x0, 0x7fffffff, 0x0, 0x100}, 0xffffffffffffffff, 0x3, r3, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000400)=""/90, 0x5a}], 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffb) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002b80)=0x0) ptrace(0x10, r4) openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r5, 0x5327) [ 137.889293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.890288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.891789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.893476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.896614] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.898829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.901409] Bluetooth: hci3: HCI_REQ-0x0c1a 15:56:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000580)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fork() r4 = getpgrp(r3) process_vm_writev(r4, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/132, 0x84}], 0x7, &(0x7f0000000580), 0x0, 0x0) clone3(&(0x7f0000000780)={0x800, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x1b}, &(0x7f0000000680)=""/70, 0x46, &(0x7f0000000700)=""/36, &(0x7f0000000740)=[r4], 0x1}, 0x58) process_vm_writev(r4, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/136, 0x88}, {&(0x7f0000002380)=""/194, 0xc2}], 0x2, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/112, 0x70}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/132, 0x84}], 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r5, &(0x7f0000001980)=""/146, 0x92, 0x8) kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f0000000040)={r1, r1, 0x7fff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1538b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 138.083279] syz-executor.4 (3885) used greatest stack depth: 23576 bytes left 15:56:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000580)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fork() r4 = getpgrp(r3) process_vm_writev(r4, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/132, 0x84}], 0x7, &(0x7f0000000580), 0x0, 0x0) clone3(&(0x7f0000000780)={0x800, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x1b}, &(0x7f0000000680)=""/70, 0x46, &(0x7f0000000700)=""/36, &(0x7f0000000740)=[r4], 0x1}, 0x58) process_vm_writev(r4, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/136, 0x88}, {&(0x7f0000002380)=""/194, 0xc2}], 0x2, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/112, 0x70}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/132, 0x84}], 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r5, &(0x7f0000001980)=""/146, 0x92, 0x8) kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f0000000040)={r1, r1, 0x7fff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1538b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 138.248280] syz-executor.4 (3895) used greatest stack depth: 23384 bytes left 15:56:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000580)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fork() r4 = getpgrp(r3) process_vm_writev(r4, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/132, 0x84}], 0x7, &(0x7f0000000580), 0x0, 0x0) clone3(&(0x7f0000000780)={0x800, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x1b}, &(0x7f0000000680)=""/70, 0x46, &(0x7f0000000700)=""/36, &(0x7f0000000740)=[r4], 0x1}, 0x58) process_vm_writev(r4, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/136, 0x88}, {&(0x7f0000002380)=""/194, 0xc2}], 0x2, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/112, 0x70}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/132, 0x84}], 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r5, &(0x7f0000001980)=""/146, 0x92, 0x8) kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f0000000040)={r1, r1, 0x7fff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1538b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 15:56:49 executing program 4: openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r1, &(0x7f0000001980)=""/146, 0x92, 0x8) getpeername$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) pread64(r0, &(0x7f0000001980)=""/146, 0x92, 0x8) ioctl$SG_EMULATED_HOST(r0, 0x5307, 0x0) 15:56:49 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x684, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$unix(r4, &(0x7f00000008c0)={&(0x7f0000000740)=@abs, 0x6e, 0x0}, 0x20008084) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) process_vm_readv(0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000300)=[{&(0x7f0000012940)=""/102400, 0x19000}, {0x0}], 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ee000000ddff2d2f66696c653100"]) write$P9_RLCREATE(r6, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x10, 0x3, 0x7}, 0x9f}}, 0x18) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x80400, 0x10) pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$SG_IO(r8, 0x5392, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000340)={0x7ff, 0x1, 0x1, 'queue1\x00', 0x7}) [ 139.446041] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 139.637980] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 139.894948] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 139.957924] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 139.957978] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 139.958774] Bluetooth: hci3: command 0x0409 tx timeout [ 139.959486] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 142.005981] Bluetooth: hci3: command 0x041b tx timeout [ 142.331070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.334810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.336776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.342081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.346087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.347501] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 142.353728] Bluetooth: hci7: HCI_REQ-0x0c1a [ 143.669926] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 143.861920] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 144.054000] Bluetooth: hci3: command 0x040f tx timeout [ 144.246954] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 144.309936] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 144.373949] Bluetooth: hci7: command 0x0409 tx timeout [ 144.374459] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 146.102122] Bluetooth: hci3: command 0x0419 tx timeout [ 146.422967] Bluetooth: hci7: command 0x041b tx timeout [ 146.633328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.635455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.637333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.641436] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.645097] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.646498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.652559] Bluetooth: hci6: HCI_REQ-0x0c1a VM DIAGNOSIS: 15:56:48 Registers: info registers vcpu 0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff8880351ff340 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc329541700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f13582e6040 CR3=000000003c3ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fc32c0b27c0 00007fc32c0b27c8 YMM02=0000000000000000 0000000000000000 00007fc32c0b27e0 00007fc32c0b27c0 YMM03=0000000000000000 0000000000000000 00007fc32c0b27c8 00007fc32c0b27c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffff110016cce2f RBX=ffff88800b667148 RCX=ffffffff811da3e7 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88800b667178 RBP=ffff8880097cc488 RSP=ffff88800f9ffd78 R8 =0000000000000000 R9 =ffff888009453007 R10=ffffed100128a600 R11=0000000000000001 R12=dffffc0000000000 R13=ffff88800bda75a8 R14=ffff88800bda75a8 R15=0000000000000092 RIP=ffffffff817bb8b2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc329520718 CR3=000000003c3ba000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fc32c0b27c0 00007fc32c0b27c8 YMM02=0000000000000000 0000000000000000 00007fc32c0b27e0 00007fc32c0b27c0 YMM03=0000000000000000 0000000000000000 00007fc32c0b27c8 00007fc32c0b27c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000