Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:21772' (ECDSA) to the list of known hosts. 2022/10/01 12:38:11 fuzzer started 2022/10/01 12:38:12 dialing manager at localhost:35095 syzkaller login: [ 36.652169] cgroup: Unknown subsys name 'net' [ 36.738121] cgroup: Unknown subsys name 'rlimit' 2022/10/01 12:38:26 syscalls: 2215 2022/10/01 12:38:26 code coverage: enabled 2022/10/01 12:38:26 comparison tracing: enabled 2022/10/01 12:38:26 extra coverage: enabled 2022/10/01 12:38:26 setuid sandbox: enabled 2022/10/01 12:38:26 namespace sandbox: enabled 2022/10/01 12:38:26 Android sandbox: enabled 2022/10/01 12:38:26 fault injection: enabled 2022/10/01 12:38:26 leak checking: enabled 2022/10/01 12:38:26 net packet injection: enabled 2022/10/01 12:38:26 net device setup: enabled 2022/10/01 12:38:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 12:38:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 12:38:26 USB emulation: enabled 2022/10/01 12:38:26 hci packet injection: enabled 2022/10/01 12:38:26 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 12:38:26 802.15.4 emulation: enabled 2022/10/01 12:38:26 fetching corpus: 50, signal 19963/21777 (executing program) 2022/10/01 12:38:26 fetching corpus: 100, signal 34460/37858 (executing program) 2022/10/01 12:38:26 fetching corpus: 150, signal 45919/50714 (executing program) 2022/10/01 12:38:26 fetching corpus: 200, signal 49402/55707 (executing program) 2022/10/01 12:38:26 fetching corpus: 250, signal 54846/62444 (executing program) 2022/10/01 12:38:26 fetching corpus: 300, signal 59046/67967 (executing program) 2022/10/01 12:38:26 fetching corpus: 350, signal 62301/72500 (executing program) 2022/10/01 12:38:27 fetching corpus: 400, signal 68333/79603 (executing program) 2022/10/01 12:38:27 fetching corpus: 450, signal 72678/84969 (executing program) 2022/10/01 12:38:27 fetching corpus: 500, signal 77356/90632 (executing program) 2022/10/01 12:38:27 fetching corpus: 550, signal 82778/96852 (executing program) 2022/10/01 12:38:27 fetching corpus: 600, signal 87942/102710 (executing program) 2022/10/01 12:38:27 fetching corpus: 650, signal 90685/106373 (executing program) 2022/10/01 12:38:27 fetching corpus: 700, signal 92867/109459 (executing program) 2022/10/01 12:38:27 fetching corpus: 750, signal 94337/111936 (executing program) 2022/10/01 12:38:28 fetching corpus: 800, signal 96494/115004 (executing program) 2022/10/01 12:38:28 fetching corpus: 850, signal 99964/119132 (executing program) 2022/10/01 12:38:28 fetching corpus: 900, signal 101851/121847 (executing program) 2022/10/01 12:38:28 fetching corpus: 950, signal 103735/124561 (executing program) 2022/10/01 12:38:28 fetching corpus: 1000, signal 106567/127943 (executing program) 2022/10/01 12:38:28 fetching corpus: 1050, signal 108299/130476 (executing program) 2022/10/01 12:38:28 fetching corpus: 1100, signal 109644/132581 (executing program) 2022/10/01 12:38:28 fetching corpus: 1150, signal 111806/135338 (executing program) 2022/10/01 12:38:28 fetching corpus: 1200, signal 113613/137798 (executing program) 2022/10/01 12:38:28 fetching corpus: 1250, signal 116114/140721 (executing program) 2022/10/01 12:38:29 fetching corpus: 1300, signal 117614/142816 (executing program) 2022/10/01 12:38:29 fetching corpus: 1350, signal 121098/146423 (executing program) 2022/10/01 12:38:29 fetching corpus: 1400, signal 122814/148656 (executing program) 2022/10/01 12:38:29 fetching corpus: 1450, signal 124134/150547 (executing program) 2022/10/01 12:38:29 fetching corpus: 1500, signal 125256/152296 (executing program) 2022/10/01 12:38:29 fetching corpus: 1550, signal 126185/153865 (executing program) 2022/10/01 12:38:29 fetching corpus: 1600, signal 127348/155569 (executing program) 2022/10/01 12:38:29 fetching corpus: 1650, signal 129577/158092 (executing program) 2022/10/01 12:38:29 fetching corpus: 1700, signal 132409/160952 (executing program) 2022/10/01 12:38:30 fetching corpus: 1750, signal 134383/163189 (executing program) 2022/10/01 12:38:30 fetching corpus: 1800, signal 135644/164898 (executing program) 2022/10/01 12:38:30 fetching corpus: 1850, signal 137343/166865 (executing program) 2022/10/01 12:38:30 fetching corpus: 1900, signal 138980/168760 (executing program) 2022/10/01 12:38:30 fetching corpus: 1950, signal 139982/170277 (executing program) 2022/10/01 12:38:30 fetching corpus: 2000, signal 140921/171650 (executing program) 2022/10/01 12:38:30 fetching corpus: 2050, signal 141623/172919 (executing program) 2022/10/01 12:38:30 fetching corpus: 2100, signal 142917/174583 (executing program) 2022/10/01 12:38:31 fetching corpus: 2150, signal 143810/175965 (executing program) 2022/10/01 12:38:31 fetching corpus: 2200, signal 144955/177513 (executing program) 2022/10/01 12:38:31 fetching corpus: 2250, signal 145760/178798 (executing program) 2022/10/01 12:38:31 fetching corpus: 2300, signal 146766/180099 (executing program) 2022/10/01 12:38:31 fetching corpus: 2350, signal 148011/181563 (executing program) 2022/10/01 12:38:31 fetching corpus: 2400, signal 148953/182847 (executing program) 2022/10/01 12:38:31 fetching corpus: 2450, signal 150647/184579 (executing program) 2022/10/01 12:38:31 fetching corpus: 2500, signal 151811/185913 (executing program) 2022/10/01 12:38:32 fetching corpus: 2550, signal 153209/187357 (executing program) 2022/10/01 12:38:32 fetching corpus: 2600, signal 154398/188691 (executing program) 2022/10/01 12:38:32 fetching corpus: 2650, signal 155784/190069 (executing program) 2022/10/01 12:38:32 fetching corpus: 2700, signal 156247/190965 (executing program) 2022/10/01 12:38:32 fetching corpus: 2750, signal 157716/192359 (executing program) 2022/10/01 12:38:32 fetching corpus: 2800, signal 159035/193647 (executing program) 2022/10/01 12:38:32 fetching corpus: 2850, signal 160593/195031 (executing program) 2022/10/01 12:38:32 fetching corpus: 2900, signal 162081/196397 (executing program) 2022/10/01 12:38:33 fetching corpus: 2950, signal 163068/197477 (executing program) 2022/10/01 12:38:33 fetching corpus: 3000, signal 163929/198476 (executing program) 2022/10/01 12:38:33 fetching corpus: 3050, signal 165373/199746 (executing program) 2022/10/01 12:38:33 fetching corpus: 3100, signal 166238/200771 (executing program) 2022/10/01 12:38:33 fetching corpus: 3150, signal 167580/201890 (executing program) 2022/10/01 12:38:33 fetching corpus: 3200, signal 168235/202756 (executing program) 2022/10/01 12:38:33 fetching corpus: 3250, signal 169137/203695 (executing program) 2022/10/01 12:38:33 fetching corpus: 3300, signal 170525/204836 (executing program) 2022/10/01 12:38:34 fetching corpus: 3350, signal 171253/205685 (executing program) 2022/10/01 12:38:34 fetching corpus: 3400, signal 172201/206586 (executing program) 2022/10/01 12:38:34 fetching corpus: 3450, signal 173440/207566 (executing program) 2022/10/01 12:38:34 fetching corpus: 3500, signal 174263/208420 (executing program) 2022/10/01 12:38:34 fetching corpus: 3550, signal 175375/209316 (executing program) 2022/10/01 12:38:34 fetching corpus: 3600, signal 175757/209980 (executing program) 2022/10/01 12:38:34 fetching corpus: 3650, signal 176583/210761 (executing program) 2022/10/01 12:38:34 fetching corpus: 3700, signal 177451/211482 (executing program) 2022/10/01 12:38:35 fetching corpus: 3750, signal 178006/212138 (executing program) 2022/10/01 12:38:35 fetching corpus: 3800, signal 179050/212946 (executing program) 2022/10/01 12:38:35 fetching corpus: 3850, signal 179617/213599 (executing program) 2022/10/01 12:38:35 fetching corpus: 3900, signal 181030/214473 (executing program) 2022/10/01 12:38:35 fetching corpus: 3950, signal 182479/215358 (executing program) 2022/10/01 12:38:35 fetching corpus: 4000, signal 183105/215982 (executing program) 2022/10/01 12:38:35 fetching corpus: 4050, signal 183758/216601 (executing program) 2022/10/01 12:38:35 fetching corpus: 4100, signal 184294/217171 (executing program) 2022/10/01 12:38:36 fetching corpus: 4150, signal 184966/217754 (executing program) 2022/10/01 12:38:36 fetching corpus: 4200, signal 185531/218276 (executing program) 2022/10/01 12:38:36 fetching corpus: 4250, signal 186268/218860 (executing program) 2022/10/01 12:38:36 fetching corpus: 4300, signal 187139/219547 (executing program) 2022/10/01 12:38:36 fetching corpus: 4350, signal 188475/220240 (executing program) 2022/10/01 12:38:36 fetching corpus: 4400, signal 188870/220662 (executing program) 2022/10/01 12:38:36 fetching corpus: 4450, signal 189310/221135 (executing program) 2022/10/01 12:38:36 fetching corpus: 4500, signal 189769/221603 (executing program) 2022/10/01 12:38:36 fetching corpus: 4550, signal 190644/222124 (executing program) 2022/10/01 12:38:37 fetching corpus: 4600, signal 191292/222641 (executing program) 2022/10/01 12:38:37 fetching corpus: 4650, signal 192000/223077 (executing program) 2022/10/01 12:38:37 fetching corpus: 4700, signal 192459/223480 (executing program) 2022/10/01 12:38:37 fetching corpus: 4750, signal 193314/223965 (executing program) 2022/10/01 12:38:37 fetching corpus: 4800, signal 193883/224402 (executing program) 2022/10/01 12:38:37 fetching corpus: 4850, signal 194402/224801 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/225152 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/225456 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/225789 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/226083 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/226401 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/226729 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/227015 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/227309 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/227637 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/227919 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/228230 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/228546 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/228875 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/229158 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/229458 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/229785 (executing program) 2022/10/01 12:38:37 fetching corpus: 4870, signal 194679/229785 (executing program) 2022/10/01 12:38:40 starting 8 fuzzer processes 12:38:40 executing program 0: fstat(0xffffffffffffffff, &(0x7f0000000000)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/60, 0x3c}], 0x5, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x40000000) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x14000, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r5, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], 0x7) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup(r9) r10 = syz_open_dev$rtc(&(0x7f0000000580), 0x8001, 0x0) ioctl$RTC_IRQP_READ(r10, 0x8008700b, &(0x7f00000005c0)) r11 = socket$inet_tcp(0x2, 0x1, 0x0) readahead(r11, 0x6, 0x6) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000600)=0x7f, 0x1) getdents(r2, &(0x7f0000000640)=""/4096, 0x1000) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000001640)) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000001680)={@remote, 0x65}) r12 = dup3(r1, r0, 0x0) accept4(r12, &(0x7f00000016c0)=@hci, &(0x7f0000001740)=0x80, 0x180000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001780)={0x33, @empty, 0x4e24, 0x0, 'lc\x00', 0x0, 0x401, 0x16}, 0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@broadcast, @in=@multicast2, 0x4e22, 0x0, 0x4e20, 0x6, 0xa, 0xa0, 0x0, 0x4, 0x0, 0xee01}, {0x81, 0x10001, 0x4000, 0x800, 0xbfbd, 0x7fffffff, 0x7, 0x3f}, {0x6, 0x1, 0x8000, 0x2}, 0x5, 0x6e6bb2, 0x2, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4d3, 0xff}, 0x8, @in=@local, 0x0, 0x0, 0x3, 0x6, 0x1, 0x4, 0x1}}, 0xe8) 12:38:40 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000100)='./file0\x00', 0x404580, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x108c0}, 0x84) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24044004}, 0x24000000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40811) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x8, 0x4, {{0x6, 0x4, 0x3, 0x23, 0x18, 0x67, 0x0, 0x39, 0x2f, 0x0, @remote, @local, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x24, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x24000014) recvmsg(r1, &(0x7f00000017c0)={&(0x7f0000000640)=@x25={0x9, @remote}, 0x80, &(0x7f0000001740)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/85, 0x55}], 0x2, &(0x7f0000001780)=""/30, 0x1e}, 0x40000100) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001800)={0x2, 'geneve0\x00', {0x5}, 0x3ff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001840)={0x1, 'wlan1\x00', {}, 0xc6}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x34, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000080) fcntl$addseals(r1, 0x409, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000001980)) recvmsg$unix(r1, &(0x7f0000001e00)={&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001a40)=""/116, 0x74}, {&(0x7f0000001ac0)=""/157, 0x9d}, {&(0x7f0000001b80)=""/14, 0xe}, {&(0x7f0000001bc0)=""/71, 0x47}, {&(0x7f0000001c40)=""/118, 0x76}, {&(0x7f0000001cc0)=""/126, 0x7e}], 0x6, &(0x7f0000001dc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}, 0x10000) fcntl$setownex(r0, 0xf, &(0x7f0000001e40)={0x1, r4}) link(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)='./file0/file0\x00') socketpair(0x22, 0x2, 0x4, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r5, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001f80)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001fc0)={'batadv_slave_1\x00'}) 12:38:40 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000000)={0x0, 0x80}) r0 = epoll_create(0x800) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) epoll_pwait(0xffffffffffffffff, &(0x7f0000001080)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f00000010c0)={[0x9]}, 0x8) r2 = syz_open_dev$vcsu(&(0x7f0000001100), 0x0, 0x8f528564a8417d01) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)={0x80002000}) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000011c0)=0x5) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001200)={0x0, 0x3, 0x9, 0x40}) recvmsg$unix(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001280)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001380)=0x0) r7 = socket$inet(0x2, 0x2, 0x6) r8 = syz_open_dev$vcsa(&(0x7f00000013c0), 0xb116, 0x800) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000001400)={r1, r8, 0x80000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000001440)={0x10000001}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000001480)={0x7b9, 0x1f}) r9 = syz_io_uring_setup(0x3c89, &(0x7f00000014c0)={0x0, 0xf066, 0x8, 0x1, 0x3a3, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001540), &(0x7f0000001580)) signalfd(r9, &(0x7f00000015c0)={[0x372]}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000016c0)={&(0x7f0000001600), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x88c5) [ 65.052773] audit: type=1400 audit(1664627920.906:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:38:40 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2, 0x1000}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x0, 0x6, 0x66, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x80, 0x700, 0x1, 0x8b}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa0, 0x7, 0x1, 0x80, 0xfffffffffffffff7, 0x600a0, r0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x2f, 0x8, 0x20, 0xffffffff, 0x6, @remote, @empty, 0x80, 0x20, 0x5}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x42}, @local, @rand_addr=' \x01\x00', 0x1ff, 0x8, 0x20, 0x500, 0x7, 0x200000, r2}) r3 = accept(r1, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000380)=0x80) getsockname(r1, &(0x7f00000003c0)=@can={0x1d, 0x0}, &(0x7f0000000440)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', r4, 0x2f, 0x40, 0x5, 0xffffffc0, 0x30, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x9, 0x1d9}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x40, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10, 0x700, 0xbb4, 0x401}}) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000640)) r6 = fspick(r1, &(0x7f0000000680)='./file0\x00', 0x0) sendfile(r6, r3, &(0x7f00000006c0)=0x14bc1b03, 0x5) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/bus/hid', 0x80000, 0x20) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r5) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1f}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) write$binfmt_script(r3, &(0x7f00000008c0)={'#! ', './file0', [{}, {0x20, ' \x01\x00'}, {0x20, '{}^'}], 0xa, "3a2fdc2b7aa6e39bdc480f68c019d4b0aa55a6ddbb79a05b86252c32875cae0adcce8f24b4c536188267c73b2390c79aae5bd9ec65ad7be41c3351be565b2574338269f766c295ea69c7ff15da1f6367278931c2614d5fe96677891c1ffa08"}, 0x73) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000940)={0x0, @dev, @local}, &(0x7f0000000980)=0xc) 12:38:40 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb7e}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000c1) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x100000000, 0x336, 0x17, 0x5, 0x80000000, 0x0, 0x5, 0x2, 0x1000, 0x2, 0x3, 0x4, 0x1f, 0xfffffffffffffffd}}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000001240)={0x3, 0x8000, 0x1, 0x3, 0x0, [0x0, 0x7, 0x7]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'syztnl0\x00', &(0x7f0000001300)={'gre0\x00', 0x0, 0x20, 0x1, 0x3, 0xc6a6, {{0x1c, 0x4, 0x1, 0x11, 0x70, 0x64, 0x0, 0x61, 0x2f, 0x0, @local, @local, {[@timestamp_addr={0x44, 0xc, 0xe5, 0x1, 0x2, [{@rand_addr=0x64010102, 0x6}]}, @timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0x8, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0xacf}]}, @timestamp_prespec={0x44, 0xc, 0xa4, 0x3, 0x9, [{@multicast2, 0x8}]}, @timestamp={0x44, 0x14, 0x3d, 0x0, 0x4, [0x2, 0x6b4b176, 0x7fffffff, 0x4]}, @timestamp_prespec={0x44, 0xc, 0x31, 0x3, 0x7, [{@loopback, 0x4000}]}, @lsrr={0x83, 0x7, 0x7a, [@private=0xa010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001440)={'ip6_vti0\x00', 0x0, 0x29, 0x5e, 0xff, 0xa76d, 0x8e, @dev={0xfe, 0x80, '\x00', 0x33}, @private1, 0x80, 0x8, 0x5, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x29, 0xc9, 0x9, 0x8, 0x13, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x81, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'syztnl1\x00', 0x0, 0x6, 0x5, 0xc1, 0x4, 0x64, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x40, 0x700, 0xa9, 0x3f}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001740)={'syztnl1\x00', &(0x7f0000001680)={'syztnl1\x00', 0x0, 0x20, 0x700, 0x1, 0x5, {{0x24, 0x4, 0x3, 0x36, 0x90, 0x65, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, {[@lsrr={0x83, 0xb, 0x14, [@empty, @multicast2]}, @timestamp={0x44, 0x1c, 0x67, 0x0, 0x1, [0x7, 0x4, 0x6, 0x4, 0x7, 0x8]}, @lsrr={0x83, 0xf, 0x7f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @rr={0x7, 0x17, 0x80, [@dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xa1, 0x3, 0x5, [{@broadcast}]}, @ssrr={0x89, 0x23, 0xef, [@rand_addr=0x64010101, @rand_addr=0x64010101, @multicast2, @local, @remote, @private=0xa010102, @local, @loopback]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000017c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x0, 0x8, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x7, 0x8, 0xffff}}) accept$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000019c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000001ac0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001b00)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002400)={&(0x7f0000001b40)={0x88c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a5}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xca78}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff2187}}}]}}, {{0x8, 0x1, r6}, {0x198, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x3, 0x9, 0x5}, {0x1, 0x1, 0x20, 0x8}, {0x8, 0x2, 0x2}, {0x0, 0x6, 0x2, 0x3}, {0x3ff, 0xe0, 0x3, 0xb301}, {0x300, 0x55, 0x80, 0x7}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x22a24bbd}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x71bb3177}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4e}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xac, 0x0, 0x3f, 0x67}, {0x1, 0x5, 0x1, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40001}, 0x44001) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x4010) 12:38:40 executing program 5: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x3}, [{0x2, 0x0, r0}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x5, r1}, {0x2, 0x3, 0xee01}, {0x2, 0x3, 0xee00}], {0x4, 0x4}, [{0x8, 0x2, 0xffffffffffffffff}], {}, {0x20, 0x2}}, 0x54, 0x3) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, &(0x7f00000002c0)="9d563b138547ca1b73aaf72908e356a2ce921e34fa61222d9c9de0c4ca35326fba4e10685463021911eb0509e853baa668201d6f3b0f9c0c656c578e6c10c4d7d38ba81a1cfd592aac19d6bb7881e1c62787ac81d32888a7ebc9876be09f687cdaa9ee5cbe193714d70c") r2 = syz_open_dev$vcsa(&(0x7f0000000340), 0x80000001, 0x40080) r3 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r4, {0x30}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0xb4, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x75f2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48050}, 0x4095) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) mount$9p_tcp(&(0x7f00000021c0), &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x804, &(0x7f0000002280)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_none}, {@access_client}, {@version_L}], [{@euid_gt={'euid>', r1}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, 'sip\x00'}}]}}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r4, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000002380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x80000001, 0x3, &(0x7f0000002340)="4d77b15b4050f3caab7e00548f147b0df83ba479adda7630437ce9f30310d3d574229d65cd1f9a873ddc", 0x7}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) open_by_handle_at(r7, &(0x7f0000002480)=@xfs_parent={0x1c, 0x82, {0x7ff, 0xfffffff7, 0x862, 0x7f}}, 0x800) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x80010, r5, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f00000024c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000002500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000002540)) 12:38:40 executing program 7: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x583102, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x4, 0x0, 0x91a1}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000040)="75183d2b251e5496dcb481bc09c4e21968d02a32599ac8e4d297ce48bc4e4fb94b29e1ddb7527643f27519e2c45db765176aabbc587e7fc5ef6f52633c3ff31abc83143c3e6a4f18858fd322ddccc068dc2953e6fda9222fdbb2061f6a7f9c68bc54da4aed3da3ed1fff48c212c03ad366ed5cc0d103bb737dee6567d7c1ba9068088de8add3f667ec2a936d0e596ae0f833673133e8b92135f610d4854c7ef5dac86dfb578a72ce91ae03aef1ca86a6f732f076e3347eb8d1c549c3e12b273e5a6e6a9d4fc5e7b6f3ce225cc5eb6a2d297a24710f98813c07217aac5f6ad314b32dbe72e96282d9e65721", 0xeb, 0x7, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x100, r0, &(0x7f00000001c0)="7985ce59e384a6516ad55da74239557f90d19d76397a58ce63349baeacad5484d98aaec0a3141ec4a3efd648dc21eec68e15caca5f4a18e9f0900b99e091939a238df9c30a5a642c102b9bdaadbb3bff07a574a90f667b43e48d8a74afa45c0d30ffdfea1edcb752f360725c1101e91fed6ecac88c09146a7edcb0e5e1da6649f8787f35e3c4a2e93d7b9c762ce80b068657e35e41c5547d5bfa846017168b94a0e9de845e2034371e93c153919850", 0xaf, 0x5, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0xd07b, r0, &(0x7f00000002c0)="aeab13e019b59478879b13675807c604f8d4168627f94c92fe90f6dbd10e2e524274f083dd8b951cbcfe6a983ef00f56d20049b8c5d77d9d37e6d671417495b1a39381c49a1b49699935bc524ae9c2436d2490a2aacf52f8e4322f744b428a59f06b7860db5671ddb20e333c42e463a1dfcd22d41ec3645cdac17911379b630d50641ff7c04970f2faa6a2f0f3915eaf8ae2a1d40cfdba2f33a5b55cfb6728fedfc194e086b47714e7f2389eecd67a1f8a952c31cd194692b6c52f21144f5fb6f8de067bf36c61a46eed66ae1ce4f289293fbc2cbe7f3f2374e0e0674022cd", 0xdf, 0x7, 0x0, 0x0, r3}]) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x3, 0x1, 0x10b, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r4 = openat(r3, &(0x7f00000005c0)='./file0\x00', 0x220000, 0xc0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000600)) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x102, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044880) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000740)="930d2d3f08ecfb1f2ef2ea1cf57287aba5c0051d0092e09248057e94b95b9f1ed6e261face942a5776a1df10a3a11c9f8ec59222fc7922d8771ccd72d4cd69946b9dbe2cea8c4faf0b56") r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r4) r6 = syz_open_pts(r3, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f00000007c0)={0x0, 0x200, 0x3}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto(r7, &(0x7f0000000800)="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", 0x1000, 0x5, &(0x7f0000001800)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001880), 0x40042, 0x0) fchown(r8, 0xee01, 0xee01) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r9, 0x8, 0x1000, &(0x7f00000018c0)=""/130, &(0x7f0000001980)=0x82) 12:38:40 executing program 6: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0xc0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7fff}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffe}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040800}, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002640)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa3f62d7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x44) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0x90, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x56c}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x14) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002b40)={0x450, 0x3f4, 0x200, 0x3, 0x25dfdbfd, {0x5, 0x2, 0x1c, [0xfffffff7, 0x0, 0x8, 0x8001, 0x8000, 0xffff, 0x81, 0x2, 0x0, 0xfffffffc, 0x4, 0x1ff, 0x0, 0x5, 0x10001, 0x7, 0x8000, 0x5, 0x81, 0xfffffffc, 0x3, 0x1000, 0xffffff80, 0x6, 0x8a53, 0x83, 0x7, 0x1, 0x8, 0x10001, 0x100, 0x100, 0x5, 0x5, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2, 0x7fffffff, 0xf9e, 0x0, 0x8b, 0x1, 0x1, 0x7, 0x0, 0x585, 0x3, 0x7ff, 0xe2b, 0x3f, 0xad, 0x3fffc, 0x5, 0x9, 0x0, 0x2, 0x3, 0x6, 0x1000, 0x9, 0x3], [0x8, 0x7, 0x0, 0x8c4, 0x1, 0x7, 0x9, 0x3, 0x2, 0x3, 0x8, 0x6, 0xb5, 0x7, 0x400, 0xbad6, 0x200, 0x7, 0x1ff, 0x1d16062f, 0x1, 0x6, 0x2, 0x6, 0x4, 0x2, 0x0, 0x9, 0x0, 0x1, 0x0, 0x7, 0x9, 0x4, 0x2, 0xff, 0xfcf, 0x3638, 0x7f, 0x7, 0xff, 0x7fff, 0x8, 0x7ff, 0xc0000000, 0x7, 0x8, 0x8, 0x4, 0x3ff, 0x0, 0x3, 0x3ff, 0x8001, 0x7fff, 0x5, 0x2, 0x8000, 0x6f7, 0x8001, 0x8, 0x7, 0x9, 0x7fff], [0x8, 0x3, 0x1, 0x1, 0x5, 0x1, 0x7f, 0x8001, 0x4, 0x7fff, 0x7ff, 0x4, 0xffff, 0x7fffffff, 0xffffceab, 0x8, 0x7fffffff, 0x1b2, 0x2, 0x3, 0xfff, 0x0, 0x8001, 0xad, 0x9, 0x3, 0x8, 0x60c, 0x5, 0x0, 0x9, 0x9, 0x80000001, 0x7ff, 0x63b6, 0x10000, 0x7, 0x51, 0x1, 0x3, 0x800, 0xff, 0x6, 0x6, 0x7, 0x8, 0x80000001, 0x3f, 0x80200, 0xffffffff, 0x81, 0x7ff, 0x3bf4, 0x5, 0x20, 0x9, 0x0, 0xf4, 0x4, 0x89, 0x1, 0x1, 0x7, 0x1], [0xfffffff8, 0x5, 0x27, 0x9, 0x8, 0x0, 0x1f, 0x7, 0x6, 0x7fffffff, 0x0, 0x0, 0x7, 0x1ff, 0x80800, 0x9, 0xffff, 0x9, 0x2, 0xff, 0x7cc3, 0x2, 0x1, 0x7, 0x2, 0xc5, 0x7fffffff, 0x10, 0x80000000, 0xfffffffb, 0x9, 0x101, 0x6, 0x80, 0x8, 0x9, 0xfffffffe, 0x9, 0x8, 0x7fffffff, 0x0, 0xffff, 0x6, 0x2, 0x8, 0x0, 0xfffeffff, 0x5, 0xe, 0x7fffffff, 0x9, 0x0, 0xffff, 0xbf73, 0x4, 0x10000, 0x1, 0x0, 0x6, 0x9, 0x800, 0x8001, 0x4, 0x1], 0x30, ['[M](\xdc@\x00', '{]@.^$\x00', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', '\x00', 'sit0\x00', '#&3%!\x00', '\x00', '%h[-\x00']}, ["", "", "", "", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003080)={0x138, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x25}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8fd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x659f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41f91dd3}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xefbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004880}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1000, 0x3, 0x7, 0x100}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0xc000) getitimer(0x0, &(0x7f0000003340)) r2 = creat(&(0x7f0000003380)='./file0\x00', 0x1ea) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000033c0)=0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x20009845) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x6c, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3e}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x26}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8}, 0x40000) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x7f}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0xd}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) [ 66.402038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.406851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.409487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.415274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.417850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.422167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.424397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.426890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.428431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.444424] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.446905] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.448548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.458308] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.459598] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.515623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.517762] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.519487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.522289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.524264] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.525637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.530777] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.546920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.549254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.550973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.554170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.555795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.557645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.561825] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.563215] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.564496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.566401] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.567407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.569671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.570814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.578359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.579619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.585857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.588368] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.589448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.596498] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.597794] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.598987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.609611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.618089] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.641373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.670758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.725568] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.729294] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.750129] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.471378] Bluetooth: hci0: command 0x0409 tx timeout [ 68.472300] Bluetooth: hci1: command 0x0409 tx timeout [ 68.535071] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 68.599203] Bluetooth: hci4: command 0x0409 tx timeout [ 68.599239] Bluetooth: hci6: command 0x0409 tx timeout [ 68.663158] Bluetooth: hci2: command 0x0409 tx timeout [ 68.663887] Bluetooth: hci3: command 0x0409 tx timeout [ 68.791084] Bluetooth: hci7: command 0x0409 tx timeout [ 70.519100] Bluetooth: hci1: command 0x041b tx timeout [ 70.519878] Bluetooth: hci0: command 0x041b tx timeout [ 70.647249] Bluetooth: hci4: command 0x041b tx timeout [ 70.647990] Bluetooth: hci6: command 0x041b tx timeout [ 70.711203] Bluetooth: hci3: command 0x041b tx timeout [ 70.712082] Bluetooth: hci2: command 0x041b tx timeout [ 70.839082] Bluetooth: hci7: command 0x041b tx timeout [ 71.536441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.539701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.543923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.552214] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.555208] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.558282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.570053] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.568074] Bluetooth: hci0: command 0x040f tx timeout [ 72.568518] Bluetooth: hci1: command 0x040f tx timeout [ 72.695123] Bluetooth: hci6: command 0x040f tx timeout [ 72.695570] Bluetooth: hci4: command 0x040f tx timeout [ 72.759077] Bluetooth: hci2: command 0x040f tx timeout [ 72.759519] Bluetooth: hci3: command 0x040f tx timeout [ 72.888155] Bluetooth: hci7: command 0x040f tx timeout [ 73.592075] Bluetooth: hci5: command 0x0409 tx timeout [ 74.615065] Bluetooth: hci1: command 0x0419 tx timeout [ 74.615522] Bluetooth: hci0: command 0x0419 tx timeout [ 74.743092] Bluetooth: hci4: command 0x0419 tx timeout [ 74.743553] Bluetooth: hci6: command 0x0419 tx timeout [ 74.807215] Bluetooth: hci3: command 0x0419 tx timeout [ 74.808067] Bluetooth: hci2: command 0x0419 tx timeout [ 74.935085] Bluetooth: hci7: command 0x0419 tx timeout [ 75.639149] Bluetooth: hci5: command 0x041b tx timeout [ 77.688071] Bluetooth: hci5: command 0x040f tx timeout [ 79.736097] Bluetooth: hci5: command 0x0419 tx timeout 12:39:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x800454cf, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{r1}, 0x0, 0xc, @inherit={0x80, &(0x7f0000001200)=ANY=[@ANYBLOB="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"]}, @devid}) 12:39:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x10000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="dc000100", @ANYRES16=0x0, @ANYBLOB="040025bd7000fcdbdf2503000000240002800800050091ffffff05000d00000000000800050006000000080008000e030000640003800600e4ff4d23000014000600ff0200000000000000000000000000010800010002000000080003000200000014000600fc000000000000000000000000000001060007004e240000080003000300000005000800010000000800010000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4010}, 0x24008800) [ 117.843775] audit: type=1400 audit(1664627973.697:7): avc: denied { open } for pid=3819 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.845351] audit: type=1400 audit(1664627973.697:8): avc: denied { kernel } for pid=3819 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 117.873199] ------------[ cut here ]------------ [ 117.873243] [ 117.873250] ====================================================== [ 117.873258] WARNING: possible circular locking dependency detected [ 117.873266] 6.0.0-rc7-next-20220930 #1 Not tainted [ 117.873282] ------------------------------------------------------ [ 117.873289] syz-executor.2/3820 is trying to acquire lock: [ 117.873304] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 117.873387] [ 117.873387] but task is already holding lock: [ 117.873393] ffff88800d3b0020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 117.873453] [ 117.873453] which lock already depends on the new lock. [ 117.873453] [ 117.873459] [ 117.873459] the existing dependency chain (in reverse order) is: [ 117.873466] [ 117.873466] -> #3 (&ctx->lock){....}-{2:2}: [ 117.873499] _raw_spin_lock+0x2a/0x40 [ 117.873524] __perf_event_task_sched_out+0x53b/0x18d0 [ 117.873551] __schedule+0xedd/0x2470 [ 117.873583] schedule+0xda/0x1b0 [ 117.873615] exit_to_user_mode_prepare+0x114/0x1a0 [ 117.873642] syscall_exit_to_user_mode+0x19/0x40 [ 117.873672] do_syscall_64+0x48/0x90 [ 117.873712] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.873742] [ 117.873742] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 117.873774] _raw_spin_lock_nested+0x30/0x40 [ 117.873800] raw_spin_rq_lock_nested+0x1e/0x30 [ 117.873829] task_fork_fair+0x63/0x4d0 [ 117.873868] sched_cgroup_fork+0x3d0/0x540 [ 117.873901] copy_process+0x4183/0x6e20 [ 117.873935] kernel_clone+0xe7/0x890 [ 117.873957] user_mode_thread+0xad/0xf0 [ 117.873982] rest_init+0x24/0x250 [ 117.874009] arch_call_rest_init+0xf/0x14 [ 117.874048] start_kernel+0x4c6/0x4eb [ 117.874084] secondary_startup_64_no_verify+0xe0/0xeb [ 117.874116] [ 117.874116] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 117.874148] _raw_spin_lock_irqsave+0x39/0x60 [ 117.874174] try_to_wake_up+0xab/0x1930 [ 117.874205] up+0x75/0xb0 [ 117.874238] __up_console_sem+0x6e/0x80 [ 117.874275] console_unlock+0x46a/0x590 [ 117.874312] vt_ioctl+0x2822/0x2ca0 [ 117.874338] tty_ioctl+0x785/0x16b0 [ 117.874362] __x64_sys_ioctl+0x19a/0x210 [ 117.874393] do_syscall_64+0x3b/0x90 [ 117.874432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.874462] [ 117.874462] -> #0 ((console_sem).lock){....}-{2:2}: [ 117.874495] __lock_acquire+0x2a02/0x5e70 [ 117.874534] lock_acquire+0x1a2/0x530 [ 117.874571] _raw_spin_lock_irqsave+0x39/0x60 [ 117.874598] down_trylock+0xe/0x70 [ 117.874634] __down_trylock_console_sem+0x3b/0xd0 [ 117.874673] vprintk_emit+0x16b/0x560 [ 117.874711] vprintk+0x84/0xa0 [ 117.874749] _printk+0xba/0xf1 [ 117.874775] report_bug.cold+0x72/0xab [ 117.874814] handle_bug+0x3c/0x70 [ 117.874853] exc_invalid_op+0x14/0x50 [ 117.874894] asm_exc_invalid_op+0x16/0x20 [ 117.874922] group_sched_out.part.0+0x2c7/0x460 [ 117.874965] ctx_sched_out+0x8f1/0xc10 [ 117.875004] __perf_event_task_sched_out+0x6d0/0x18d0 [ 117.875031] __schedule+0xedd/0x2470 [ 117.875063] schedule+0xda/0x1b0 [ 117.875095] exit_to_user_mode_prepare+0x114/0x1a0 [ 117.875121] syscall_exit_to_user_mode+0x19/0x40 [ 117.875152] do_syscall_64+0x48/0x90 [ 117.875191] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.875222] [ 117.875222] other info that might help us debug this: [ 117.875222] [ 117.875228] Chain exists of: [ 117.875228] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 117.875228] [ 117.875264] Possible unsafe locking scenario: [ 117.875264] [ 117.875269] CPU0 CPU1 [ 117.875274] ---- ---- [ 117.875279] lock(&ctx->lock); [ 117.875293] lock(&rq->__lock); [ 117.875308] lock(&ctx->lock); [ 117.875323] lock((console_sem).lock); [ 117.875337] [ 117.875337] *** DEADLOCK *** [ 117.875337] [ 117.875341] 2 locks held by syz-executor.2/3820: [ 117.875357] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 117.875428] #1: ffff88800d3b0020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 117.875491] [ 117.875491] stack backtrace: [ 117.875497] CPU: 1 PID: 3820 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 117.875526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 117.875544] Call Trace: [ 117.875551] [ 117.875560] dump_stack_lvl+0x8b/0xb3 [ 117.875606] check_noncircular+0x263/0x2e0 [ 117.875648] ? format_decode+0x26c/0xb50 [ 117.875685] ? print_circular_bug+0x450/0x450 [ 117.875727] ? simple_strtoul+0x30/0x30 [ 117.875765] ? format_decode+0x26c/0xb50 [ 117.875807] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 117.875849] __lock_acquire+0x2a02/0x5e70 [ 117.875901] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 117.875955] lock_acquire+0x1a2/0x530 [ 117.875995] ? down_trylock+0xe/0x70 [ 117.876037] ? lock_release+0x750/0x750 [ 117.876086] ? vprintk+0x84/0xa0 [ 117.876129] _raw_spin_lock_irqsave+0x39/0x60 [ 117.876156] ? down_trylock+0xe/0x70 [ 117.876195] down_trylock+0xe/0x70 [ 117.876233] ? vprintk+0x84/0xa0 [ 117.876274] __down_trylock_console_sem+0x3b/0xd0 [ 117.876316] vprintk_emit+0x16b/0x560 [ 117.876361] vprintk+0x84/0xa0 [ 117.876403] _printk+0xba/0xf1 [ 117.876431] ? record_print_text.cold+0x16/0x16 [ 117.876469] ? report_bug.cold+0x66/0xab [ 117.876512] ? group_sched_out.part.0+0x2c7/0x460 [ 117.876557] report_bug.cold+0x72/0xab [ 117.876602] handle_bug+0x3c/0x70 [ 117.876644] exc_invalid_op+0x14/0x50 [ 117.876688] asm_exc_invalid_op+0x16/0x20 [ 117.876718] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 117.876767] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 117.876794] RSP: 0018:ffff88804011fc48 EFLAGS: 00010006 [ 117.876815] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.876833] RDX: ffff88801d4cb580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 117.876852] RBP: ffff888040048000 R08: 0000000000000005 R09: 0000000000000001 [ 117.876869] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d3b0000 [ 117.876887] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 117.876913] ? group_sched_out.part.0+0x2c7/0x460 [ 117.876962] ? group_sched_out.part.0+0x2c7/0x460 [ 117.877010] ctx_sched_out+0x8f1/0xc10 [ 117.877057] __perf_event_task_sched_out+0x6d0/0x18d0 [ 117.877092] ? lock_is_held_type+0xd7/0x130 [ 117.877125] ? __perf_cgroup_move+0x160/0x160 [ 117.877151] ? set_next_entity+0x304/0x550 [ 117.877193] ? update_curr+0x267/0x740 [ 117.877238] ? lock_is_held_type+0xd7/0x130 [ 117.877272] __schedule+0xedd/0x2470 [ 117.877313] ? io_schedule_timeout+0x150/0x150 [ 117.877354] ? rcu_read_lock_sched_held+0x3e/0x80 [ 117.877402] schedule+0xda/0x1b0 [ 117.877438] exit_to_user_mode_prepare+0x114/0x1a0 [ 117.877468] syscall_exit_to_user_mode+0x19/0x40 [ 117.877500] do_syscall_64+0x48/0x90 [ 117.877544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.877576] RIP: 0033:0x7fe5ae6c0b19 [ 117.877596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.877622] RSP: 002b:00007fe5abc36218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.877648] RAX: 0000000000000001 RBX: 00007fe5ae7d3f68 RCX: 00007fe5ae6c0b19 [ 117.877666] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5ae7d3f6c [ 117.877684] RBP: 00007fe5ae7d3f60 R08: 000000000000000e R09: 0000000000000000 [ 117.877701] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe5ae7d3f6c [ 117.877718] R13: 00007ffe676657cf R14: 00007fe5abc36300 R15: 0000000000022000 [ 117.877749] [ 117.982174] WARNING: CPU: 1 PID: 3820 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 117.983365] Modules linked in: [ 117.983784] CPU: 1 PID: 3820 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 117.984813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 117.986264] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 117.986983] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 117.989297] RSP: 0018:ffff88804011fc48 EFLAGS: 00010006 [ 117.990005] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.991025] RDX: ffff88801d4cb580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 117.992056] RBP: ffff888040048000 R08: 0000000000000005 R09: 0000000000000001 [ 117.993089] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d3b0000 [ 117.994134] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 117.995166] FS: 00007fe5abc36700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 117.996315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.997158] CR2: 000055ce5d4e8080 CR3: 000000003a444000 CR4: 0000000000350ee0 [ 117.998181] Call Trace: [ 117.998555] [ 117.998891] ctx_sched_out+0x8f1/0xc10 [ 117.999486] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.000251] ? lock_is_held_type+0xd7/0x130 [ 118.000878] ? __perf_cgroup_move+0x160/0x160 [ 118.001543] ? set_next_entity+0x304/0x550 [ 118.002199] ? update_curr+0x267/0x740 [ 118.002777] ? lock_is_held_type+0xd7/0x130 [ 118.003421] __schedule+0xedd/0x2470 [ 118.003980] ? io_schedule_timeout+0x150/0x150 [ 118.004655] ? rcu_read_lock_sched_held+0x3e/0x80 [ 118.005383] schedule+0xda/0x1b0 [ 118.005893] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.006619] syscall_exit_to_user_mode+0x19/0x40 [ 118.007326] do_syscall_64+0x48/0x90 [ 118.007884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.008649] RIP: 0033:0x7fe5ae6c0b19 [ 118.009184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.011848] RSP: 002b:00007fe5abc36218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.012968] RAX: 0000000000000001 RBX: 00007fe5ae7d3f68 RCX: 00007fe5ae6c0b19 [ 118.014014] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5ae7d3f6c [ 118.015052] RBP: 00007fe5ae7d3f60 R08: 000000000000000e R09: 0000000000000000 [ 118.016097] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fe5ae7d3f6c [ 118.017119] R13: 00007ffe676657cf R14: 00007fe5abc36300 R15: 0000000000022000 [ 118.018164] [ 118.018513] irq event stamp: 684 [ 118.019009] hardirqs last enabled at (683): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 118.020343] hardirqs last disabled at (684): [] __schedule+0x1225/0x2470 [ 118.021553] softirqs last enabled at (470): [] __irq_exit_rcu+0x11b/0x180 [ 118.022801] softirqs last disabled at (373): [] __irq_exit_rcu+0x11b/0x180 [ 118.024033] ---[ end trace 0000000000000000 ]--- 12:39:33 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64, @ANYRESOCT, @ANYRES64=r1, @ANYRES32, @ANYRESOCT]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000380)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300c7c0a03ea51620ee6b5e0300040000000000e1ffffff0e002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='data_err=ignore,resgid=', @ANYRESHEX=r4, @ANYBLOB="2c64656275675f77616e745f65d514f2fb2ec929a817a20f8ca9787472615f6973697a653d3078303030303030303030303030303030362c00"]) [ 118.095161] loop3: detected capacity change from 0 to 4096 [ 118.101578] ext4: Bad value for 'resgid' 12:39:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 12:39:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCGETD(r0, 0xc0189436, &(0x7f0000000440)) 12:39:34 executing program 3: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb) 12:39:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() kcmp(r3, 0x0, 0x0, r2, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r4, &(0x7f0000000300)='./file1\x00', 0x420000, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x6, 0x6, 0xb6f, 0x9, 0x47c9}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x10000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="dc000100", @ANYRES16=0x0, @ANYBLOB="040025bd7000fcdbdf2503000000240002800800050091ffffff05000d00000000000800050006000000080008000e030000640003800600e4ff4d23000014000600ff0200000000000000000000000000010800010002000000080003000200000014000600fc000000000000000000000000000001060007004e240000080003000300000005000800010000000800010000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4010}, 0x24008800) 12:39:34 executing program 3: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb) VM DIAGNOSIS: 12:39:34 Registers: info registers vcpu 0 RAX=1ffff11001352e9b RBX=ffff88800e92bd20 RCX=1ffff11001d257aa RDX=dffffc0000000000 RSI=ffff88800ded3610 RDI=ffff888009a974d8 RBP=ffff88800ded3600 RSP=ffff88801860f9d0 R8 =0000000000000001 R9 =0000000000000246 R10=ffffed10030c1f28 R11=0000000000000001 R12=ffff88803f001cf8 R13=0000000000000000 R14=ffff888009a974a8 R15=ffff88803f001cb0 RIP=ffffffff817bc706 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fabccccc8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6e86f49260 CR3=000000000ef50000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 372f6b636f6c622f 7665642f7379732f YMM01=0000000000000000 0000000000000000 00333a372f6b636f 6c622f7665642f73 YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 0000559c17460580 0000559c174540a0 YMM05=0000000000000000 0000000000000000 0000000500000000 0000559c17453d40 YMM06=0000000000000000 0000000000000000 0000559c174605a0 00000007ffffffff YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 6e753c0073257325 75253a5d73255b00 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88804011f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe5abc36700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ce5d4e8080 CR3=000000003a444000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fe5ae7a77c0 00007fe5ae7a77c8 YMM02=0000000000000000 0000000000000000 00007fe5ae7a77e0 00007fe5ae7a77c0 YMM03=0000000000000000 0000000000000000 00007fe5ae7a77c8 00007fe5ae7a77c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000