Warning: Permanently added '[localhost]:46616' (ECDSA) to the list of known hosts. 2022/10/02 01:08:06 fuzzer started 2022/10/02 01:08:06 dialing manager at localhost:35095 syzkaller login: [ 37.530973] cgroup: Unknown subsys name 'net' [ 37.654890] cgroup: Unknown subsys name 'rlimit' 2022/10/02 01:08:22 syscalls: 2215 2022/10/02 01:08:22 code coverage: enabled 2022/10/02 01:08:22 comparison tracing: enabled 2022/10/02 01:08:22 extra coverage: enabled 2022/10/02 01:08:22 setuid sandbox: enabled 2022/10/02 01:08:22 namespace sandbox: enabled 2022/10/02 01:08:22 Android sandbox: enabled 2022/10/02 01:08:22 fault injection: enabled 2022/10/02 01:08:22 leak checking: enabled 2022/10/02 01:08:22 net packet injection: enabled 2022/10/02 01:08:22 net device setup: enabled 2022/10/02 01:08:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 01:08:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 01:08:22 USB emulation: enabled 2022/10/02 01:08:22 hci packet injection: enabled 2022/10/02 01:08:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 01:08:22 802.15.4 emulation: enabled 2022/10/02 01:08:22 fetching corpus: 50, signal 21430/23235 (executing program) 2022/10/02 01:08:22 fetching corpus: 100, signal 44595/47909 (executing program) 2022/10/02 01:08:22 fetching corpus: 150, signal 52183/56969 (executing program) 2022/10/02 01:08:22 fetching corpus: 200, signal 56449/62698 (executing program) 2022/10/02 01:08:22 fetching corpus: 250, signal 60802/68454 (executing program) 2022/10/02 01:08:22 fetching corpus: 300, signal 67004/75904 (executing program) 2022/10/02 01:08:23 fetching corpus: 350, signal 73820/83774 (executing program) 2022/10/02 01:08:23 fetching corpus: 400, signal 76467/87692 (executing program) 2022/10/02 01:08:23 fetching corpus: 450, signal 78988/91494 (executing program) 2022/10/02 01:08:23 fetching corpus: 500, signal 83207/96744 (executing program) 2022/10/02 01:08:23 fetching corpus: 550, signal 86859/101451 (executing program) 2022/10/02 01:08:23 fetching corpus: 600, signal 90165/105755 (executing program) 2022/10/02 01:08:23 fetching corpus: 650, signal 94074/110616 (executing program) 2022/10/02 01:08:23 fetching corpus: 700, signal 96503/114049 (executing program) 2022/10/02 01:08:24 fetching corpus: 750, signal 98363/116918 (executing program) 2022/10/02 01:08:24 fetching corpus: 800, signal 100181/119761 (executing program) 2022/10/02 01:08:24 fetching corpus: 850, signal 102633/123119 (executing program) 2022/10/02 01:08:24 fetching corpus: 900, signal 105112/126434 (executing program) 2022/10/02 01:08:24 fetching corpus: 950, signal 106334/128641 (executing program) 2022/10/02 01:08:24 fetching corpus: 1000, signal 109390/132436 (executing program) 2022/10/02 01:08:24 fetching corpus: 1050, signal 110877/134814 (executing program) 2022/10/02 01:08:24 fetching corpus: 1100, signal 113324/138003 (executing program) 2022/10/02 01:08:25 fetching corpus: 1150, signal 116345/141572 (executing program) 2022/10/02 01:08:25 fetching corpus: 1200, signal 119666/145362 (executing program) 2022/10/02 01:08:25 fetching corpus: 1250, signal 121670/148090 (executing program) 2022/10/02 01:08:25 fetching corpus: 1300, signal 123490/150609 (executing program) 2022/10/02 01:08:25 fetching corpus: 1350, signal 125110/152970 (executing program) 2022/10/02 01:08:25 fetching corpus: 1400, signal 126127/154779 (executing program) 2022/10/02 01:08:25 fetching corpus: 1450, signal 127418/156841 (executing program) 2022/10/02 01:08:25 fetching corpus: 1500, signal 129478/159468 (executing program) 2022/10/02 01:08:26 fetching corpus: 1550, signal 131593/162052 (executing program) 2022/10/02 01:08:26 fetching corpus: 1600, signal 132930/164113 (executing program) 2022/10/02 01:08:26 fetching corpus: 1650, signal 133782/165753 (executing program) 2022/10/02 01:08:26 fetching corpus: 1700, signal 134968/167618 (executing program) 2022/10/02 01:08:26 fetching corpus: 1750, signal 136083/169407 (executing program) 2022/10/02 01:08:26 fetching corpus: 1800, signal 138226/171985 (executing program) 2022/10/02 01:08:26 fetching corpus: 1850, signal 139263/173665 (executing program) 2022/10/02 01:08:26 fetching corpus: 1900, signal 140464/175374 (executing program) 2022/10/02 01:08:26 fetching corpus: 1950, signal 141560/177079 (executing program) 2022/10/02 01:08:26 fetching corpus: 2000, signal 143271/179205 (executing program) 2022/10/02 01:08:27 fetching corpus: 2050, signal 144330/180809 (executing program) 2022/10/02 01:08:27 fetching corpus: 2100, signal 145331/182355 (executing program) 2022/10/02 01:08:27 fetching corpus: 2150, signal 146534/184075 (executing program) 2022/10/02 01:08:27 fetching corpus: 2200, signal 147322/185487 (executing program) 2022/10/02 01:08:27 fetching corpus: 2250, signal 148364/187047 (executing program) 2022/10/02 01:08:27 fetching corpus: 2300, signal 148945/188254 (executing program) 2022/10/02 01:08:27 fetching corpus: 2350, signal 150630/190158 (executing program) 2022/10/02 01:08:27 fetching corpus: 2400, signal 151330/191433 (executing program) 2022/10/02 01:08:27 fetching corpus: 2450, signal 152086/192750 (executing program) 2022/10/02 01:08:28 fetching corpus: 2500, signal 152913/194112 (executing program) 2022/10/02 01:08:28 fetching corpus: 2550, signal 154926/196113 (executing program) 2022/10/02 01:08:28 fetching corpus: 2600, signal 156589/197853 (executing program) 2022/10/02 01:08:28 fetching corpus: 2650, signal 158520/199836 (executing program) 2022/10/02 01:08:28 fetching corpus: 2700, signal 160144/201612 (executing program) 2022/10/02 01:08:28 fetching corpus: 2750, signal 160664/202717 (executing program) 2022/10/02 01:08:28 fetching corpus: 2800, signal 161357/203878 (executing program) 2022/10/02 01:08:28 fetching corpus: 2850, signal 161949/204993 (executing program) 2022/10/02 01:08:29 fetching corpus: 2900, signal 162990/206328 (executing program) 2022/10/02 01:08:29 fetching corpus: 2950, signal 163814/207527 (executing program) 2022/10/02 01:08:29 fetching corpus: 3000, signal 164365/208558 (executing program) 2022/10/02 01:08:29 fetching corpus: 3050, signal 165029/209650 (executing program) 2022/10/02 01:08:29 fetching corpus: 3100, signal 166295/211019 (executing program) 2022/10/02 01:08:29 fetching corpus: 3150, signal 166916/212071 (executing program) 2022/10/02 01:08:29 fetching corpus: 3200, signal 167541/213119 (executing program) 2022/10/02 01:08:29 fetching corpus: 3250, signal 168243/214157 (executing program) 2022/10/02 01:08:29 fetching corpus: 3300, signal 169411/215410 (executing program) 2022/10/02 01:08:30 fetching corpus: 3350, signal 170779/216752 (executing program) 2022/10/02 01:08:30 fetching corpus: 3400, signal 172227/218097 (executing program) 2022/10/02 01:08:30 fetching corpus: 3450, signal 172777/219034 (executing program) 2022/10/02 01:08:30 fetching corpus: 3500, signal 173343/219909 (executing program) 2022/10/02 01:08:30 fetching corpus: 3550, signal 174139/220939 (executing program) 2022/10/02 01:08:30 fetching corpus: 3600, signal 174653/221848 (executing program) 2022/10/02 01:08:30 fetching corpus: 3650, signal 175213/222762 (executing program) 2022/10/02 01:08:30 fetching corpus: 3700, signal 176079/223757 (executing program) 2022/10/02 01:08:30 fetching corpus: 3750, signal 177026/224803 (executing program) 2022/10/02 01:08:31 fetching corpus: 3800, signal 178815/226160 (executing program) 2022/10/02 01:08:31 fetching corpus: 3850, signal 180094/227326 (executing program) 2022/10/02 01:08:31 fetching corpus: 3900, signal 181012/228278 (executing program) 2022/10/02 01:08:31 fetching corpus: 3950, signal 181780/229157 (executing program) 2022/10/02 01:08:31 fetching corpus: 4000, signal 182567/230075 (executing program) 2022/10/02 01:08:31 fetching corpus: 4050, signal 183178/230907 (executing program) 2022/10/02 01:08:31 fetching corpus: 4100, signal 183607/231647 (executing program) 2022/10/02 01:08:32 fetching corpus: 4150, signal 184058/232421 (executing program) 2022/10/02 01:08:32 fetching corpus: 4200, signal 184646/233280 (executing program) 2022/10/02 01:08:32 fetching corpus: 4250, signal 185244/234159 (executing program) 2022/10/02 01:08:32 fetching corpus: 4300, signal 186088/235113 (executing program) 2022/10/02 01:08:32 fetching corpus: 4350, signal 186501/235792 (executing program) 2022/10/02 01:08:32 fetching corpus: 4400, signal 187243/236575 (executing program) 2022/10/02 01:08:32 fetching corpus: 4450, signal 188012/237399 (executing program) 2022/10/02 01:08:32 fetching corpus: 4500, signal 188709/238166 (executing program) 2022/10/02 01:08:33 fetching corpus: 4550, signal 189926/239136 (executing program) 2022/10/02 01:08:33 fetching corpus: 4600, signal 190519/239871 (executing program) 2022/10/02 01:08:33 fetching corpus: 4650, signal 191277/240591 (executing program) 2022/10/02 01:08:33 fetching corpus: 4700, signal 192014/241334 (executing program) 2022/10/02 01:08:33 fetching corpus: 4750, signal 192830/242088 (executing program) 2022/10/02 01:08:33 fetching corpus: 4800, signal 193766/242854 (executing program) 2022/10/02 01:08:33 fetching corpus: 4850, signal 194278/243505 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/244121 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/244621 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/245153 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/245625 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/246167 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/246645 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/247142 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/247631 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/248108 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/248623 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/249107 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/249613 (executing program) 2022/10/02 01:08:33 fetching corpus: 4874, signal 194680/250109 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/250595 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/251063 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/251600 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/252073 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/252568 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/253082 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/253574 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/254077 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/254602 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/255167 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/255683 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/256189 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/256710 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/257214 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/257713 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/258203 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/258752 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/259186 (executing program) 2022/10/02 01:08:34 fetching corpus: 4874, signal 194680/259186 (executing program) 2022/10/02 01:08:37 starting 8 fuzzer processes 01:08:37 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x3, 0x4}, {0x3, 0x7}], r1}, 0x18, 0x3) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = accept(r0, &(0x7f0000000280)=@qipcrtr, &(0x7f0000000300)=0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {r1, 0xffffffffffffffff}}, './file0\x00'}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x105000, 0x0) signalfd4(r6, &(0x7f00000003c0)={[0x81]}, 0x8, 0x80000) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x13, r7, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000440)=@sco}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000500)) sendfile(r2, r6, &(0x7f0000000700)=0x8, 0x7) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r7, 0x0) syz_io_uring_setup(0x45a4, &(0x7f0000000740)={0x0, 0x9f56, 0x1, 0x1, 0x26e, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) r11 = syz_open_dev$vcsn(&(0x7f0000000840), 0x100000000000000, 0x80) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r11, &(0x7f0000000880), &(0x7f0000000980)='./file0\x00', 0x23}, 0x3) inotify_init1(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x20010, r5, 0x0) [ 68.073991] audit: type=1400 audit(1664672917.119:6): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:08:37 executing program 1: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0xffffffff, {{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x88) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendto$inet6(r0, &(0x7f0000000100)="2a6d1563e17b68eca0e8cf058b7749abdbf076533de86e18bd87e403e2293d88d307c173f24ba58a1f2f2c7162e6080d81c49b8c9e8bde6bb9d673132ba0e2036c15f557d217b4fbf4ae4d67c02006c07dc72dca88ae7f06bb92", 0x5a, 0x4004044, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000000e80)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/51, 0x33}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/97, 0x61}, {&(0x7f0000000a00)=""/171, 0xab}], 0xa, &(0x7f0000000b80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000d40)=""/124, 0x7c}, {&(0x7f0000000dc0)=""/113, 0x71}], 0x2}}], 0x2, 0x40000000, &(0x7f0000000f40)={r2, r3+60000000}) clone3(&(0x7f0000000fc0)={0x2382000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3a}, &(0x7f0000000240)=""/182, 0xb6, &(0x7f0000000300)=""/47, &(0x7f0000000f80)=[r9], 0x1, {r1}}, 0x58) clock_gettime(0x6, &(0x7f0000001040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r6, @in_args={0x2}}, './file0\x00'}) openat$cgroup_subtree(r11, &(0x7f0000001100), 0x2, 0x0) waitid$P_PIDFD(0x3, r6, &(0x7f0000001140), 0x8, &(0x7f00000011c0)) openat$cgroup_procs(r5, &(0x7f0000001280)='cgroup.threads\x00', 0x2, 0x0) waitid(0x0, r10, &(0x7f00000012c0), 0x40000000, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000001340), &(0x7f0000001380)=0x4) futex(&(0x7f00000013c0), 0x5, 0x0, &(0x7f0000001400)={0x77359400}, &(0x7f0000001440)=0x2, 0x1) vmsplice(r8, &(0x7f00000016c0)=[{&(0x7f0000001480)="d2d267f04803022e56cde96be333f351c11386a32b0944ad5ceb7700911b1bd06c3f91ace609baecf12abdebd18c08ca0aed159c2e493f076abe788d1079452335fef05be7fe06", 0x47}, {&(0x7f0000001500)="ebfd3e8145ee70ac00d1dc9a6d6fcd6a1bc378976dd04b02ab8a1070b94cb0547b84b8005511dc342fc6c7c7d6ab72b08a6d73513db6fc2f5fcbf2769e49ed0adb106417454660774658f2a9d2373e5b6b02bd557a47bafdfc1172db2f5b409460937f3dddd836a49a0224ca06584c99605eae354e4dc3061009c23678fcf74df3605c4d270079e9838caabce9ace3fe9ee0a13109f99f0a3928fa02daa38fc9a78b372fe88bf51421c6b1eb138203cfb840a29104cb943c0c204829e88b4c26670d93b0945e48e2930d6ac022b7fdbc9504bc3e8777367c94821da3", 0xdc}, {&(0x7f0000001600)="46f43920585d8f91cab3ec08e02b5776d12d7fd17cf9e83b4752f75a33a51d8206642f48a1a8b821ee3c8a778055cc2bc655742ddb97efdf9b19343ca759e8c21ceafd6bbfb11a7b8dac84dedca669ae6996272e1f164b0d7512693e3c65cea5d1d6a28b885bf16dce7edcbfece7702014c13002d25452a5cfc9aa17610dab127c1296ddd4467f588254b25589c358762d8b3c267618dd041abfe2a307e278d870969915ccddc7d1e1e53f46f02a91c3d3a5ae6f6b64b2312cc42875", 0xbc}], 0x3, 0x8) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000001700)={0x0, 0x1, 0x9, 0x1}) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x40010, r1, 0x0) syz_io_uring_submit(r13, 0x0, &(0x7f0000002ec0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd, 0x80000000, &(0x7f0000002e40)=[{&(0x7f0000001b00)="3239a7202c5902663e453e8054b5d43a1d7b1886", 0x14}, {&(0x7f0000001b40)="0d39928d98c997946b5567b437ea2139231241b27e43d08c1d5fe61cd1ac90f05e2a65dbc56e8b4c0b11ffb247c1c5ffa6a0a54584d1db162d408a2d4ba59281040d65230ed674acf2b2443d7b88f41233e187aa79b2542862de", 0x5a}, {&(0x7f0000001bc0)="83daf731acd8b5e439189b9fe40ac5b5b1c5297885b6d247c72d7b8eb6ce4c67da39f654e001f97e7353d0c945ea0ce14a015f65f7028c654e1f65c7574082f46c1385745d159c21cac545899ec744d4af9e", 0x52}, {&(0x7f0000001c40)="ad39d902132da81974dae7840c3a0480641771c8362323f44a9a33c3305a313b2b1efe16", 0x24}, {&(0x7f0000001c80)="411a5bda1a3db1e07617270143016a3c1e2509c417325e1e964945b031ac682f19ee782f9862d596e85ce96ce110fcc8733dd4751621e80ef94272b9ef3f69c2eb26e4ad1f26688b1b6c74579bc6d6f14ca788c589cd7f2ce8a2e630929952a27f3fda4a37a06018dbdd4c9e6c94f8012aab4ade66201f2d88eb42c97885de4219e16454c6956a259c1fc30f485826ff0569914644f0a9750d6bc49d54592d5cd0e6dc1a075794f3239c18e0f3d9aa8d2594a292e632bb4a07368bbcd6ea815c066c6125be4e1c1e489a0a6edd2690fb616c0d60bc3ef46bb3a306c7b28e98eb370e32a987e1cb4863993d28f825c73e9f060759dfdbdbc921ce7c2aad31e88ef2f8bb65ed8d2538f29a20f1ca7d8989fee83aab5a7e9105471fe6f5f9d93fd533cbd42e5fcfca619a859f75de3be53bd7f779e55f63ba3fab80818fc55d7a0e33be750ebc27966140e4d6ffe0e841e18cc1758e23f37c37893325299b71d7694a7d61714015555eb1761c95dd2bae84dc275f07a339069e5e195ea15441ce167c4332dafcc02e59bf16840b610df134aacd184e7500b97c664f9e07e0d57686e5213a3ed7344fd3dae8313229a1653f5c822e9edf07fd35986921e9bb0a07ea1853df48256737c8b02a45623082dc34a043e8e919d181fda6f214bdc306896e044cbe903ab370a043698740e04e2d7cf5fdc3e46eb05950fe35e1055574b47d0ceb6de192d630bccb1b4cf07e7dfb2d78ffd906674cf31c3b7f006e112f45e1ca80dca7bedff3ee1be440b0bb3e62de9d77a084cde30bee0fd45ea1890ce4ffafb2dffdf299673aa3c3f24ac6e8806f58cdf1393f1658d28c5ee3ed8fd79983fbe89c90cbd4d4f24eb135682b06aef58f534279a39e33eca8f7264e42465ac7735456f86a79d0effb47853fb2500a415451b949fce4ce289b32cf744bcbcfdc5a8f7b3875de8bd4e9dba739ceb7c6c22e6ee6c40b56603875c119c3cc7b44e57e37cc653e3f20d913e5078e7eb40b3296633246694595bfb4f2f4bde80fc5f6150498ae7f83f61e1c69025d15ea068ed896930381e4287e0c0807dc9a0daafd63d218cb3b03a37ded1715d4dfff01d911af7e53144e2137f256d723daffd9029ada249854846b3bb745edde95a12aa74ed7e199e5b24ba79121abf33f53299aedcf212765982b6e874dfc57c7504a8305b70bbfd8cd63890820ed9f7bae7673671433dfc7644f4b6dac50ad6b1961976b3593f60f5dda1b1234a62e426bdbe1c16482a1496d00ce71486d0589278132bfec39b65b24b87b6f7cd74b9c2c5f3d00ca5f757093450f0d7232b05c8cac5c9ed01d9e2cf11514070e0542aba520114090df27d961b512ae9156f7ef7a00200cde3e709e45de7ef271865ccf4ccb8875c93d2e06979e55d638fe55cbd9436fc42e530dae38005d6dbb71e2328b71ecaf13d46a37d0b703673d3a307e004c07809170f7d239393ce60f01d1dfe7ea1a2df1f7a4bb4b17d16137b808a5b7347a4582c33e6ad681122dcc02b1e51e102ef30d681c4d56538e1119628b426dd01f98b1b490d8bfe92aa4685352cb7bcd566e72989d95098a2ea455116b1d77dcef72411a9b2cba818aca6e1b61ddb0fb2b1848dc52d6024cf5ff53e5616da549785961e85085545b10a2cfeaf6116d2731e59eea2b4fc35e5c3f61c69e331c9bb80bf2039f8bc965d26ef05fc288f50fa8443a60e97300e464c53d773048599bb065820983c60d4d5d09d4df983d4a42737463d6a8e96e34d9c678b138add98e1fd92f123913d5c03987a5ac49209ab69dff3f66c8eb3a0ce93914f43f99f94e9f5a95d8dfc098082dc5800106abc2e5ca3e4df7af37f2124c21ed9d7f86eb19807d5f3760e9500bcbc455f5a0176bae497ede3143c260f49e7c3029189cebace9c58610e90076d45f9618f6fd99ed6b33f1b07cf0947c3cd741ba3d3252cd55df06edc6acecb6407d847c78ec6bf67976c997da6f1f98f639d0b84cb00307574902f9e1c20421aade17ab4724b5973f36487b884ee9b1c3e35d9f27b1465cf12de8f05dc2f9b34d677d2c01424caa8f03cc3fd1cb04db15d37ebf9ecadce98c7aded8306f474d1bf6986c6cb99b243b5c15e82452f0c6dcbea576da69c0be7d0160ae1932cda2eaa4569ec34e640d178ee939a483cc58e5cdacba5608d6cdf6546e1cde92b9014e14f83e57a0e5ba0a8f2f3abcb24175aab7bf1b77f081abe2f2a87dbe96f4167105bea74a6dcc51748f4abb8e3ef887a6e103c2abc17a5ada7277d2ebdf7bc2be6259ed125ca40dd75bfc99f047bab8793b9dd14974fde5f4ebc562a84f2acdb822e6428b1c1a3ce782d0fd9181f70388a2b53d841ea39f70bff88dd64445a0aa2306d36a32ce14364b566a152e1857afbcf87a37899286b6d7e8fd0b600dd2db674cb0f1f22c13b360a0808ef2cc84e1f1bd8e981eba289a0244e7dbfe868566df419a207b7bd714a4c2bb2a067293431b497eceda5ee59d95befe38a9a64cd77e8e906cecd7e8f0629f4ada69f52bff29061c3cf76affc52381edd9304d322a54bd0b7cdefee5763b8fcf0651929e6514516f6ea0f9806b701139bd82bf8ed3b38c9fb4b43bc31f57557f25a80529f0387e6fe0f8465a704ebe5df5a114b8c12e87b00ccc5b31f8dab2dd9bd71a88abf7764d2cac55f3ad32f1d479b1dfc2e53ebc9ed8f536e2b03239bd11df423c1ad91083c2120833bd64e2075d7ad202ce4cf8abde9c8952e8ef9d29d198a53a3f265430ec061d7bfdfbd1665416a4edb746d5ee77d076fdbaa88865ed9fdc49a91d218ae343c082f2b94d662d7aa90c01666e357a0315339e639a1f56fb967cbf36988e4b2483d320179ea47e2f281d725bc690a383719e1ce610474c215a692f341eb641b248c815d952fc0dd31d42937c56085f88a2fa02926352b8dd0b6205a9135cd658c78a605414c03f4d9fae94fe80be280ac435dd8058358bad499b4d792a66087573b8c480056fb1f34af0ce46d642bd44055ee95a8762e0c1faf9856de8ddb9e29a528567f6906f55d9689ca335cdee11676082dd6cad87ba278a79a45a348f5aa119d459aff75305f6b442d9815af08e637cc307207046550278e4d20ea46c59f764c460c189094c5a639c9814678c9014f5d6fa94c2ae0ece1e2854181e6274b66ae9800a30b4176d956b8f5fada7fd7fa704c3b6dfe8247d31afb6a4f3531ea285f296f170639c9c41a0c50a02c01a39b91f7782b4d39787d8d96ad5fe193509287504e31ba859f436d17ce50fa96ec6fb29b55ae0efd957fe34500aee2619b13cfd477a3e513e637242474434d7522fdc2f230f3fc6b2e1e3cade7c4e9887ef62ca9c7f90df32fa201adc099752e05d641a64cbdfd9a61e4a1ad463133a2844cb816a4761932ef4254d437964bcb7c8108e1536fde202f33e7dee13a46de792d2d1941629304648fa3d05430fe9ca1dc1702ad8d59f592fe6ecc048615337e8d3ca816415125a0dc3a66b831a70c88af03e773e5d6123d4065b13e64013e284c127c8cf0d738ed1b35de5f3f0149857669c223d1b0ff754876f7b1322bfaf313d0ce7cb1459bb274c7da762838fdd708b7590c0c20809d6db67f4f5f609dd9537b4f0ddd7ca77843e1eae584dce9032c3d0fe69d1bb85a39d53f306c95369f0b9b4761c875b98e65965a28685f23c4c50a09866d139e7bb22a9dbd58f595a2650f4cec78e6eeecf533e906f1fd209250c48dae3cbb23a9b2a5538924a499aa9733d6d61d8b3f6e9b2c670ddc29bdc23475ee5bd003e9e90facf619f50bd84422864a2d5754a81b0883cfeac3caf321c705329caa2d679e29673686c4c855c83e241769a89c8ea49fe2dc30206a65995d22e52e445d70c5493318f493cfd0b1a10573508aeb23a8c71aa91e1d4527a43079f937556c89b184a58b819824ab5b22bc04c19912106ab9761f0d603b0232bf4442c58116a5b330b1f8c4bcedc864135ec3719c90f636d72737b5b82871dd36c3149b38ce59996ad9237cdbbc184fa1b43db2e1ee9281a0f2db3a1adc7d310f57c6b5604abd8ca95100995daa394c23fe69209ca6dd5285be7b3dd95a9921445c777829a25f6c6a9be148f8954dc329b102cf68b25a6706da63b483bb81096d228974e51b20bf51e03d15f03db4d19218ed8230e3fa110d341139577a2ed61714c74e19c272c647a66b84c44c39f94e70cd2baaad4d19afc737dffbe2de3c19d470c567430e73463d390d63d2fea24173d75b37773cb32a2d6abf305f3c51ba9258e32eab1a578095fbd354fbce54d149cb5bda69c119556509cc8024d687623569822b9ea51ec9857a952293b99f6f576a8416a6b781fda77a2a6bc9666777fac2b947bece469c88659bc6f640cdffa340057271ab64df4928528e15418eb973d81f73e153db0898b41d5605cf9101ddc477fb0bfd325473c728c25b7142037d0a75412d343b0904fddaae7733fc9c936a54e4d12a934e55717615d1986a0029979feb111c944c360ac059ba5a9ca4b49441fa9e998645ac18956513f289db9b9f5a95df6fac4baae17a3eed2c83d55401303508af780a30bd5d81f4ee9abddc1f09e6ce46ffbef3506c74959d656fe0ba8e50a6b1a9afbd4b0537219523182fcfb76f11603c6010375fbb18936ee804bfa047d6c622db5070bf9e581d855a03d665794207fa709bebce94d5ed04bb899f122eaa4334f1a5b5ab0f883d06b25475bed1977bf0b5069c0dfa4c7b177ceb4b5d946b579551459672e0fe9a7137e8eaa561fc23301a5acab0873970644abe357121844c1d4117a6144858487ee544a3559ea0cf3de44d3884069acf8490c6eea70647540b6240cab5f320446abfa13e93133e6a956c71d25d222e213a2e3dec897e7d92bd87277025acc6eb69e46b6a049cb82b42d75645663fae60268844cc2bf16321f55ab6d8cac4d80e60e04cdc3ae284651a03fb79b5e2cfb8085bb0ab77cc31354dda12b7d428059f0a97f9659f9971560389dcc34b32fbf3373c05a2009b69327d7071598ed9e9eeaa83af52d962ca9d1dd946d5450bd8416bf6273f8102b65ba7c1b86bd7b16311f6e92c5f06553d2d89722aa3297dfe2a7e8a99bfbd360e4a961e2fb5dc6d269e35a9c5ce7a08aec2e82b5d18fb6eaf437bbaf344b50f3305889514275ad55db0d299a440611fc6a315a2cbbcc8b801e7b7d65fd8ca0c4622bcd55e67a44d7d02378f63803655d48df093c7ec91ac43ee440dffb6a114cea349de94d4506263bceaae065d506ad2589b563b34c63b6c57fd37b8e3650099ea7fb6ae7f07c1b0e0739382ba0d5935ae3b0a5891873208c4ab044a91b10c1d27b37f85618f878b39b821f3508688d8c58183e4e3019e72a233bf3c4b602e32f7abbf9262386f3575ced2db6047d00b057e1851fb887bf67db40e84ef87e21232a74e96945749ea72ff481521165f59b60aab1214e07d5ed871e793baafad06d6cd36cd2fda4b132142ae5a411edea64aaab6558f70e50095863a69661640cec1ae38ac1cb7437c34ad7f9168cdf7172d861480e2cc20c2627c6c38c66f0b530b94bb6876bc40e518aa0c5c0eba518846e7c3716c51e0c8847f12dab11491bd69df362a3acd8046b5262cf8a518ad37febda4a9455b89d2c80798e3777ee4b6ffa9b2fc4f8d2e73eb4d31eb1e7205cfc7cebcff2285a28135814a8229c054ad41007bc50e94a78663744c32edb4ff76a2942541d293bdb8b557f61e7cdf042b864ca8f40a8fc889dc96af1930e", 0x1000}, {&(0x7f0000002c80)="5df01f508a1d6cf5c0e139f0761ab01f06034f11cc0507a575e00dabfc20c473c4692c84c8726f1e2cebfe39ced478497901d52f63cf60c59707b5d234411030a6099fa0862c64e5a5d58506adc780113cb2c0fd4595ac3bb19259d42d8d0edec9ae51df1189f84e83ac4af127b7442beef3e8068a42f32c94b98bb3f1bac28dc8dcf6e81f4aa7b639333bc0934c8ac1e5507894dd9888", 0x97}, {&(0x7f0000002d40)="4e144b9c36495953c5f25996cd3b2702971ada45ba2b093d1cbf41ab94ab561bbe944974587cc92656fb5078f062bc19d1ab51ac8387cad2d24a36002a4b8c4e4cab88f94d2ade4d85856bad885ca717402d3f28392b0812909a244f76aa3635e436ee7b15cc6ec87edba35fc2077145f928e3171f2c93c7d810cca52c742ff90cdac50a7593cfac8c6784ec925255b98a29bcbdf340aabcbf447d41260aa14c2006a25c61d162b74f05484af984008bcb6bd518718beb9f30c3277a84c1d2d38c8983ae78d8f3c1d1798404fc887b99e051524eb13853b3189753af30284204ff5c56", 0xe3}], 0x7, 0x8}, 0xd9) 01:08:37 executing program 2: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x1, 0x6, 0x4ca9, 0x2, 0x4e8cbc85, 0x7}) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x7, 0x839, 0x8000, 0x400, 0x5, 0x5}) r0 = gettid() capset(&(0x7f0000000100)={0x19980330, r0}, &(0x7f0000000140)={0x101, 0x6, 0x10000, 0xfff, 0xdcf}) init_module(&(0x7f0000000180)='#){(/@@\x00', 0x8, &(0x7f00000001c0)='@!^))\x00') r1 = getpgrp(r0) capget(&(0x7f0000000200)={0x19980330, r1}, &(0x7f0000000240)={0x7, 0x41aa8265, 0xaab4, 0x1, 0x6, 0x9}) r2 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x81, 0x80, 0x81, 0x26, 0x0, 0xfff, 0x10, 0xe7055b56fdf5be38, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000280), 0x9}, 0x8000, 0xd920, 0x3, 0x3, 0x1, 0x101, 0x2, 0x0, 0xff, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000340)={0xf1504, r1}, &(0x7f0000000380)={0x7, 0x3, 0x0, 0x6, 0x1fc5, 0xffffffff}) capset(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0xff, 0xffff, 0x2, 0x80, 0x5, 0x6}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)=0x0) capset(&(0x7f0000000480)={0x20071026, r3}, &(0x7f00000004c0)={0x3, 0x1, 0x80000001, 0x5, 0x4, 0x401}) capget(&(0x7f0000000500)={0x399f1316, r0}, &(0x7f0000000540)={0x1, 0x7, 0xffffff00, 0x80000000, 0x3f, 0x400}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f00000005c0)="acdeda2dcca5c69adc769b3b8cf296a0a4ddff3dfbbf26fcf17179f81de47b6b54e36b732611fa50f6a942bbb35dab8812b314dedb327bceb84618cd934c468d6eb109adca24f434") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000006c0)={r5, 0x124, 0x8}) init_module(&(0x7f0000000700)='/dev/sr0\x00', 0x9, &(0x7f0000000740)='#){(/@@\x00') ptrace(0x11, 0x0) 01:08:37 executing program 3: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8c1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000080) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) read$snapshot(r0, &(0x7f0000000200)=""/235, 0xeb) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300)) r2 = openat$incfs(r0, &(0x7f0000000340)='.log\x00', 0x105201, 0x111) pread64(r2, &(0x7f0000000380)=""/251, 0xfb, 0x80000001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0xc, 0x1}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x80000001}}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0xb3d0385ec8f2639d}, {0xc}, {0x16, 0x1}, {0x6, 0x1}, {0xc, 0x1}, {0x5, 0x1}, {}, {0x36}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb265, 0x40}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x93d3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x48010}, 0x40005) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'mptcp_pm\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'mptcp_pm\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4000) r6 = openat2(r2, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x52202, 0x4a}, 0x18) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "8100fb3c19836317ddd1d22cccbfba0e"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22040050}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b00)={0x344, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8133480ea612984b62dec9413aff2af5f31e0a4e"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "f652dc61475c03d1f65df9eeacad8a21085b735a738fa69ad7639a68495618356b66"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd087}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4d, 0x3, "3c46e1c36b45d1af6438466a7e675725904704022651c66ce08be05a01ce6f0196a13e41ebf606ee52e26a1da063a7cb7ca7d6e88ff44aa91706f17e9118d3f1de58552ebc0bd1a5e9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1dff2b5d9cba07ded49b65e16d1ff0079c61232b025605376b8d1ec4bf71c592"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "a99e298d174c9ec2f065840c1ec8d8ddd36cf592f89a761df46f67c92622"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x93a}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f9182be}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 01:08:37 executing program 5: r0 = shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) r1 = shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x3000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/82, 0x52}, &(0x7f00000010c0)=0x40) shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = creat(&(0x7f0000001100)='./file0\x00', 0x80) accept$inet(r2, &(0x7f0000001140)={0x2, 0x0, @empty}, &(0x7f0000001180)=0x10) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x3000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000011c0)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x5, 0x6, 0xfffffffffffffc00, 0x3ff, 0x100000001]}, &(0x7f0000001240)=0x78) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x1000) shmctl$SHM_UNLOCK(r0, 0xc) get_mempolicy(&(0x7f0000001280), &(0x7f00000012c0), 0x2, &(0x7f0000ff8000/0x4000)=nil, 0x4) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001300)=""/138) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) 01:08:37 executing program 4: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x0, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8081}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x500, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x987f95afe824f99b}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1b4d, 0x6b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6c79}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ad}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}]]}, 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x8014) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFQA_PAYLOAD={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x9000}, 0x40) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xec, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18cc7a01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7929}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cddc227}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6daa94ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b4e4fa}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5049675e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43bbbbe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fcf3083}]}]}]}, 0xec}}, 0x4000840) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a80), 0x341000, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) pipe2(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0x409, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1000}, @NL80211_ATTR_PMK={0x14, 0xfe, "f825f59d99c6d73c0b3c369f9f358903"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44890}, 0x4000014) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c858497091"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x134}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8edc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x40) pipe(&(0x7f00000010c0)) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x8, 0xe0, 0xd5, 0xc0, 0x0, 0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49, 0x0, @perf_config_ext={0x5, 0x3}, 0x80, 0x10001, 0x5, 0x1, 0x7, 0x0, 0x1f, 0x0, 0x5, 0x0, 0x671}, 0x0, 0x9, 0xffffffffffffffff, 0x0) lseek(r6, 0x10000, 0x4) 01:08:37 executing program 7: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil], &(0x7f0000000040)=[0x7, 0x1ff, 0x3ff, 0xfff, 0x6, 0x7fffffff], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x3, 0x1000, 0x10, &(0x7f0000ff7000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x0) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ff8000/0x3000)=nil, 0x0) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_setup(0x6fc7, &(0x7f00000000c0)={0x0, 0x8bf5, 0x10, 0x0, 0x3e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0x1000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x3000) shmat(r0, &(0x7f0000ff8000/0x1000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) 01:08:37 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x1c}}, 0x4004001) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x278, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x228, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb9, 0x3, "91e89665fb0d8107d2c48cb4d1fa9b1c06f8f4be303584af9d012e41a6249fba656ed2e81dfb1770e3bb5cc8b4c4ddd5553685f0f53fafc37a3025e807666426f2110b1d2a2392aab457940868dc0317c2ca6c3fb52e8eacde891e7414644c2e79f6f37f59dd03707ec0892bc5c74a69378bcd88203d125b485b6a2a8b46f379e22b6b19d0303e7f510b18e6686aaff26066a5db31f5468731430e62f09b0fe4b28555efe7993e90404c65d5fe702557d455c06346"}, @TIPC_NLA_NODE_ID={0xad, 0x3, "096641f623988f02ddfba393c25acf099ad2c2121227525b2c94a5986a828c6c7c3af1a97337a6067a5dd3c9a80b966676234734c703befff5de4b30ac9d1234c181e3fd3178e15512bf77309cb91e400c690769f1e8647a4f8774d3a96d2edf3859609bd94ca540c439ba3c1f1474d6c7f88d9f47458783cb60afa072788df0dfeeecb996b8d0f43ee811230a1ce25ce2d18655dd239e74904732103c875480431f4642af37b76741"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x548}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7de97fe825ee18fb61cb8a72ae1ef08d8a98d158e8ddaf16"}}, @TIPC_NLA_NODE_ID={0x62, 0x3, "0f51a75929386ddbbf76b823e0fc7b35abf6d33e7df07867e17133970b17e6ccccc5b0168469c16194882825363044d45609f0bfc95685f8ccecb75758bfb6dbbbf082dbee71e2bae1f1063cf268a10f8e718dc1137a49e35652cf3cba09"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x45}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x80}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x59}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xaa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = dup2(r0, r0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x63}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x536}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1c}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc059}, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x88, 0x0, 0x308, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040085}, 0x48881) syz_genetlink_get_family_id$wireguard(&(0x7f0000000dc0), r5) syz_genetlink_get_family_id$SEG6(&(0x7f0000000e00), r0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r5) [ 69.264820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.266668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.276451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.282086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.284034] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.285534] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.289947] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.429867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.476420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.478239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.479527] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.481277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.484033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.486426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.487682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.488845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.490080] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.491088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.492286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.492337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.497839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.499139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.512467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.512508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.513773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.518000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.518099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.520313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.521867] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.523125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.523324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.525574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.528375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.529762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.535013] Bluetooth: hci3: HCI_REQ-0x0c1a [ 69.537399] Bluetooth: hci2: HCI_REQ-0x0c1a [ 69.539505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.540178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.543283] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.554959] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.555070] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.557123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.559433] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.560570] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.568708] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.568730] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.570707] Bluetooth: hci4: HCI_REQ-0x0c1a [ 69.571789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.572748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.578315] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.579651] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.586274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.588052] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.589305] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.595123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.604854] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.344876] Bluetooth: hci0: command 0x0409 tx timeout [ 71.600787] Bluetooth: hci5: command 0x0409 tx timeout [ 71.600797] Bluetooth: hci7: command 0x0409 tx timeout [ 71.600996] Bluetooth: hci1: command 0x0409 tx timeout [ 71.601491] Bluetooth: hci4: command 0x0409 tx timeout [ 71.602002] Bluetooth: hci3: command 0x0409 tx timeout [ 71.602471] Bluetooth: hci2: command 0x0409 tx timeout [ 71.664966] Bluetooth: hci6: command 0x0409 tx timeout [ 73.392680] Bluetooth: hci0: command 0x041b tx timeout [ 73.648706] Bluetooth: hci3: command 0x041b tx timeout [ 73.649204] Bluetooth: hci4: command 0x041b tx timeout [ 73.649646] Bluetooth: hci2: command 0x041b tx timeout [ 73.650058] Bluetooth: hci1: command 0x041b tx timeout [ 73.650463] Bluetooth: hci5: command 0x041b tx timeout [ 73.650896] Bluetooth: hci7: command 0x041b tx timeout [ 73.712642] Bluetooth: hci6: command 0x041b tx timeout [ 75.440656] Bluetooth: hci0: command 0x040f tx timeout [ 75.696722] Bluetooth: hci7: command 0x040f tx timeout [ 75.697188] Bluetooth: hci5: command 0x040f tx timeout [ 75.697627] Bluetooth: hci1: command 0x040f tx timeout [ 75.698024] Bluetooth: hci2: command 0x040f tx timeout [ 75.698423] Bluetooth: hci4: command 0x040f tx timeout [ 75.698834] Bluetooth: hci3: command 0x040f tx timeout [ 75.760669] Bluetooth: hci6: command 0x040f tx timeout [ 77.488651] Bluetooth: hci0: command 0x0419 tx timeout [ 77.744686] Bluetooth: hci3: command 0x0419 tx timeout [ 77.744704] Bluetooth: hci4: command 0x0419 tx timeout [ 77.745141] Bluetooth: hci2: command 0x0419 tx timeout [ 77.745533] Bluetooth: hci1: command 0x0419 tx timeout [ 77.746288] Bluetooth: hci5: command 0x0419 tx timeout [ 77.746451] Bluetooth: hci7: command 0x0419 tx timeout [ 77.809750] Bluetooth: hci6: command 0x0419 tx timeout 01:09:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) [ 119.751398] audit: type=1400 audit(1664672968.797:7): avc: denied { open } for pid=3724 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.752807] audit: type=1400 audit(1664672968.797:8): avc: denied { kernel } for pid=3724 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.767115] ------------[ cut here ]------------ [ 119.767138] [ 119.767143] ====================================================== [ 119.767146] WARNING: possible circular locking dependency detected [ 119.767150] 6.0.0-rc7-next-20220930 #1 Not tainted [ 119.767157] ------------------------------------------------------ [ 119.767160] syz-executor.5/3725 is trying to acquire lock: [ 119.767167] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.767206] [ 119.767206] but task is already holding lock: [ 119.767209] ffff88800d4f5c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.767235] [ 119.767235] which lock already depends on the new lock. [ 119.767235] [ 119.767238] [ 119.767238] the existing dependency chain (in reverse order) is: [ 119.767241] [ 119.767241] -> #3 (&ctx->lock){....}-{2:2}: [ 119.767254] _raw_spin_lock+0x2a/0x40 [ 119.767266] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.767277] __schedule+0xedd/0x2470 [ 119.767290] schedule+0xda/0x1b0 [ 119.767303] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.767316] syscall_exit_to_user_mode+0x19/0x40 [ 119.767328] do_syscall_64+0x48/0x90 [ 119.767345] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.767357] [ 119.767357] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.767370] _raw_spin_lock_nested+0x30/0x40 [ 119.767381] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.767393] task_fork_fair+0x63/0x4d0 [ 119.767409] sched_cgroup_fork+0x3d0/0x540 [ 119.767423] copy_process+0x4183/0x6e20 [ 119.767433] kernel_clone+0xe7/0x890 [ 119.767443] user_mode_thread+0xad/0xf0 [ 119.767460] rest_init+0x24/0x250 [ 119.767471] arch_call_rest_init+0xf/0x14 [ 119.767489] start_kernel+0x4c6/0x4eb [ 119.767504] secondary_startup_64_no_verify+0xe0/0xeb [ 119.767518] [ 119.767518] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.767531] _raw_spin_lock_irqsave+0x39/0x60 [ 119.767541] try_to_wake_up+0xab/0x1930 [ 119.767554] up+0x75/0xb0 [ 119.767568] __up_console_sem+0x6e/0x80 [ 119.767583] console_unlock+0x46a/0x590 [ 119.767602] do_con_write+0xc05/0x1d50 [ 119.767612] con_write+0x21/0x40 [ 119.767621] n_tty_write+0x4d4/0xfe0 [ 119.767632] file_tty_write.constprop.0+0x455/0x8a0 [ 119.767643] vfs_write+0x9c3/0xd90 [ 119.767659] ksys_write+0x127/0x250 [ 119.767675] do_syscall_64+0x3b/0x90 [ 119.767691] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.767703] [ 119.767703] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.767717] __lock_acquire+0x2a02/0x5e70 [ 119.767733] lock_acquire+0x1a2/0x530 [ 119.767748] _raw_spin_lock_irqsave+0x39/0x60 [ 119.767759] down_trylock+0xe/0x70 [ 119.767773] __down_trylock_console_sem+0x3b/0xd0 [ 119.767789] vprintk_emit+0x16b/0x560 [ 119.767805] vprintk+0x84/0xa0 [ 119.767820] _printk+0xba/0xf1 [ 119.767831] report_bug.cold+0x72/0xab [ 119.767847] handle_bug+0x3c/0x70 [ 119.767863] exc_invalid_op+0x14/0x50 [ 119.767880] asm_exc_invalid_op+0x16/0x20 [ 119.767892] group_sched_out.part.0+0x2c7/0x460 [ 119.767909] ctx_sched_out+0x8f1/0xc10 [ 119.767925] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.767936] __schedule+0xedd/0x2470 [ 119.767949] schedule+0xda/0x1b0 [ 119.767962] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.767973] syscall_exit_to_user_mode+0x19/0x40 [ 119.767985] do_syscall_64+0x48/0x90 [ 119.768001] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.768014] [ 119.768014] other info that might help us debug this: [ 119.768014] [ 119.768016] Chain exists of: [ 119.768016] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.768016] [ 119.768031] Possible unsafe locking scenario: [ 119.768031] [ 119.768033] CPU0 CPU1 [ 119.768035] ---- ---- [ 119.768038] lock(&ctx->lock); [ 119.768043] lock(&rq->__lock); [ 119.768049] lock(&ctx->lock); [ 119.768055] lock((console_sem).lock); [ 119.768061] [ 119.768061] *** DEADLOCK *** [ 119.768061] [ 119.768063] 2 locks held by syz-executor.5/3725: [ 119.768069] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.768098] #1: ffff88800d4f5c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.768124] [ 119.768124] stack backtrace: [ 119.768127] CPU: 0 PID: 3725 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.768139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.768147] Call Trace: [ 119.768150] [ 119.768154] dump_stack_lvl+0x8b/0xb3 [ 119.768172] check_noncircular+0x263/0x2e0 [ 119.768188] ? format_decode+0x26c/0xb50 [ 119.768204] ? print_circular_bug+0x450/0x450 [ 119.768221] ? simple_strtoul+0x30/0x30 [ 119.768237] ? format_decode+0x26c/0xb50 [ 119.768254] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.768271] __lock_acquire+0x2a02/0x5e70 [ 119.768295] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.768320] lock_acquire+0x1a2/0x530 [ 119.768336] ? down_trylock+0xe/0x70 [ 119.768353] ? lock_release+0x750/0x750 [ 119.768373] ? vprintk+0x84/0xa0 [ 119.768391] _raw_spin_lock_irqsave+0x39/0x60 [ 119.768402] ? down_trylock+0xe/0x70 [ 119.768418] down_trylock+0xe/0x70 [ 119.768434] ? vprintk+0x84/0xa0 [ 119.768450] __down_trylock_console_sem+0x3b/0xd0 [ 119.768467] vprintk_emit+0x16b/0x560 [ 119.768486] vprintk+0x84/0xa0 [ 119.768503] _printk+0xba/0xf1 [ 119.768514] ? record_print_text.cold+0x16/0x16 [ 119.768530] ? report_bug.cold+0x66/0xab [ 119.768548] ? group_sched_out.part.0+0x2c7/0x460 [ 119.768566] report_bug.cold+0x72/0xab [ 119.768584] handle_bug+0x3c/0x70 [ 119.768601] exc_invalid_op+0x14/0x50 [ 119.768619] asm_exc_invalid_op+0x16/0x20 [ 119.768632] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.768652] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.768663] RSP: 0018:ffff888018bd7c48 EFLAGS: 00010006 [ 119.768672] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.768679] RDX: ffff8880188f5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.768687] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.768694] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d4f5c00 [ 119.768701] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.768712] ? group_sched_out.part.0+0x2c7/0x460 [ 119.768732] ? group_sched_out.part.0+0x2c7/0x460 [ 119.768752] ctx_sched_out+0x8f1/0xc10 [ 119.768771] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.768785] ? lock_is_held_type+0xd7/0x130 [ 119.768798] ? __perf_cgroup_move+0x160/0x160 [ 119.768809] ? set_next_entity+0x304/0x550 [ 119.768826] ? update_curr+0x267/0x740 [ 119.768844] ? lock_is_held_type+0xd7/0x130 [ 119.768858] __schedule+0xedd/0x2470 [ 119.768875] ? io_schedule_timeout+0x150/0x150 [ 119.768891] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.768911] schedule+0xda/0x1b0 [ 119.768926] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.768938] syscall_exit_to_user_mode+0x19/0x40 [ 119.768952] do_syscall_64+0x48/0x90 [ 119.768969] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.768982] RIP: 0033:0x7f2274947b19 [ 119.768990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.769001] RSP: 002b:00007f2271ebd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.769012] RAX: 0000000000000001 RBX: 00007f2274a5af68 RCX: 00007f2274947b19 [ 119.769019] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2274a5af6c [ 119.769026] RBP: 00007f2274a5af60 R08: 000000000000000e R09: 0000000000000000 [ 119.769033] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2274a5af6c [ 119.769040] R13: 00007ffe414e9a6f R14: 00007f2271ebd300 R15: 0000000000022000 [ 119.769053] [ 119.825250] WARNING: CPU: 0 PID: 3725 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 119.825931] Modules linked in: [ 119.826169] CPU: 0 PID: 3725 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.826753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.827566] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.827973] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.829282] RSP: 0018:ffff888018bd7c48 EFLAGS: 00010006 [ 119.829672] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.830185] RDX: ffff8880188f5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.830702] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 119.831215] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d4f5c00 [ 119.831739] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.832256] FS: 00007f2271ebd700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 119.832829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.833248] CR2: 00007fced24db8e0 CR3: 000000003fac8000 CR4: 0000000000350ef0 [ 119.833765] Call Trace: [ 119.833957] [ 119.834128] ctx_sched_out+0x8f1/0xc10 [ 119.834430] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.834807] ? lock_is_held_type+0xd7/0x130 [ 119.835126] ? __perf_cgroup_move+0x160/0x160 [ 119.835467] ? set_next_entity+0x304/0x550 [ 119.835787] ? update_curr+0x267/0x740 [ 119.836081] ? lock_is_held_type+0xd7/0x130 [ 119.836397] __schedule+0xedd/0x2470 [ 119.836677] ? io_schedule_timeout+0x150/0x150 [ 119.837015] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.837374] schedule+0xda/0x1b0 [ 119.837631] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.837987] syscall_exit_to_user_mode+0x19/0x40 [ 119.838339] do_syscall_64+0x48/0x90 [ 119.838626] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.838998] RIP: 0033:0x7f2274947b19 [ 119.839276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.840583] RSP: 002b:00007f2271ebd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.841127] RAX: 0000000000000001 RBX: 00007f2274a5af68 RCX: 00007f2274947b19 [ 119.841640] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2274a5af6c [ 119.842162] RBP: 00007f2274a5af60 R08: 000000000000000e R09: 0000000000000000 [ 119.842681] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2274a5af6c [ 119.843191] R13: 00007ffe414e9a6f R14: 00007f2271ebd300 R15: 0000000000022000 [ 119.843720] [ 119.843893] irq event stamp: 2968 [ 119.844144] hardirqs last enabled at (2967): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 119.844816] hardirqs last disabled at (2968): [] __schedule+0x1225/0x2470 [ 119.845417] softirqs last enabled at (1494): [] __irq_exit_rcu+0x11b/0x180 [ 119.846042] softirqs last disabled at (1459): [] __irq_exit_rcu+0x11b/0x180 [ 119.846660] ---[ end trace 0000000000000000 ]--- 01:09:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) [ 120.283483] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 120.292062] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 01:09:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 01:09:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 01:09:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 01:09:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 01:09:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 01:09:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0xf9, 0x9, 0x9, 0x0, 0x10000, 0x4800, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe9bb, 0x1, @perf_config_ext={0x7, 0x100}, 0x5000, 0x1, 0x3e02, 0xd, 0x100, 0x5, 0x1c00, 0x0, 0x6e}, r1, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x20, 0x8, 0xaf, 0x0, 0xfffffffffffffff7, 0x20010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000001}, 0x4000, 0x36, 0x7, 0x3, 0x25, 0x470, 0x4, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r0, 0x3) sync() ioperm(0x0, 0x800, 0x4) VM DIAGNOSIS: 01:09:29 Registers: info registers vcpu 0 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888018bd7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000079 R11=0000000000000001 R12=0000000000000079 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2271ebd700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fced24db8e0 CR3=000000003fac8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f2274a2e7c0 00007f2274a2e7c8 YMM02=0000000000000000 0000000000000000 00007f2274a2e7e0 00007f2274a2e7c0 YMM03=0000000000000000 0000000000000000 00007f2274a2e7c8 00007f2274a2e7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000003 RBX=0000000000000001 RCX=0000000000000000 RDX=00000000000011c7 RSI=00000000000011c7 RDI=ffffffff86277758 RBP=ffff88800eb57750 RSP=ffff88800eb57628 R8 =ffffffff852c46c0 R9 =ffff88800eb576f8 R10=ffffed1001d6aeec R11=000000000003603d R12=ffff88800eb57739 R13=ffff88800eb57758 R14=ffff88800eb576f8 R15=ffffffff8111c7f9 RIP=ffffffff8111a3b9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fae719398e0 CR3=000000003fcb2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000