Warning: Permanently added '[localhost]:11258' (ECDSA) to the list of known hosts. 2022/10/02 07:06:39 fuzzer started 2022/10/02 07:06:39 dialing manager at localhost:35095 syzkaller login: [ 44.228586] cgroup: Unknown subsys name 'net' [ 44.306613] cgroup: Unknown subsys name 'rlimit' 2022/10/02 07:06:54 syscalls: 2215 2022/10/02 07:06:54 code coverage: enabled 2022/10/02 07:06:54 comparison tracing: enabled 2022/10/02 07:06:54 extra coverage: enabled 2022/10/02 07:06:54 setuid sandbox: enabled 2022/10/02 07:06:54 namespace sandbox: enabled 2022/10/02 07:06:54 Android sandbox: enabled 2022/10/02 07:06:54 fault injection: enabled 2022/10/02 07:06:54 leak checking: enabled 2022/10/02 07:06:54 net packet injection: enabled 2022/10/02 07:06:54 net device setup: enabled 2022/10/02 07:06:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 07:06:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 07:06:54 USB emulation: enabled 2022/10/02 07:06:54 hci packet injection: enabled 2022/10/02 07:06:54 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 07:06:54 802.15.4 emulation: enabled 2022/10/02 07:06:55 fetching corpus: 50, signal 30683/32454 (executing program) 2022/10/02 07:06:55 fetching corpus: 100, signal 38725/42162 (executing program) 2022/10/02 07:06:55 fetching corpus: 150, signal 48156/53122 (executing program) 2022/10/02 07:06:55 fetching corpus: 200, signal 56488/62867 (executing program) 2022/10/02 07:06:55 fetching corpus: 250, signal 61079/68849 (executing program) 2022/10/02 07:06:55 fetching corpus: 300, signal 67186/76243 (executing program) 2022/10/02 07:06:55 fetching corpus: 350, signal 73295/83523 (executing program) 2022/10/02 07:06:55 fetching corpus: 400, signal 75793/87342 (executing program) 2022/10/02 07:06:56 fetching corpus: 450, signal 79900/92622 (executing program) 2022/10/02 07:06:56 fetching corpus: 500, signal 81640/95621 (executing program) 2022/10/02 07:06:56 fetching corpus: 550, signal 84562/99719 (executing program) 2022/10/02 07:06:56 fetching corpus: 600, signal 87708/103961 (executing program) 2022/10/02 07:06:56 fetching corpus: 650, signal 90186/107525 (executing program) 2022/10/02 07:06:56 fetching corpus: 700, signal 93801/112093 (executing program) 2022/10/02 07:06:56 fetching corpus: 750, signal 95957/115319 (executing program) 2022/10/02 07:06:56 fetching corpus: 800, signal 101709/121618 (executing program) 2022/10/02 07:06:57 fetching corpus: 850, signal 105452/126128 (executing program) 2022/10/02 07:06:57 fetching corpus: 900, signal 108349/129840 (executing program) 2022/10/02 07:06:57 fetching corpus: 950, signal 110365/132773 (executing program) 2022/10/02 07:06:57 fetching corpus: 1000, signal 112145/135477 (executing program) 2022/10/02 07:06:57 fetching corpus: 1050, signal 114131/138294 (executing program) 2022/10/02 07:06:57 fetching corpus: 1100, signal 116016/141018 (executing program) 2022/10/02 07:06:57 fetching corpus: 1150, signal 117317/143216 (executing program) 2022/10/02 07:06:57 fetching corpus: 1200, signal 119760/146367 (executing program) 2022/10/02 07:06:58 fetching corpus: 1250, signal 122187/149446 (executing program) 2022/10/02 07:06:58 fetching corpus: 1300, signal 123633/151681 (executing program) 2022/10/02 07:06:58 fetching corpus: 1350, signal 124601/153510 (executing program) 2022/10/02 07:06:58 fetching corpus: 1400, signal 125778/155540 (executing program) 2022/10/02 07:06:58 fetching corpus: 1450, signal 127665/158116 (executing program) 2022/10/02 07:06:58 fetching corpus: 1500, signal 129637/160784 (executing program) 2022/10/02 07:06:58 fetching corpus: 1550, signal 130749/162685 (executing program) 2022/10/02 07:06:58 fetching corpus: 1600, signal 131960/164606 (executing program) 2022/10/02 07:06:59 fetching corpus: 1650, signal 134060/167205 (executing program) 2022/10/02 07:06:59 fetching corpus: 1700, signal 135365/169195 (executing program) 2022/10/02 07:06:59 fetching corpus: 1750, signal 136566/171079 (executing program) 2022/10/02 07:06:59 fetching corpus: 1800, signal 137642/172823 (executing program) 2022/10/02 07:06:59 fetching corpus: 1850, signal 138961/174763 (executing program) 2022/10/02 07:06:59 fetching corpus: 1900, signal 140336/176732 (executing program) 2022/10/02 07:06:59 fetching corpus: 1950, signal 141118/178204 (executing program) 2022/10/02 07:06:59 fetching corpus: 2000, signal 141835/179656 (executing program) 2022/10/02 07:06:59 fetching corpus: 2050, signal 143364/181644 (executing program) 2022/10/02 07:06:59 fetching corpus: 2100, signal 144231/183145 (executing program) 2022/10/02 07:07:00 fetching corpus: 2150, signal 145084/184673 (executing program) 2022/10/02 07:07:00 fetching corpus: 2200, signal 145834/186107 (executing program) 2022/10/02 07:07:00 fetching corpus: 2250, signal 148387/188675 (executing program) 2022/10/02 07:07:00 fetching corpus: 2300, signal 149811/190572 (executing program) 2022/10/02 07:07:00 fetching corpus: 2350, signal 152140/193006 (executing program) 2022/10/02 07:07:00 fetching corpus: 2400, signal 153933/195026 (executing program) 2022/10/02 07:07:00 fetching corpus: 2450, signal 154452/196234 (executing program) 2022/10/02 07:07:00 fetching corpus: 2500, signal 155134/197517 (executing program) 2022/10/02 07:07:01 fetching corpus: 2550, signal 155958/198911 (executing program) 2022/10/02 07:07:01 fetching corpus: 2600, signal 157399/200630 (executing program) 2022/10/02 07:07:01 fetching corpus: 2650, signal 158341/202022 (executing program) 2022/10/02 07:07:01 fetching corpus: 2700, signal 158747/203045 (executing program) 2022/10/02 07:07:01 fetching corpus: 2750, signal 159657/204397 (executing program) 2022/10/02 07:07:02 fetching corpus: 2800, signal 160880/205928 (executing program) 2022/10/02 07:07:02 fetching corpus: 2850, signal 161577/207117 (executing program) 2022/10/02 07:07:02 fetching corpus: 2900, signal 162314/208323 (executing program) 2022/10/02 07:07:02 fetching corpus: 2950, signal 162998/209514 (executing program) 2022/10/02 07:07:02 fetching corpus: 3000, signal 164971/211409 (executing program) 2022/10/02 07:07:02 fetching corpus: 3050, signal 165616/212514 (executing program) 2022/10/02 07:07:02 fetching corpus: 3100, signal 167111/214095 (executing program) 2022/10/02 07:07:03 fetching corpus: 3150, signal 167694/215190 (executing program) 2022/10/02 07:07:03 fetching corpus: 3200, signal 168437/216369 (executing program) 2022/10/02 07:07:03 fetching corpus: 3250, signal 169253/217495 (executing program) 2022/10/02 07:07:03 fetching corpus: 3300, signal 169645/218464 (executing program) 2022/10/02 07:07:03 fetching corpus: 3350, signal 170374/219613 (executing program) 2022/10/02 07:07:03 fetching corpus: 3400, signal 171251/220768 (executing program) 2022/10/02 07:07:03 fetching corpus: 3450, signal 172086/221878 (executing program) 2022/10/02 07:07:04 fetching corpus: 3500, signal 174696/223943 (executing program) 2022/10/02 07:07:04 fetching corpus: 3550, signal 175542/225019 (executing program) 2022/10/02 07:07:04 fetching corpus: 3600, signal 176175/226026 (executing program) 2022/10/02 07:07:04 fetching corpus: 3650, signal 177332/227274 (executing program) 2022/10/02 07:07:04 fetching corpus: 3700, signal 177837/228194 (executing program) 2022/10/02 07:07:04 fetching corpus: 3750, signal 178429/229121 (executing program) 2022/10/02 07:07:04 fetching corpus: 3800, signal 178984/230086 (executing program) 2022/10/02 07:07:04 fetching corpus: 3850, signal 179524/230993 (executing program) 2022/10/02 07:07:04 fetching corpus: 3900, signal 180194/232053 (executing program) 2022/10/02 07:07:05 fetching corpus: 3950, signal 180868/233051 (executing program) 2022/10/02 07:07:05 fetching corpus: 4000, signal 181511/234036 (executing program) 2022/10/02 07:07:05 fetching corpus: 4050, signal 182122/234967 (executing program) 2022/10/02 07:07:05 fetching corpus: 4100, signal 183003/235931 (executing program) 2022/10/02 07:07:05 fetching corpus: 4150, signal 183761/236880 (executing program) 2022/10/02 07:07:05 fetching corpus: 4200, signal 184448/237767 (executing program) 2022/10/02 07:07:05 fetching corpus: 4250, signal 185498/238823 (executing program) 2022/10/02 07:07:05 fetching corpus: 4300, signal 186236/239727 (executing program) 2022/10/02 07:07:06 fetching corpus: 4350, signal 187059/240629 (executing program) 2022/10/02 07:07:06 fetching corpus: 4400, signal 188063/241566 (executing program) 2022/10/02 07:07:06 fetching corpus: 4450, signal 188586/242352 (executing program) 2022/10/02 07:07:06 fetching corpus: 4500, signal 189531/243261 (executing program) 2022/10/02 07:07:06 fetching corpus: 4550, signal 190214/244069 (executing program) 2022/10/02 07:07:06 fetching corpus: 4600, signal 190761/244836 (executing program) 2022/10/02 07:07:06 fetching corpus: 4650, signal 191592/245630 (executing program) 2022/10/02 07:07:06 fetching corpus: 4700, signal 192247/246388 (executing program) 2022/10/02 07:07:07 fetching corpus: 4750, signal 192811/247120 (executing program) 2022/10/02 07:07:07 fetching corpus: 4800, signal 193591/247871 (executing program) 2022/10/02 07:07:07 fetching corpus: 4850, signal 194381/248645 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/249282 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/249842 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/250386 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/250907 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/251473 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/252026 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/252588 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/253133 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/253690 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/254247 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/254797 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/255392 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/255960 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/256495 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/257053 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/257592 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/258141 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/258696 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/259247 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/259797 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/260375 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/260931 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/261451 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/261998 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/262539 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/263091 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/263661 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/264219 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/264799 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/265356 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/265887 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/266466 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/267006 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/267552 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/268109 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/268470 (executing program) 2022/10/02 07:07:07 fetching corpus: 4875, signal 194680/268470 (executing program) 2022/10/02 07:07:10 starting 8 fuzzer processes 07:07:10 executing program 0: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, r0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, r0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) syz_io_uring_setup(0x1200, &(0x7f0000000000)={0x0, 0xb0c0, 0x10, 0x2, 0x2bd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, r1) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, r2) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) io_uring_enter(0xffffffffffffffff, 0x69f0, 0x1230, 0x2, &(0x7f0000000140)={[0x400]}, 0x8) 07:07:10 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x12) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_REG_RULES={0x28, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xbc}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88805}, 0x40800) recvmsg$unix(r0, &(0x7f00000013c0)={&(0x7f0000000180), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/162, 0xa2}], 0x2, &(0x7f0000001300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x10000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3f, 0x6, 0x44, @private2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7, 0x7, 0x6, 0x8}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000050) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000091) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4c}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40008) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r5) getpeername$packet(r4, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000018c0)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000001900)={@dev, 0x0}, &(0x7f0000001940)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001980)={0x158, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x74, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x70, 0x5, "286df8eca7250774cf6e327c3909bbd9d5ecfc289a9fd0814d0dd1ee1776cd4380dd112413dbf6ff2139d6525ff673f4a8b3b8c842a2db3cbfb714017d9b7fc4ff9a844900e3c8de446771d1a5588df6464dfe2d03453686ff52b91d5880d2ce6e77cd25f3ffd7a1afc0afed"}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000001b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x40, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x12702a77}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000001cc0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r13 = open(&(0x7f0000001d00)='.\x00', 0x0, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r13, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d80)={0x154, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4010}, 0x1) openat(r2, &(0x7f0000001f80)='./file0\x00', 0x620100, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001fc0)={0x5e, @broadcast, 0x4e23, 0x3, 'fo\x00', 0x31, 0x40, 0x42}, 0x2c) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 07:07:10 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000040)=0x7fff, 0x4) r0 = syz_io_uring_complete(0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'team0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008005}, 0x4a1a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"4fd5054a483deef6e168c10e6b5740f9", 0x0, 0x0, {0x2}, {0x9, 0x6}, 0x4, [0x800, 0x2, 0x0, 0x6, 0x2, 0x7fffffff, 0x8, 0x80000000, 0xffffffffffffd740, 0x3, 0x2, 0x2, 0xfffffffffffff84a, 0x3, 0x2, 0x90]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{r0}, r2, 0x0, @inherit={0x50, &(0x7f0000000300)={0x0, 0x1, 0x1ecf, 0x7fff, {0x10, 0xfffffffffffffffb, 0x7, 0x5, 0x5}, [0x8001]}}, @subvolid=0xfff}) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001380)={0x2, 0x1, 0x1f}) socketpair(0x29, 0x3, 0x3, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r3, &(0x7f0000001400)={0x2, 0x4e24, @remote}, 0x10) fremovexattr(r3, &(0x7f0000001440)=@random={'user.', 'team0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000014c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x1000) r5 = signalfd4(r1, &(0x7f00000015c0)={[0x5]}, 0x8, 0x800) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xac, 0x0, 0x113, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3f, 0x1}, {0x0, 0x5}, {0x8, 0x4}, {0x3, 0x6}, {0xff, 0x1}, {0x6, 0x5}, {0x9}, {0x81, 0x2}, {0xeb, 0x2}, {0x6f}, {0x80, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x3a, 0x3}, {0x1, 0x7}, {0x81, 0x7}, {0x8, 0x6}, {0x0, 0x6}, {0xf2, 0x4}], "f75724183f3f5b58"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x20}, {0x5, 0x5}, {0x81, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x4b}, {0x3f, 0x2}, {0x5, 0x1}, {0x8, 0x2}, {0x3f, 0x6}, {0x39, 0x7}, {0x3f, 0x4}], "e3edec88e1f87240"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x8, 0x1}, {0xbc, 0x6}, {0x8, 0x7}, {0x1, 0x3}, {0xe4, 0x3}, {0x4, 0x2}, {0xff, 0x2}], "99ee310c255d9d5f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7f, 0x7}, {0x51, 0x1}, {0x8, 0x6}, {0x4, 0x4}, {0x20, 0x3}, {0x6c, 0x1}, {0xe1, 0x7}, {0x8, 0x6}, {0x79}, {0xe7, 0x2}, {0x81, 0x4}], "2f53fd2d77341457"}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001780)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000017c0)=0xa7, &(0x7f0000001800)=0x1) [ 75.235907] audit: type=1400 audit(1664694430.923:6): avc: denied { execmem } for pid=287 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:07:10 executing program 3: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x9, 0x1, '^*,%\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, ',&[\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, '}*\x00'}, @NFTA_COMPAT_NAME={0x7, 0x1, '.(\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x1) fallocate(r0, 0x44, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000380)={{r0}, r1, 0xa, @unused=[0x3ff, 0x4, 0xfffffffffffffff9, 0x4], @name="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"}) fsetxattr$security_evm(r0, &(0x7f0000001380), &(0x7f00000013c0)=@v2={0x5, 0x3, 0x3, 0x97ea030, 0x90, "4476228ff28b31e0899cad76643333cd066287646ecddcd7b0f844a85f23ef0435c481dfdc6484b2ce7c8388c9bd8fc5a9841d3538f43e4c21e67f69d82022f5f503801e637843f4a1a18f5d08b8c38e688bc211afe3eaee311805da49db92ab7e20d0c41a1a3952555b6ffa370e0c2368c30e2c6fe5e492bbfead0a12f7877f62a993a2734fdae6cfc48de1262e7b82"}, 0x99, 0x1) r2 = dup(0xffffffffffffffff) setsockopt(r2, 0x9, 0x401, &(0x7f0000001480)="6a95bf7e35e5e3567043a417d611e3656ea96ec4c4307934002790069eb8688b4eb0e71ca03c24f446ff83c8b20c38f2a885a82fc4e06065c30e2976e29b78ac5c35", 0x42) r3 = gettid() mq_notify(r2, &(0x7f0000001500)={0x0, 0x1, 0x0, @tid=r3}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001a80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001580)={0x494, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x480, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd08}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#:\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^*,%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa8fa}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'security.evm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "244e912cb681705c960e2fbf65e52f789356571f7c00a6f1258c0410bdfb10d2362cf58c38fdd0432a6f2fbead151ce85a3dc8dff2d15da832e788387031ea4db82a141c4738021d952f15eb5d28ae56c7b6668bb5570a1dcb5605b33e15227dd01be7df79383ef867d8b493bb57b95586b050d3a0689da5454d13fbc3ee831e3d07eecd533b4117e3e761120b40825dcfcc2af9f2243c886ad21704fa90a5db42163ebc92a6a17a59906eac63556f191812c95c02a1a44ee5789155a145003f88f83a3f1e3ab73486006912cd6a0f9370bbafa0f06441ed8c009b98f25af029fccb90e0086bc3a2d9f23ac660a4cfc133612896"}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "cd695d3d68c607e03d32159ac939b4fc59e293624f499d5412728d1c447e860df0ca38124264d4e9bc3f70c8724455088a2e25267b0b5be76aa73d23abd4d41a9bc0a71089869ef55db52b04732298a820106d285c096b68b086986ee33d65b9a0edb69096e387abef27d9155f2249b15e0f84856090ab6b79afb06d7491f79642538c14be6aec86198583d23651"}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "38e056839f2e8bc8714e3eca0ec540822ad33fa8b405808726d5fe5967a8084229cc85d56e907b2136590df756c2e49a78a726f711906a49de399e52d4f416aed32443671a5d7c5bd4c203ec8e89c4671fc2841758786e7e9705f86d926930a22d218327a238d478b15c8906f2e6a2d74892b1a99305adc2777c6544cde0c798e9384c72edf0a6619275405125ec71a93505990bcb7287c2c0f837d57d0850cc4f8fbfce0ed093cffe4da80a"}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "6fc1c4efd765043303860f4cdabd304d2394e602386535a6"}, @ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "1d8058fd95660708ca794b947906d2e6092939dfca6c27800784af4dc11c0b955897bca0f7b2ad80b19e012655f068a8fd"}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^*,%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xee#%^.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabf}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':*\xff\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '@:C^@\\(/[#%&{r*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^*,%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x40}, 0x840) fcntl$getown(0xffffffffffffffff, 0x9) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x20400, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001c00), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r5, {0x101, 0x1}}, './file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000001c80), 0x28, 0x440) ftruncate(r6, 0x8) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000001cc0)=0x1) move_mount(0xffffffffffffffff, &(0x7f0000001d00)='./file0\x00', r2, &(0x7f0000001d40)='./file1\x00', 0x54) 07:07:10 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x10000011) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x60}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x889f}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x38}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xebc1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa8}}, 0x50000) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008051}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000003c0)=0xdb79) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x5010, r0, 0x75f43000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001840)={0x53, 0xffffffffffffffff, 0x8f, 0x1f, @scatter={0x3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}]}, &(0x7f0000001640)="b338b8d291ebfee8797dc156dbfd9ef6077c1d0d46045ee3bb797ae6d76915d6b91a8ed2ce8a0729588b95c45c5c21b5d73727cdb19dbe9c193d9f0ac0744dbd4b911ac5adaff1be1b65f0d3f586315d28b5328bcc7d29373260cfd01ccd1865558aecddc28c2bdf0275c91b1526f7e22fbf983f95095020e574415586731ba5e6b4ba23305fe3c0b6c6df5c026cb7", &(0x7f0000001700)=""/240, 0x400, 0x20, 0x3, &(0x7f0000001800)}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockname$unix(r2, &(0x7f0000001900)=@abs, &(0x7f0000001980)=0x6e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000019c0)={0x1, 0x400, 0x7}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x26000011}, 0xc0) chmod(&(0x7f0000001b00)='./file0\x00', 0x14) r4 = openat$cgroup_subtree(r2, &(0x7f0000001b40), 0x2, 0x0) preadv2(r4, &(0x7f0000002cc0)=[{&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/34, 0x22}], 0x3, 0x20, 0x200, 0x8884092eb1abf7e0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000002d00)="a6f75bc4f8c7e2e64a22163b4a4d6f8e5e06cfe4bde3fa3d7ea6a0b7e7aa06fb957569fe2b829a2bb0cfd32b91f25ee943a20db5e1a2ea31d11d53862c9e4c42d1a1ed03b1125743fa28ce46ec28a20ea998f6e776798a155755cc65a317028bbc778c1f8a79e23d37fb517762205561432c79ead23e78b995d337bfb05c51a151bc185b2c710558e83520d4e05e8cfc979b8b98940d3ab3") r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_mount_image$nfs4(&(0x7f0000002dc0), &(0x7f0000002e00)='./file0\x00', 0x8001, 0x9, &(0x7f0000003500)=[{&(0x7f0000002e40)="eb17fa3b02ded357f28b74c71040595eaa9b0dbf0ee0c63b1d08e6b25bcfea3d9ced497184209aa7cdd0a7444537090a34ad41b0aa3564a6589569bef31cfae02135f919f1574312ae104b7c7bb96022420032285405566c897aece2f555f09718d6ef94648280cf5d2f229cfc233884295c692de3c6ad7cc5b08a8ff50db25ac3ef64dc7bb1d8d22a992981d187889febf44eb36aec5412212ea45abaa6c547129b15a0e08351ae0f640453a807b149ae6ec2c8ee70c4526d7c34ccb4440f94490f437cf2b9971c9cbf3640a4a85068c0a58a98638480f25013d8d8eae51105d8d5ca165d83f7cdc3faa53129baf66c4b7c11735e", 0xf5, 0x7f}, {&(0x7f0000002f40)="72c6f58f79f19c209f272ed19fa8da4e2b5974fe6dfdc4d3e773ca5d9b07814e2a592464062ed077cc9365e7f8100b97bc3405fc985bf2d240dc9941c5bb19fa917a21c83db31c4e9d0d4ddc127595194b2ea70ea2cabf4db9e7abee23fc21a1ab299f160f2a74126209773e37c6c5b7d4d09b85fb2b7392d46a9f385f83ededc913f750ff7438fd897e892782f1b29e071aa23f221f0750c1dd", 0x9a, 0xa1a}, {&(0x7f0000003000)="5795ee7284fb097df29c229d8c106a29d760ee4f11b0b4df49c137a24430ef4e25aa72f56b59c7d77a604f4f70bf641c3bd46e50a3dabfa97518e38ed92185132bb636afc652943e1789ea41290c2ea71bb73eff92a166b9e11baab4cf4dc117e1b58b60", 0x64, 0x4}, {&(0x7f0000003080)="c2d7aac24606db12f282e253a7bb71e65307c02dacbd1e591675392fe3b9c87987a7128f4439e78c5d73632ef17f8d1e464b64f0168571b3387ca7b06129d81f36f576268683b974ae3cdd3c742fb0d6930f3645a149a4a992a5ab7320b6333c7b0055c5add51e0b3a4e80115df19296b0f470bde4f7804b0d39a13b477da5bbf7f7fec13801aaaa9da3e213f3e6760dac7f284f9b5913774a6270eda9af43dff684f1c3558cab9a45de0e75f65fe8f21235a4e659be3ce26e1e6fdfd77b46e570", 0xc1, 0x1f}, {&(0x7f0000003180)="310a5267706e02aa33aec9f9b6864723cd73e82b46a06b2ec516d4c796a28ac2e7813998d12fb0893ba84347fc3a8faea1056a0d89235cfd7dbc84e0d0264fb3d97186309b01d05621ba05c3f994a90e1ea28ae85f1a36bbc765b74421a2da09c64c07bba3ad8b8c7fe8595a966a842a36", 0x71, 0x9}, {&(0x7f0000003200)="96e10289e451eb12536de3a90a7292fceb069f7720da13d56aaedc1c0afe01ec8334b39f0e78900570090e28378167d424b9ccdba696d8cdb4670a6efc2952e4f96d5640e9538bead3e30103979f4c7219c6ffec1df947aaf1be25697b8f59db2637f266196130320e5e10a5d1e58a202307d28000befd4e564cacbc259fc7e2d02ae28531ceb7d9bea83f5b6933af831ebe8ccdb406fa9efb588d43190f751c4c73d1e80006472481003b0ec1a94f2e5129", 0xb2}, {&(0x7f00000032c0)="6573d5ba6fbbc0f36580a3354b4c4063804e2c442c688dedcce22e53c692a97bb0ece67feb718fba3ef5d932493783cec817a2cbeef35841db916e7ad0692d9d046390a6e4d797ba2704119996fc2590ef3ff0cd5e176274aec3b71445bce064b654a06acc4a3dbe320d7b89125df62812694d035d06c21a2ff2d2f924eec93553c2d6a1be287a6369f2b36803093cfca5e7988c4375b7d50ff3c7f421cf329b350dd923cd95c3989f4ab960cc3524e765eed5400e9f9020c881970fab06dba52e1444e24ce6dfe6d0ddf18c", 0xcc, 0x7e4}, {&(0x7f00000033c0)="38a0b52162d13f0859150626e416602bad4556c0367751aaddb1ee3e0351c68e9e6ce8cce45f4b69b7122aaf7eeeb82d41f1a7b51904fbe735fbc2c55bc8cca460a64d23bc86a46abb203bfc9511b453d6194648eb9f7337c3b4cd175c558295a53e8337ab60796d05f6b6f45d43371cb96e15a22710049351aed79c35bf566e1340fe6e004b28459e2afafdc9132a5b951ff9", 0x93, 0x6}, {&(0x7f0000003480)="ebe6f0a13b236bf7c4f5060f33217c98b2fac9673919cd27d1731374d42db5163c0f66842c4ba862bdc3891eed2e409ad1c791e0a1f60b98d799d718e03423a07ede174cb5ca80ca38176a9374a1a0d3c3", 0x51, 0x8001}], 0x10, &(0x7f0000003600)={[{'\xff\xff\xff\xff\xff\xff'}, {'hash:ip\x00'}, {'cgroup.subtree_control\x00'}, {').(\")$]$'}, {'\xff\xff\xff\xff\xff\xff'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}, {@subj_user}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'hash:ip\x00'}}, {@fsname={'fsname', 0x3d, '^@,-(+{'}}, {@obj_user={'obj_user', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) fcntl$dupfd(r5, 0x406, r6) 07:07:11 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5c}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x28}}, 0x1) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x0, 0x100}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r1 = dup(0xffffffffffffffff) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0xa, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20008800) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44044}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000540)={0x758, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0x743, 0x91, "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"}]}, 0x758}, 0x1, 0x0, 0x0, 0x200008a4}, 0x40080) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000e40), 0x400003, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c0}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040054}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x50, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5e5b}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x81}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000001380)) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000001800)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x3080c000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001400)={0x3bc, r4, 0x420, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x33e, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @tim={0x5, 0xbc, {0x1, 0x44, 0xfb, "ca6cd8c607676c6f6778c8fdd352cd86f4dede4d51aa7caa70b1c754095c502a5bec75d71dfa22c7768b840414cc8e3f939d1909744153e3b9d41f9293764645b6b052abb97460fc5b18912b7c31fba81270363b51d5709ebb4cfabc0b559f40c29f84379d5a4f942a5e3d4c96f405a3a29623ff370f042ecce6b0cdfde3e24449a328113212d8c974fb1979e23c5f6e0a1a4713291b700c74463de3e71b98fd26d4c6531a3a90723a781a86df5766997c1b808525695ad095"}}, @fast_bss_trans={0x37, 0x7c, {0x77, 0x3, "6654bd994662c1c27d565d4355fc488f", "dd7a42b665d37d72cbe75fdb0f3f3d119e9c3329cecb5f6bee7f13a0730817d1", "82a9ae27b0632df9a12f96880da83e2cc07916f59e96c35ed227b61d1af660d3", [{0x3, 0xc, "edc0b7e05a0b67c33c737da8"}, {0x2, 0xf, "a9ce11a03538400fc62f6ad57cc7ef"}, {0x4, 0x9, "25bee8462fc45e218f"}]}}, @random_vendor={0xdd, 0x5b, "4fc3f76013377bbfbaf78f142770be80548d2ef4b72b2554456564be5c4bb7e69b480b4da4911da2cb83268281c4c3096e067f1542537b0d90f92f36793475fadd5325d1b8179a93b1b4e2459190bb2351be6d7a44379bd12c4018"}, @dsss={0x3, 0x1, 0x7}, @fast_bss_trans={0x37, 0xb5, {0x5, 0x6, "ad0f96fee9641bc6b870513ec49d3d78", "24e64ef80b9cc090951ed86851bcc01be1e1ffd444430a0675a81c869539b5eb", "54d3ea59841dd0029d6576a20f465b0a30e236fa6712e9d0f6cc96a76c50bca7", [{0x2, 0x5, "922ae73b9a"}, {0x1, 0x1a, "7dabe68493e9351aac884596df56235969d53f641100f64f57a9"}, {0x2, 0x10, "6c976dea46fc17912d50bff8c131735d"}, {0x2, 0xc, "a72d870f01ec6551ccaaf52b"}, {0x2, 0x7, "304d9cdf54ffa5"}, {0x1, 0x15, "9dc9c77a745c1abff4753fae949fbc7660312146e5"}]}}, @perr={0x84, 0xa2, {0x6, 0xa, [@not_ext={{}, @broadcast, 0x7ff, "", 0x19}, @not_ext={{}, @device_a, 0x7fff, "", 0x3e}, @ext={{}, @device_a, 0x8001, @device_a, 0x36}, @not_ext={{}, @device_a, 0x9, "", 0x42}, @ext={{}, @device_a, 0x0, @device_b, 0x34}, @ext={{}, @device_a, 0x0, @broadcast, 0x22}, @ext={{}, @device_b, 0x3, @device_a, 0x3f}, @not_ext={{}, @device_b, 0x8000, "", 0x12}, @not_ext={{}, @device_b, 0x1, "", 0x37}, @ext={{}, @device_b, 0xfffffffc, @broadcast, 0x3f}]}}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x6, 0x0, {0x100000001, 0x1, 0x0, 0x81, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x3, 0x1}}, @mesh_chsw={0x76, 0x6, {0x70, 0x80, 0x12, 0x7fff}}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x1, 0x0, {0x5, 0x91, 0x0, 0x1aa, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x85ec, 0x2}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x25, 0x2a, [@mesh_chsw={0x76, 0x6, {0xb3, 0x20, 0xf, 0x1f}}, @random_vendor={0xdd, 0x17, "0668fccadc8499174418ff24285717b0da2b496d736ba4"}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0xa46aa77be65ea7a5}, 0x41) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) 07:07:11 executing program 6: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80, 0x80800) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x3) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ebda98e39a6e5c01bb825f5a19e281b8bc3f041d65454351c6b2d976cd0b67bf8acbeb1716aea60f22f0b7301bfd957e80a3e87416eb3fa0c287de184dca58182aea708598594a95044578520b8430b39245d777c8c5916d4240fd392452c4777e51719ff8ed42c96acfdfaa9f66a4d0e5a390be4d0f2d41a8ba60af8a630919e2c3a72f1cb77536a30817ae70d960eeb3b912dc3ed6020f88e9157fbc2b3a86113b7548a73a1e4e2f258924174a7170f7155aacb1573ed954d3c3bd884321dafce8f22f8b79e8818d34b4af7bce82a5d5", 0xd1}], 0x1}, 0xbc09d6d9a0a342c3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0xc000, 0x0) sendto$unix(r1, &(0x7f0000000340)="8baa331cda6eee923869eedd3140b211afe7e9d483cddc6e8bbda44532028c567ca9d2528091f816ac461f377494cf46aa10bc0ab0fc86ac36cdaa1a107de03fadf8", 0x42, 0x4004000, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) r3 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd=r3, 0x3, 0xffffffffffffffff, 0x1, 0x4, 0x1, {0x1}}, 0x4d) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000480)={r0, 0xfffffffffffff000, 0x6, 0x8}) syz_io_uring_setup(0x1, &(0x7f00000004c0)={0x0, 0x5ce8, 0x0, 0x0, 0x35a, 0x0, r4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) recvmsg$unix(r1, &(0x7f0000000c00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/3, 0x3}, {&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/84, 0x54}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/84, 0x54}, {&(0x7f0000000ac0)=""/14, 0xe}], 0x9, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) recvmmsg$unix(r1, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c40)=""/123, 0x7b}], 0x1, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000e40)=""/30, 0x1e}, {&(0x7f0000000e80)=""/94, 0x5e}, {&(0x7f0000000f00)=""/234, 0xea}, {&(0x7f0000001000)=""/128, 0x80}, {&(0x7f0000001080)=""/208, 0xd0}, {&(0x7f0000001180)=""/57, 0x39}, {&(0x7f00000011c0)=""/136, 0x88}, {&(0x7f0000001280)=""/244, 0xf4}], 0x8, &(0x7f0000001400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001580)=""/198, 0xc6}, {&(0x7f0000001680)=""/135, 0x87}, {&(0x7f0000001740)=""/158, 0x9e}, {&(0x7f0000001800)=""/234, 0xea}, {&(0x7f0000001900)=""/142, 0x8e}], 0x5}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000001ac0)=""/87, 0x57}, {&(0x7f0000001b40)=""/69, 0x45}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/12, 0xc}, {&(0x7f0000002c00)=""/3, 0x3}, {&(0x7f0000002c40)}, {&(0x7f0000002c80)=""/184, 0xb8}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x8, &(0x7f0000003dc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003e40)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003ec0)=""/166, 0xa6}, {&(0x7f0000003f80)=""/187, 0xbb}], 0x2, &(0x7f0000004080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004100)=""/180, 0xb4}, {&(0x7f00000041c0)=""/175, 0xaf}, {&(0x7f0000004280)=""/181, 0xb5}, {&(0x7f0000004340)=""/203, 0xcb}, {&(0x7f0000004440)=""/18, 0x12}, {&(0x7f0000004480)=""/120, 0x78}], 0x6, &(0x7f0000004580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000004600)=@abs, 0x6e, &(0x7f0000005800)=[{&(0x7f0000004680)=""/175, 0xaf}, {&(0x7f0000004740)=""/148, 0x94}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x3, &(0x7f0000005840)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}], 0x7, 0x2041, 0x0) syz_io_uring_setup(0x666, &(0x7f0000005b00)={0x0, 0xc2d, 0x20, 0x0, 0x26}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000005b80), &(0x7f0000005bc0)) r8 = openat(r6, &(0x7f0000005c00)='./file0\x00', 0x400000, 0x10) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000005c40)) syz_genetlink_get_family_id$ethtool(&(0x7f0000005c80), 0xffffffffffffffff) openat(r7, &(0x7f0000005cc0)='./file0\x00', 0x20000, 0xa906495af1aedd0) pipe(&(0x7f0000005d00)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000005fc0)={&(0x7f0000005d40)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000005f40)=[{&(0x7f0000005d80)="62fb5665ab534debbdb3c5b077b5b2f855c279e1d15c37c86e4a92fe87580b5453e7a34c7976ca8ee9d55c04d780c2b98dd52cb3257bf8011c7dbfc275a6a95883716039339cf30f48fa90db18591bd92ffce8fbff4c9e11f5f9b5a1de31842ccf086d1316e16dbee344744192dc32abf75bc7b4fd9bc068cdca2d25c3332c6d6af1ca666969e2ba5de671092f2df987dd7359742b70ece4db4d0822e0556b624f990339c27282ba9a7568e5d0bf151f626978f1fd48aae30eba233c6cc61954cef5b94a792330e9e6be85853eea7b5a71b2", 0xd2}, {&(0x7f0000005e80)="2dc77487226fbfa63573335fec8fb0393674", 0x12}, {&(0x7f0000005ec0)="f2b497924ba346585c829036ed606d21d5cfac421f276391cb63f0042903432d72edf11c6a9b4f84849ad99fde6dc967f754d1375d0cacf230ac1efcd84c6197cc591cabdf746bf1d72637135b5988538395e8ce065c10e8af725c725a551b28", 0x60}], 0x3, &(0x7f0000005f80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6dd}}], 0x18}, 0x4014) ioctl$SG_SET_RESERVED_SIZE(r8, 0x2275, &(0x7f0000006000)=0x98) 07:07:11 executing program 7: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x8810) r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x101202) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x15, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4a005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x104, 0x1, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0xa8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x4000010, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4000, @fd_index=0x2, 0x8, 0x0, 0x0, 0xa, 0x1}, 0x6) getpeername(r1, &(0x7f00000004c0)=@tipc=@id, &(0x7f0000000540)=0x80) ppoll(&(0x7f0000000580), 0x0, &(0x7f00000005c0), &(0x7f0000000600)={[0x8]}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000640)) r3 = accept(r1, 0x0, &(0x7f0000000680)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000006c0)={0x0, {0x13, 0x187d, 0x9, 0x4, 0x3f}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0xac}}, './file0\x00'}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000740)) fcntl$notify(r3, 0x402, 0x20) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r3, 0x5, &(0x7f0000000840)=[{&(0x7f0000000780)="3c84a19553e6ce3fb132c525ab562457167eb64f3c63775da50b9f4d3b3129e7e5e12879c8cd7209b64cf0d9f04e177beb45d094b17c1df7153d1ecccb8f0d83ce27220c6e7b30fefb946ef517c2c52a0ac3a2887d8ddb333adf9de18b3e1f08377d6db858337cf20ef52090e68ec171ebd5efb8e0e4ad4b33e78fa1a53a5df46e2b84b270cf00684299c3449fab4f3ede87ea6591d80599cfa937e05a53093d3da2d0a7db7de7", 0xa7}], 0x1, 0x10, 0x1, {0x1, r5}}, 0x6) r6 = syz_io_uring_setup(0x2579, &(0x7f00000008c0)={0x0, 0x2fb2, 0x4, 0x2, 0x9d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000940), &(0x7f0000000980)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) [ 76.711676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.713331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.714327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.715809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.716940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.720682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.722496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.724035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.726276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.729703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.731129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.732262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.735677] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.749190] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.752077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.756233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.756968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.761539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.761962] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.766966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.768988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.771086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.783036] Bluetooth: hci0: HCI_REQ-0x0c1a [ 76.795978] Bluetooth: hci2: HCI_REQ-0x0c1a [ 76.813139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.817383] Bluetooth: hci3: HCI_REQ-0x0c1a [ 76.819102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.842013] Bluetooth: hci1: HCI_REQ-0x0c1a [ 76.849668] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.851307] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.852787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.855139] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.856505] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.857696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.863980] Bluetooth: hci6: HCI_REQ-0x0c1a [ 76.938477] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.941162] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.943114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.948379] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.954093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 76.956058] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.968494] Bluetooth: hci7: HCI_REQ-0x0c1a [ 78.839459] Bluetooth: hci3: command 0x0409 tx timeout [ 78.839929] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 78.840469] Bluetooth: hci0: command 0x0409 tx timeout [ 78.841325] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 78.902924] Bluetooth: hci6: command 0x0409 tx timeout [ 78.903515] Bluetooth: hci1: command 0x0409 tx timeout [ 78.904108] Bluetooth: hci2: command 0x0409 tx timeout [ 79.031011] Bluetooth: hci7: command 0x0409 tx timeout [ 80.887200] Bluetooth: hci3: command 0x041b tx timeout [ 80.888178] Bluetooth: hci0: command 0x041b tx timeout [ 80.950958] Bluetooth: hci2: command 0x041b tx timeout [ 80.951753] Bluetooth: hci1: command 0x041b tx timeout [ 80.952550] Bluetooth: hci6: command 0x041b tx timeout [ 81.080903] Bluetooth: hci7: command 0x041b tx timeout [ 81.958483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.961271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.969385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.993305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.999974] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.022659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.051017] Bluetooth: hci4: HCI_REQ-0x0c1a [ 82.935905] Bluetooth: hci0: command 0x040f tx timeout [ 82.935953] Bluetooth: hci3: command 0x040f tx timeout [ 82.998908] Bluetooth: hci6: command 0x040f tx timeout [ 82.998932] Bluetooth: hci1: command 0x040f tx timeout [ 82.999362] Bluetooth: hci2: command 0x040f tx timeout [ 83.127919] Bluetooth: hci7: command 0x040f tx timeout [ 84.086959] Bluetooth: hci4: command 0x0409 tx timeout [ 84.214979] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 84.983040] Bluetooth: hci3: command 0x0419 tx timeout [ 84.983802] Bluetooth: hci0: command 0x0419 tx timeout [ 85.046973] Bluetooth: hci1: command 0x0419 tx timeout [ 85.047716] Bluetooth: hci6: command 0x0419 tx timeout [ 85.048677] Bluetooth: hci2: command 0x0419 tx timeout [ 85.175755] Bluetooth: hci7: command 0x0419 tx timeout [ 86.134918] Bluetooth: hci4: command 0x041b tx timeout [ 87.021320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.035505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.042541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.046023] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.050697] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.060990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.068355] Bluetooth: hci5: HCI_REQ-0x0c1a [ 88.183018] Bluetooth: hci4: command 0x040f tx timeout [ 89.079142] Bluetooth: hci5: command 0x0409 tx timeout [ 90.231365] Bluetooth: hci4: command 0x0419 tx timeout [ 91.127975] Bluetooth: hci5: command 0x041b tx timeout [ 93.174926] Bluetooth: hci5: command 0x040f tx timeout [ 95.223949] Bluetooth: hci5: command 0x0419 tx timeout 07:08:07 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(0xffffffffffffffff, r1) signalfd4(r0, &(0x7f0000000000)={[0x5]}, 0x8, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x800, 0x0, 0x5, 0x300000, 0xb, "aa62c8d0939b88115cce2d8a56e80a6a763106"}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r5, &(0x7f00000078c0)=[{{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}}, {{&(0x7f0000000500)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000580)="fa8be386f01942f93dd1381c8193aca4d81d10c445c850ff3b37465a781732ab8aece0f79bdc947d5e4fc267646ecb9ad0a1a43c0c5cde50a564b709ee37f4456f0261509f82462e6caabf9916d7693e5cd666368866c04f62f84e4fbe839bc999cde731a4b01fabb96f47f8a54d191a9d", 0x71}], 0x1}}], 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='attr/current\x00') pread64(r5, &(0x7f0000000300)=""/230, 0xe6, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) [ 131.366570] audit: type=1400 audit(1664694487.054:7): avc: denied { open } for pid=3757 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.368294] audit: type=1400 audit(1664694487.054:8): avc: denied { kernel } for pid=3757 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.383717] audit: type=1400 audit(1664694487.071:9): avc: denied { block_suspend } for pid=3757 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 131.417656] ------------[ cut here ]------------ [ 131.417677] [ 131.417680] ====================================================== [ 131.417683] WARNING: possible circular locking dependency detected [ 131.417687] 6.0.0-rc7-next-20220930 #1 Not tainted [ 131.417693] ------------------------------------------------------ [ 131.417697] syz-executor.5/3758 is trying to acquire lock: [ 131.417703] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 131.417743] [ 131.417743] but task is already holding lock: [ 131.417746] ffff88801ecb0420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.417773] [ 131.417773] which lock already depends on the new lock. [ 131.417773] [ 131.417776] [ 131.417776] the existing dependency chain (in reverse order) is: [ 131.417780] [ 131.417780] -> #3 (&ctx->lock){....}-{2:2}: [ 131.417793] _raw_spin_lock+0x2a/0x40 [ 131.417805] __perf_event_task_sched_out+0x53b/0x18d0 [ 131.417816] __schedule+0xedd/0x2470 [ 131.417829] schedule+0xda/0x1b0 [ 131.417845] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.417858] syscall_exit_to_user_mode+0x19/0x40 [ 131.417871] do_syscall_64+0x48/0x90 [ 131.417888] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.417901] [ 131.417901] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 131.417914] _raw_spin_lock_nested+0x30/0x40 [ 131.417925] raw_spin_rq_lock_nested+0x1e/0x30 [ 131.417938] task_fork_fair+0x63/0x4d0 [ 131.417955] sched_cgroup_fork+0x3d0/0x540 [ 131.417969] copy_process+0x4183/0x6e20 [ 131.417980] kernel_clone+0xe7/0x890 [ 131.417989] user_mode_thread+0xad/0xf0 [ 131.418000] rest_init+0x24/0x250 [ 131.418011] arch_call_rest_init+0xf/0x14 [ 131.418029] start_kernel+0x4c6/0x4eb [ 131.418044] secondary_startup_64_no_verify+0xe0/0xeb [ 131.418059] [ 131.418059] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 131.418072] _raw_spin_lock_irqsave+0x39/0x60 [ 131.418083] try_to_wake_up+0xab/0x1930 [ 131.418096] up+0x75/0xb0 [ 131.418109] __up_console_sem+0x6e/0x80 [ 131.418125] console_unlock+0x46a/0x590 [ 131.418141] vprintk_emit+0x1bd/0x560 [ 131.418157] vprintk+0x84/0xa0 [ 131.418173] _printk+0xba/0xf1 [ 131.418184] regdb_fw_cb.cold+0x6c/0xa7 [ 131.418201] request_firmware_work_func+0x12e/0x240 [ 131.418221] process_one_work+0xa17/0x16a0 [ 131.418238] worker_thread+0x637/0x1260 [ 131.418255] kthread+0x2ed/0x3a0 [ 131.418269] ret_from_fork+0x22/0x30 [ 131.418281] [ 131.418281] -> #0 ((console_sem).lock){....}-{2:2}: [ 131.418294] __lock_acquire+0x2a02/0x5e70 [ 131.418311] lock_acquire+0x1a2/0x530 [ 131.418327] _raw_spin_lock_irqsave+0x39/0x60 [ 131.418337] down_trylock+0xe/0x70 [ 131.418352] __down_trylock_console_sem+0x3b/0xd0 [ 131.418368] vprintk_emit+0x16b/0x560 [ 131.418384] vprintk+0x84/0xa0 [ 131.418399] _printk+0xba/0xf1 [ 131.418409] report_bug.cold+0x72/0xab [ 131.418425] handle_bug+0x3c/0x70 [ 131.418441] exc_invalid_op+0x14/0x50 [ 131.418458] asm_exc_invalid_op+0x16/0x20 [ 131.418470] group_sched_out.part.0+0x2c7/0x460 [ 131.418488] ctx_sched_out+0x8f1/0xc10 [ 131.418504] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.418515] __schedule+0xedd/0x2470 [ 131.418529] schedule+0xda/0x1b0 [ 131.418542] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.418552] syscall_exit_to_user_mode+0x19/0x40 [ 131.418565] do_syscall_64+0x48/0x90 [ 131.418581] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.418593] [ 131.418593] other info that might help us debug this: [ 131.418593] [ 131.418596] Chain exists of: [ 131.418596] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 131.418596] [ 131.418611] Possible unsafe locking scenario: [ 131.418611] [ 131.418613] CPU0 CPU1 [ 131.418616] ---- ---- [ 131.418618] lock(&ctx->lock); [ 131.418624] lock(&rq->__lock); [ 131.418630] lock(&ctx->lock); [ 131.418636] lock((console_sem).lock); [ 131.418642] [ 131.418642] *** DEADLOCK *** [ 131.418642] [ 131.418644] 2 locks held by syz-executor.5/3758: [ 131.418650] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 131.418679] #1: ffff88801ecb0420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 131.418705] [ 131.418705] stack backtrace: [ 131.418708] CPU: 1 PID: 3758 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 131.418721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.418729] Call Trace: [ 131.418732] [ 131.418736] dump_stack_lvl+0x8b/0xb3 [ 131.418754] check_noncircular+0x263/0x2e0 [ 131.418771] ? format_decode+0x26c/0xb50 [ 131.418787] ? print_circular_bug+0x450/0x450 [ 131.418804] ? simple_strtoul+0x30/0x30 [ 131.418818] ? __lockdep_reset_lock+0x180/0x180 [ 131.418835] ? format_decode+0x26c/0xb50 [ 131.418852] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 131.418869] __lock_acquire+0x2a02/0x5e70 [ 131.418891] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.418913] lock_acquire+0x1a2/0x530 [ 131.418929] ? down_trylock+0xe/0x70 [ 131.418946] ? lock_release+0x750/0x750 [ 131.418963] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.418984] ? vprintk+0x84/0xa0 [ 131.419001] _raw_spin_lock_irqsave+0x39/0x60 [ 131.419012] ? down_trylock+0xe/0x70 [ 131.419028] down_trylock+0xe/0x70 [ 131.419044] ? vprintk+0x84/0xa0 [ 131.419061] __down_trylock_console_sem+0x3b/0xd0 [ 131.419078] vprintk_emit+0x16b/0x560 [ 131.419094] ? lock_downgrade+0x6d0/0x6d0 [ 131.419112] vprintk+0x84/0xa0 [ 131.419130] _printk+0xba/0xf1 [ 131.419141] ? record_print_text.cold+0x16/0x16 [ 131.419155] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 131.419169] ? lock_downgrade+0x6d0/0x6d0 [ 131.419186] ? report_bug.cold+0x66/0xab [ 131.419204] ? group_sched_out.part.0+0x2c7/0x460 [ 131.419222] report_bug.cold+0x72/0xab [ 131.419241] handle_bug+0x3c/0x70 [ 131.419258] exc_invalid_op+0x14/0x50 [ 131.419276] asm_exc_invalid_op+0x16/0x20 [ 131.419288] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.419308] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.419319] RSP: 0018:ffff88803baf7c48 EFLAGS: 00010006 [ 131.419328] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.419336] RDX: ffff888034bd9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 131.419344] RBP: ffff88801b140b90 R08: 0000000000000005 R09: 0000000000000001 [ 131.419351] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ecb0400 [ 131.419358] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 131.419369] ? group_sched_out.part.0+0x2c7/0x460 [ 131.419389] ? group_sched_out.part.0+0x2c7/0x460 [ 131.419409] ctx_sched_out+0x8f1/0xc10 [ 131.419428] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.419442] ? lock_is_held_type+0xd7/0x130 [ 131.419456] ? __perf_cgroup_move+0x160/0x160 [ 131.419466] ? set_next_entity+0x304/0x550 [ 131.419484] ? update_curr+0x267/0x740 [ 131.419502] ? lock_is_held_type+0xd7/0x130 [ 131.419516] __schedule+0xedd/0x2470 [ 131.419533] ? io_schedule_timeout+0x150/0x150 [ 131.419549] ? __x64_sys_futex_time32+0x480/0x480 [ 131.419563] schedule+0xda/0x1b0 [ 131.419578] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.419590] syscall_exit_to_user_mode+0x19/0x40 [ 131.419604] do_syscall_64+0x48/0x90 [ 131.419621] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.419634] RIP: 0033:0x7f8df70f1b19 [ 131.419643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.419653] RSP: 002b:00007f8df4667218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.419664] RAX: 0000000000000001 RBX: 00007f8df7204f68 RCX: 00007f8df70f1b19 [ 131.419671] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8df7204f6c [ 131.419678] RBP: 00007f8df7204f60 R08: 000000000000000e R09: 0000000000000000 [ 131.419685] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f8df7204f6c [ 131.419693] R13: 00007ffd4a12648f R14: 00007f8df4667300 R15: 0000000000022000 [ 131.419705] [ 131.479036] WARNING: CPU: 1 PID: 3758 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 131.479755] Modules linked in: [ 131.480000] CPU: 1 PID: 3758 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 131.480621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.481499] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 131.481933] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 131.483338] RSP: 0018:ffff88803baf7c48 EFLAGS: 00010006 [ 131.483755] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.484319] RDX: ffff888034bd9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 131.484873] RBP: ffff88801b140b90 R08: 0000000000000005 R09: 0000000000000001 [ 131.485427] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ecb0400 [ 131.485976] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 131.486543] FS: 00007f8df4667700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 131.487142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.487588] CR2: 00007ffc1a763dd8 CR3: 000000003fd94000 CR4: 0000000000350ee0 [ 131.488140] Call Trace: [ 131.488350] [ 131.488532] ctx_sched_out+0x8f1/0xc10 [ 131.488844] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.489267] ? lock_is_held_type+0xd7/0x130 [ 131.489613] ? __perf_cgroup_move+0x160/0x160 [ 131.489961] ? set_next_entity+0x304/0x550 [ 131.490289] ? update_curr+0x267/0x740 [ 131.490594] ? lock_is_held_type+0xd7/0x130 [ 131.490924] __schedule+0xedd/0x2470 [ 131.491216] ? io_schedule_timeout+0x150/0x150 [ 131.491567] ? __x64_sys_futex_time32+0x480/0x480 [ 131.491935] schedule+0xda/0x1b0 [ 131.492202] exit_to_user_mode_prepare+0x114/0x1a0 [ 131.492576] syscall_exit_to_user_mode+0x19/0x40 [ 131.492942] do_syscall_64+0x48/0x90 [ 131.493238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.493632] RIP: 0033:0x7f8df70f1b19 [ 131.493913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.495264] RSP: 002b:00007f8df4667218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.495828] RAX: 0000000000000001 RBX: 00007f8df7204f68 RCX: 00007f8df70f1b19 [ 131.496354] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8df7204f6c [ 131.496891] RBP: 00007f8df7204f60 R08: 000000000000000e R09: 0000000000000000 [ 131.497434] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f8df7204f6c [ 131.497964] R13: 00007ffd4a12648f R14: 00007f8df4667300 R15: 0000000000022000 [ 131.498502] [ 131.498683] irq event stamp: 2598 [ 131.498935] hardirqs last enabled at (2597): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 131.499650] hardirqs last disabled at (2598): [] __schedule+0x1225/0x2470 [ 131.500282] softirqs last enabled at (2314): [] __irq_exit_rcu+0x11b/0x180 [ 131.500943] softirqs last disabled at (2263): [] __irq_exit_rcu+0x11b/0x180 [ 131.501596] ---[ end trace 0000000000000000 ]--- [ 131.571488] audit: type=1400 audit(1664694487.259:10): avc: denied { write } for pid=3757 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 07:08:07 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r1, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) close(r2) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x2, 0x7f}) bind(r0, &(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x80) 07:08:07 executing program 3: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x3d}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_open(r1, 0x0) dup(r5) clone3(&(0x7f0000000180)={0xc0002100, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:08:07 executing program 2: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000001240)) 07:08:07 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4, 0x2}]}, 0x18}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x33f) r1 = open(&(0x7f0000000400)='./file1\x00', 0x117c80, 0x48) r2 = open_tree(r1, &(0x7f0000000480)='./file1\x00', 0x8100) mount_setattr(r2, &(0x7f00000000c0)='./file1\x00', 0x1000, &(0x7f0000000180)={0x8, 0x80, 0x1e0000}, 0x20) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80200, 0x2) 07:08:07 executing program 3: stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x6, &(0x7f0000000440)=[{&(0x7f0000000080)="8d56d435deb4118e21680577cfa81161ff60cf4bea09184e0eba7decdbb7caff049dfb6f1f66d26ed0645dc5406ea8b82b1835759101993a573168f880f9a1f391880487ad16962ccea34457ed7e7a1354fed67edee6ac575e277cccf347ec88a0bb67447bcfce5e735cb3c0958f3c919575a7ef74b5fe5b5b3702097c0b284e39f8716a254e19a8ce5dc0284f504d29fc3774063d6a6db3f9f0a5a4963014f1d4a8dc53032ac717d313a444c8714a523feb3e289fe2c0025ea31b8f52e3cf98b74c", 0xc2, 0xffffffffffff00fd}, {&(0x7f0000000180)="96ea1f856470efc100b5fa7c8d1e3313a8eb0212b81e4da56541806c08101b68d0a946a6219c0055811f76da2ccfca6359371af9109661fa82eb8c60e5586580e674d8a57eac3dba3a828b6fed34d0ba7c50f8ada4eac60e9ee4afcef186f98c39832944b9ef8a23fe152262361f4645c9e770a5e8581794473f8cb7877ec780fce5ae2978b941c56d4c383e83", 0x8d, 0xcd}, {&(0x7f0000000240)="6afabff83c8d8f7bec8d4defbbc816df873c8ee81f8d9621903e48c8cd34883851ee29fce5dec5f0bd78e95a17adb4275bd6172746d43ae1ae6a0adcdab33ee8810d158904674ed41a756cdc0197e7046018f167f5caf9e68887974f97ee6aa7ccab8fe2c911ae4f77be4be29cc3721943d8ae78b6722bc4ae939960d4e23f96b042f2f5bd9c73d38f0196bbd54e9a2810fa09556378ae28d332480ace5afa264a0c94ea066b68b210289fbede3720944cd806deff5546ec35b3b76fd85665a39eed4925ffdf9eedcb622839b7a4a6", 0xcf, 0x6}, {&(0x7f0000000340)="1d0e97839273a84172aed32fcdcac2347facd5f24d31cde84b7875a10342cea8d1f631c743893c835e576d52548fb53eb55372f4fe2da4ce5106d98349cdb3b9796a33b78c528db738354659ab5e4d7c53d79038f674e003a9193aea29802d4dd745e95e6c7be31b34623df103e5ca8b2b2860297e5e", 0x76, 0x1f63}, {&(0x7f00000003c0)="411c06fe0d9869db63d42e7764c3a88b8e75c4192dc53ededf5ccb07ea19cb1a2b5a9f0c84da0e2d97675c817dd6769b7a14fc", 0x33, 0x2}, {&(0x7f0000000400), 0x0, 0xfff}], 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='nobh,nomblk_io_submit,uid>', @ANYRESDEC, @ANYBLOB=',uid=', @ANYRESDEC=r0, @ANYBLOB=',e']) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmget(0x1, 0x3000, 0x8, &(0x7f0000e3a000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) 07:08:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000001ec0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r1, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) close(r2) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x7426, &(0x7f0000000400)={0x0, 0x8820, 0x1, 0x3, 0x248, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x401, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="039fc39af636461d05be36110ccb02981385d62222c1762a8fcb9ae489b9f69e730202f928fee05ceae740dbcd43f5f6a018f68df6b5de0811e3a49a1d5f0305b05eaade3ebe28506a7ab238215013f0ed610a363254997d330a0553b37b0a2242c80544069fd2ff5460d93a88e47093116af4598efcf5fa273d5db243b4d5cae060abe2ae16d99c656bbe9e0fb888e1ff83e62c51030cbfdaccd83acbb4a10d711643ff", 0xa4, 0xff}], 0xc52, &(0x7f0000000300)={[{@gid={'gid', 0x3d, 0xee00}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x2d, 0x37, 0x37, 0x37]}}, {@nr_inodes}, {@gid={'gid', 0x3d, r5}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x74, 0x39]}}], [{@uid_gt={'uid>', r7}}, {@subj_role={'subj_role', 0x3d, '[$@}@[$\xb9(-'}}, {@obj_role}, {@fsname}, {@fowner_gt={'fowner>', r8}}, {@appraise_type}, {@hash}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) [ 132.094731] loop3: detected capacity change from 0 to 16128 [ 132.105592] EXT4-fs: Ignoring removed nobh option [ 132.106379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.107240] ext4: Unknown parameter 'uid>18446744073709551615' [ 132.139809] loop3: detected capacity change from 0 to 16128 07:08:07 executing program 2: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r0, &(0x7f0000001980)=""/146, 0x92, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) [ 132.151902] EXT4-fs: Ignoring removed nobh option [ 132.152630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.153559] ext4: Unknown parameter 'uid>18446744073709551615' [ 132.439655] loop4: detected capacity change from 0 to 128 [ 132.440764] nfs4: Unknown parameter 'ÿÿÿÿÿÿ' [ 132.453937] loop4: detected capacity change from 0 to 128 [ 132.454571] nfs4: Unknown parameter 'ÿÿÿÿÿÿ' VM DIAGNOSIS: 07:08:07 Registers: info registers vcpu 0 RAX=fbfbfbfbfbfbfbfb RBX=0000000000000000 RCX=0000000000000003 RDX=0000000000000000 RSI=00000000000000fb RDI=ffffed1007ebe348 RBP=ffffffff841099bd RSP=ffff88801bd7f710 R8 =0000000000000200 R9 =ffffed1007ebe340 R10=fffffbfff0b60dda R11=0000000000000001 R12=ffff88803f5f1a00 R13=ffff888007c75000 R14=dffffc0000000000 R15=ffff888007c75000 RIP=ffffffff8414d284 RFL=00000a13 [-O--A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f810a4c46f4 CR3=000000000e9ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803baf7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8df4667700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc1a763dd8 CR3=000000003fd94000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f8df71d87c0 00007f8df71d87c8 YMM02=0000000000000000 0000000000000000 00007f8df71d87e0 00007f8df71d87c0 YMM03=0000000000000000 0000000000000000 00007f8df71d87c8 00007f8df71d87c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000