Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:16626' (ECDSA) to the list of known hosts. 2022/10/03 01:19:32 fuzzer started 2022/10/03 01:19:32 dialing manager at localhost:35095 syzkaller login: [ 36.089086] cgroup: Unknown subsys name 'net' [ 36.178898] cgroup: Unknown subsys name 'rlimit' 2022/10/03 01:19:46 syscalls: 2215 2022/10/03 01:19:46 code coverage: enabled 2022/10/03 01:19:46 comparison tracing: enabled 2022/10/03 01:19:46 extra coverage: enabled 2022/10/03 01:19:46 setuid sandbox: enabled 2022/10/03 01:19:46 namespace sandbox: enabled 2022/10/03 01:19:46 Android sandbox: enabled 2022/10/03 01:19:46 fault injection: enabled 2022/10/03 01:19:46 leak checking: enabled 2022/10/03 01:19:46 net packet injection: enabled 2022/10/03 01:19:46 net device setup: enabled 2022/10/03 01:19:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 01:19:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 01:19:46 USB emulation: enabled 2022/10/03 01:19:46 hci packet injection: enabled 2022/10/03 01:19:46 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 01:19:46 802.15.4 emulation: enabled 2022/10/03 01:19:46 fetching corpus: 50, signal 26119/27961 (executing program) 2022/10/03 01:19:46 fetching corpus: 100, signal 35275/38817 (executing program) 2022/10/03 01:19:46 fetching corpus: 150, signal 44380/49501 (executing program) 2022/10/03 01:19:46 fetching corpus: 200, signal 51943/58537 (executing program) 2022/10/03 01:19:46 fetching corpus: 250, signal 55889/63961 (executing program) 2022/10/03 01:19:46 fetching corpus: 300, signal 61421/70877 (executing program) 2022/10/03 01:19:46 fetching corpus: 350, signal 66001/76801 (executing program) 2022/10/03 01:19:47 fetching corpus: 400, signal 70723/82778 (executing program) 2022/10/03 01:19:47 fetching corpus: 450, signal 73732/87116 (executing program) 2022/10/03 01:19:47 fetching corpus: 500, signal 80857/95273 (executing program) 2022/10/03 01:19:47 fetching corpus: 550, signal 86327/101739 (executing program) 2022/10/03 01:19:47 fetching corpus: 600, signal 91079/107547 (executing program) 2022/10/03 01:19:47 fetching corpus: 650, signal 93563/111196 (executing program) 2022/10/03 01:19:47 fetching corpus: 700, signal 95897/114598 (executing program) 2022/10/03 01:19:47 fetching corpus: 750, signal 98634/118334 (executing program) 2022/10/03 01:19:48 fetching corpus: 800, signal 100768/121535 (executing program) 2022/10/03 01:19:48 fetching corpus: 850, signal 102761/124610 (executing program) 2022/10/03 01:19:48 fetching corpus: 900, signal 105277/128116 (executing program) 2022/10/03 01:19:48 fetching corpus: 950, signal 107706/131508 (executing program) 2022/10/03 01:19:48 fetching corpus: 1000, signal 109869/134633 (executing program) 2022/10/03 01:19:48 fetching corpus: 1050, signal 110845/136719 (executing program) 2022/10/03 01:19:48 fetching corpus: 1100, signal 112772/139607 (executing program) 2022/10/03 01:19:48 fetching corpus: 1150, signal 114805/142549 (executing program) 2022/10/03 01:19:48 fetching corpus: 1200, signal 117038/145698 (executing program) 2022/10/03 01:19:48 fetching corpus: 1250, signal 118654/148238 (executing program) 2022/10/03 01:19:49 fetching corpus: 1300, signal 119957/150481 (executing program) 2022/10/03 01:19:49 fetching corpus: 1350, signal 121331/152781 (executing program) 2022/10/03 01:19:49 fetching corpus: 1400, signal 123771/155936 (executing program) 2022/10/03 01:19:49 fetching corpus: 1450, signal 125125/158207 (executing program) 2022/10/03 01:19:49 fetching corpus: 1500, signal 126383/160350 (executing program) 2022/10/03 01:19:49 fetching corpus: 1550, signal 127753/162584 (executing program) 2022/10/03 01:19:49 fetching corpus: 1600, signal 129218/164847 (executing program) 2022/10/03 01:19:49 fetching corpus: 1650, signal 130601/167007 (executing program) 2022/10/03 01:19:49 fetching corpus: 1700, signal 131242/168619 (executing program) 2022/10/03 01:19:49 fetching corpus: 1750, signal 132451/170600 (executing program) 2022/10/03 01:19:49 fetching corpus: 1800, signal 133673/172622 (executing program) 2022/10/03 01:19:50 fetching corpus: 1850, signal 134536/174352 (executing program) 2022/10/03 01:19:50 fetching corpus: 1900, signal 135711/176330 (executing program) 2022/10/03 01:19:50 fetching corpus: 1950, signal 137437/178655 (executing program) 2022/10/03 01:19:50 fetching corpus: 2000, signal 139535/181211 (executing program) 2022/10/03 01:19:50 fetching corpus: 2050, signal 142021/184138 (executing program) 2022/10/03 01:19:50 fetching corpus: 2100, signal 144301/186780 (executing program) 2022/10/03 01:19:50 fetching corpus: 2150, signal 145376/188568 (executing program) 2022/10/03 01:19:51 fetching corpus: 2200, signal 146120/190126 (executing program) 2022/10/03 01:19:51 fetching corpus: 2250, signal 146839/191666 (executing program) 2022/10/03 01:19:51 fetching corpus: 2300, signal 147776/193329 (executing program) 2022/10/03 01:19:51 fetching corpus: 2350, signal 149198/195301 (executing program) 2022/10/03 01:19:51 fetching corpus: 2400, signal 150329/197008 (executing program) 2022/10/03 01:19:51 fetching corpus: 2450, signal 151021/198406 (executing program) 2022/10/03 01:19:51 fetching corpus: 2500, signal 152063/200021 (executing program) 2022/10/03 01:19:51 fetching corpus: 2550, signal 153186/201710 (executing program) 2022/10/03 01:19:51 fetching corpus: 2600, signal 153980/203184 (executing program) 2022/10/03 01:19:52 fetching corpus: 2650, signal 154643/204557 (executing program) 2022/10/03 01:19:52 fetching corpus: 2700, signal 155466/206023 (executing program) 2022/10/03 01:19:52 fetching corpus: 2750, signal 157465/208174 (executing program) 2022/10/03 01:19:52 fetching corpus: 2800, signal 158098/209539 (executing program) 2022/10/03 01:19:52 fetching corpus: 2850, signal 159673/211387 (executing program) 2022/10/03 01:19:52 fetching corpus: 2900, signal 160315/212691 (executing program) 2022/10/03 01:19:52 fetching corpus: 2950, signal 161099/214087 (executing program) 2022/10/03 01:19:52 fetching corpus: 3000, signal 162004/215512 (executing program) 2022/10/03 01:19:53 fetching corpus: 3050, signal 162398/216621 (executing program) 2022/10/03 01:19:53 fetching corpus: 3100, signal 163088/217954 (executing program) 2022/10/03 01:19:53 fetching corpus: 3150, signal 164136/219411 (executing program) 2022/10/03 01:19:53 fetching corpus: 3200, signal 165028/220822 (executing program) 2022/10/03 01:19:53 fetching corpus: 3250, signal 167298/222984 (executing program) 2022/10/03 01:19:53 fetching corpus: 3300, signal 168368/224424 (executing program) 2022/10/03 01:19:53 fetching corpus: 3350, signal 169346/225828 (executing program) 2022/10/03 01:19:54 fetching corpus: 3400, signal 170304/227188 (executing program) 2022/10/03 01:19:54 fetching corpus: 3450, signal 171156/228532 (executing program) 2022/10/03 01:19:54 fetching corpus: 3500, signal 171883/229792 (executing program) 2022/10/03 01:19:54 fetching corpus: 3550, signal 172316/230814 (executing program) 2022/10/03 01:19:54 fetching corpus: 3600, signal 172798/231936 (executing program) 2022/10/03 01:19:54 fetching corpus: 3650, signal 173525/233206 (executing program) 2022/10/03 01:19:54 fetching corpus: 3700, signal 174175/234343 (executing program) 2022/10/03 01:19:54 fetching corpus: 3750, signal 174977/235626 (executing program) 2022/10/03 01:19:54 fetching corpus: 3800, signal 175495/236669 (executing program) 2022/10/03 01:19:54 fetching corpus: 3850, signal 176038/237715 (executing program) 2022/10/03 01:19:55 fetching corpus: 3900, signal 177067/239036 (executing program) 2022/10/03 01:19:55 fetching corpus: 3950, signal 177894/240215 (executing program) 2022/10/03 01:19:55 fetching corpus: 4000, signal 178680/241349 (executing program) 2022/10/03 01:19:55 fetching corpus: 4050, signal 179696/242624 (executing program) 2022/10/03 01:19:55 fetching corpus: 4100, signal 180837/243875 (executing program) 2022/10/03 01:19:55 fetching corpus: 4150, signal 181555/244930 (executing program) 2022/10/03 01:19:55 fetching corpus: 4200, signal 182498/246106 (executing program) 2022/10/03 01:19:55 fetching corpus: 4250, signal 182920/247039 (executing program) 2022/10/03 01:19:56 fetching corpus: 4300, signal 183984/248229 (executing program) 2022/10/03 01:19:56 fetching corpus: 4350, signal 184727/249266 (executing program) 2022/10/03 01:19:56 fetching corpus: 4400, signal 185741/250384 (executing program) 2022/10/03 01:19:56 fetching corpus: 4450, signal 187061/251626 (executing program) 2022/10/03 01:19:56 fetching corpus: 4500, signal 187744/252596 (executing program) 2022/10/03 01:19:56 fetching corpus: 4550, signal 188159/253454 (executing program) 2022/10/03 01:19:56 fetching corpus: 4600, signal 188950/254451 (executing program) 2022/10/03 01:19:56 fetching corpus: 4650, signal 189895/255505 (executing program) 2022/10/03 01:19:57 fetching corpus: 4700, signal 190960/256604 (executing program) 2022/10/03 01:19:57 fetching corpus: 4750, signal 191420/257449 (executing program) 2022/10/03 01:19:57 fetching corpus: 4800, signal 192017/258374 (executing program) 2022/10/03 01:19:57 fetching corpus: 4850, signal 192883/259412 (executing program) 2022/10/03 01:19:57 fetching corpus: 4900, signal 193665/260354 (executing program) 2022/10/03 01:19:57 fetching corpus: 4950, signal 194303/261323 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/262170 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/262850 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/263500 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/264216 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/264878 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/265530 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/266196 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/266851 (executing program) 2022/10/03 01:19:57 fetching corpus: 4997, signal 194783/267543 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/268209 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/268890 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/269587 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/270251 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/270909 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/271611 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/272291 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/272979 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/273627 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/274332 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/274962 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/275630 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/276288 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/277008 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/277672 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/278338 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/279013 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/279651 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/280294 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/280982 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/281655 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/282310 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/282969 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/283632 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/284296 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/284969 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/285629 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/286311 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/286972 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/287631 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/288298 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/288969 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/289648 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/290297 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/290947 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/291641 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/291874 (executing program) 2022/10/03 01:19:58 fetching corpus: 4997, signal 194783/291874 (executing program) 2022/10/03 01:20:01 starting 8 fuzzer processes 01:20:01 executing program 0: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000000)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x143401, 0xa0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x101, 0x1, 0x8}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000001c0)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r3, 0x5, 0x0, 0x6fc}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file0\x00'}) pread64(r5, &(0x7f0000000280)=""/142, 0x8e, 0x8) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000340)=0xcdb9) r6 = signalfd(r3, &(0x7f0000000380)={[0x2]}, 0x8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x2, 0x6000}, 0x401) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x454040, 0x2, 0x1}, 0x18) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000600)={0x43a, 0x1, 0x9, 0x9, 0x81, "ac109e7f59ebcd2c00f2631aab74064d166f7a", 0x3ff, 0x10000}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x101080, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000000680)) clone3(&(0x7f0000001840)={0x100, &(0x7f00000006c0)=0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740), {0x12}, &(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000001780)=""/114, &(0x7f0000001800)=[0xffffffffffffffff, 0x0], 0x2, {r6}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001900)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[r9, r8, r4], 0x3, 0x0, 0x1}, 0x63) 01:20:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = signalfd(r0, &(0x7f0000000080)={[0x100000000]}, 0x8) r3 = syz_open_pts(r2, 0x50400) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000001340)) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r2, 0x7) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000001380)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r5, &(0x7f00000013c0)='/dev/zero\x00', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x7, 0x101, 0x0, 0x0, 0x4}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000001480)={@local, @local}, 0x8) fcntl$addseals(r1, 0x409, 0x2) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f00000014c0)=0x3f, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001540)={0x2, 0x2, 0x100000001, 0x2, 0xffffffffffffffff}) 01:20:01 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000000)=@caif=@dgm, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/61, 0x3d}, {&(0x7f0000001180)=""/227, 0xe3}], 0x4, &(0x7f00000012c0)=""/179, 0xb3}, 0x1}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001380)=""/151, 0x97}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/95, 0x5f}, {&(0x7f0000002600)=""/165, 0xa5}, {&(0x7f00000026c0)=""/64, 0x40}, {&(0x7f0000002700)=""/171, 0xab}], 0x8, &(0x7f0000002840)=""/180, 0xb4}, 0x8}, {{&(0x7f0000002900)=@can, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)=""/154, 0x9a}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002a80)=""/101, 0x65}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/230, 0xe6}, {&(0x7f0000003c00)=""/57, 0x39}, {&(0x7f0000003c40)=""/5, 0x5}, {&(0x7f0000003c80)=""/49, 0x31}, {&(0x7f0000003cc0)=""/200, 0xc8}], 0x7, &(0x7f0000003e40)=""/99, 0x63}, 0x8000}, {{&(0x7f0000003ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003f40)=""/255, 0xff}, {&(0x7f0000004040)=""/4, 0x4}, {&(0x7f0000004080)=""/216, 0xd8}, {&(0x7f0000004180)=""/183, 0xb7}], 0x4}, 0x9}, {{&(0x7f0000004280)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004300)=""/128, 0x80}, {&(0x7f0000004380)=""/25, 0x19}, {&(0x7f00000043c0)=""/103, 0x67}, {&(0x7f0000004440)=""/160, 0xa0}, {&(0x7f0000004500)=""/136, 0x88}, {&(0x7f00000045c0)=""/44, 0x2c}, {&(0x7f0000004600)=""/193, 0xc1}], 0x7, &(0x7f0000004780)=""/195, 0xc3}, 0x8}, {{&(0x7f0000004880)=@phonet, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004900)=""/234, 0xea}, {&(0x7f0000004a00)=""/48, 0x30}], 0x2, &(0x7f0000004a80)=""/69, 0x45}, 0x5}, {{&(0x7f0000004b00)=@phonet, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004b80)=""/57, 0x39}], 0x1, &(0x7f0000004c00)=""/26, 0x1a}, 0x45d}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004c40)=""/126, 0x7e}], 0x1}, 0x400}, {{&(0x7f0000004d00)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004d80)=""/102, 0x66}, {&(0x7f0000004e00)=""/97, 0x61}], 0x2, &(0x7f0000004ec0)=""/63, 0x3f}, 0xafd8}], 0xa, 0xc0000100, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000005180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x9}) sendmmsg$inet(r0, &(0x7f0000005680)=[{{&(0x7f00000051c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000005600)=[{&(0x7f0000005200)="a499a1ed2e21b30c6fd8956381a11f", 0xf}, {&(0x7f0000005240)="64d1750722d174bb2871b6f3020b3d25b188ae20bd409c280732ddfd7969797b684dbc706df0e2a3d9e2ef8f595a11bb896cc0aef8dedfef6785d08e33c87ab0b6075a53b445b052a76c3919186f38e93f83bc398e9f74c3fc8a3db1caa48cafb9860e36ad9e07cba3fb01062fb7744446a8800e6d6821bcb53b002f2ced756f2fe31cab5fd4937a0ceec23a8b72a39ece6a9ad39ea95ad117915aaec256d4cd99fc424caa22ba6a7f31b5c1fac5acac5b7ec1a4ce55622f7aa0b53597ae9d8563e3779c71a9447ecbeea4218af010d75cddf3df94c3a34a3aa72035", 0xdc}, {&(0x7f0000005340)="30589fc9cb8069c7c502a74233e6b97f7feb9465ae1281eae5234fb9eeaad540ef663475143bef581240c66193002a6396a815a7adc082b7b2d8c0967bafad9f7a55386b04ce", 0x46}, {&(0x7f00000053c0)="dea849be28820ee9130e8e977842cac145dd6f6eef60fdb7e77ead650ea41db6a01b5bc54b97459ab1560cca0d4e07e070e4912a311891904e507f1cd7d68684aa3536ecb7d39fbd798b4e2f398c029e9ca7027a47815d2fafaa057b3e6df426c1581fd8fc53a57d58bb33d085a1a76a7d7971a6bbf6a4bdf927d1c50d3f9d445a67eb87636e17f8e1dbbfee254ede0c4cf2036a75d3ae96", 0x98}, {&(0x7f0000005480)="d601519bf7d00e3f9eaec73290edf5adb14c05545e56e1e3a975a52c81df4133c85e16b9a5dc7637cddb96af5848a1442d31bfea29b01e8181168256ce4905149ccad2a71b57af1732ce7aeaf9eb7f43ae64be53530e92de1b65ff2770aace42d86a6c732c47de375becccf7321078f2d30db525d38220b45119e179e2986174739808a1f66b2154657d93f99fa415a061717e7db31921bd7af99873aa6c265d2f9b820a305226d793356e3d4319", 0xae}, {&(0x7f0000005540)="5d73fe8db78833b056314f080a35fbbc201b2fdb818c375cd4593de69b7058fe591d5c5bac91e753a076045b84b30ee81536f34fd6b6938916f3e0e3", 0x3c}, {&(0x7f0000005580)="5f65820399cf9818b52bef1ed07ef0116c8d2c1982074ef93222e918f53fbf8a1c3f220d5133d03e6b8c2337627309a00c85df80604d191b6e1b1943fbeb7914d271b8e8d1373625f923b06349548aedef4fec29695a65e07c46c22fb24c0ba9", 0x60}], 0x7}}], 0x1, 0x20000000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005700)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000005800)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000058c0)={'ip6_vti0\x00', &(0x7f0000005840)={'ip6gre0\x00', r1, 0x3b, 0x9, 0x99, 0x7ff4, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x1, 0x8, 0x4f6, 0x77a}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000005900)={@private2, r3}, 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000005940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) accept$packet(r0, &(0x7f0000006140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006180)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000006240)={'syztnl2\x00', &(0x7f00000061c0)={'ip6_vti0\x00', r5, 0x4, 0x5, 0x20, 0x2, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0x3ff, 0x1}}) connect$inet6(r4, &(0x7f0000006280)={0xa, 0x4e24, 0x9, @private1, 0x5}, 0x1c) pipe(&(0x7f00000062c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f00000076c0)={&(0x7f0000006300)=@nfc={0x27, 0x0, 0x2, 0x5}, 0x80, &(0x7f0000006500)=[{&(0x7f0000006380)="79be3603b5dc01d9d3b8cd58893f66286b4d4261669c9af166b438f74393e6e68ff56091a649b2c38d25432c8fef5da17c21b46e", 0x34}, {&(0x7f00000063c0)="45a216f2821ca4a414a8ccdc51d8e978850a26353580064057b100c45590f24068ea982db71721cd41de57a36e6737b7ad7670f6e4969948390d55ac1b9477425233e330d953d8c3d626eac9490558a03c4fe0d1de0656615c91599127798c2c4c13b3b5136e8c065cbe5b51590c384b787495d1fbcb2037d8c2605203c0a29196511b7897d9884c42d453e4d56b9bc15288dad44ee096e47160a05251855cf99d10bfb1d41301e96b64266da70c92373d1544ce64e2fa1276dda369d3f427aefa794f91b12e736dd223", 0xca}, {&(0x7f00000064c0)="933eeb1d7367222ee50f81b711afbf7c5fe8401b3cea519acd872a439d243d3d88226daa15ccfd0e5ee60aba", 0x2c}], 0x3, &(0x7f0000006540)=[{0x58, 0x11, 0x2, "c60c7305b08a9532eb7d4e74d6d6c4ba5290acc277d1612161b4251d67f455807a960b0ddb0a8c96447259308ade6780a055161088aa4ca92669583d9418d00b44c69237e8146cf2"}, {0x20, 0x119, 0xfc000000, "87d16c92488273f34af143855a"}, {0x1010, 0xff, 0x3, "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"}, {0xe8, 0x101, 0x7, "458e053bb9117f560ef5cc619ca57fdbbaa083414ad3f039b2a4007e68d2d5c4c20da43d267d39c4a95695da2eda135a93217410e2a4f5f8c3c45715978c01dc025d61548ba5e3175364bbf2b4f904ca8b15edfd3e1aacda6a3584abe58f813794a29fda3499280bd5058693d98c0217c278b626d7da20fc6999d85d5f73542af345ee1c6a45f7515d890973d4064caa2a54ae6f7c02076e90eac1a197c0d29c424c2a474bfdc8a20f1da34be92163def837797f2701a1ec9c7bf290256ef83ea007ea82bb7c418faec5a9e9d0a8e17886fc"}], 0x1170}, 0x4040801) r8 = accept(r4, &(0x7f0000007700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000007780)=0x80) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000077c0)={r5, 0x1, 0x6, @multicast}, 0x10) mount$cgroup2(0x0, &(0x7f0000007800)='./file1\x00', &(0x7f0000007840), 0x200000, &(0x7f0000007880)={[{}, {@memory_recursiveprot}], [{@obj_type={'obj_type', 0x3d, '&^+'}}, {@measure}, {@fowner_gt={'fowner>', r2}}]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000007900)='./file0\x00', 0x20040, 0x83) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000007940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r8}}, './file0\x00'}) setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000007980)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f00000079c0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) sendmmsg$inet6(r12, &(0x7f0000008100)=[{{&(0x7f0000007a00)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000007b00)=[{&(0x7f0000007a40)="73fc2a8eb16f6af37706c39e3642c6432e3df070a9c9968c97ba4092d9524cc7fea7a4bd64ffaab060d954f2e1cca0c543adbd5dad99268ed54f341c9d5bdbf8975c4c562546c9d98c19b0d4d4333e272837a72f8cf9e0e10611bcf25e032b47d702285f09220dc575fa9e07261b22d960005a5e75165258458afadb6383da26cb6faeca5cea0bdb96b6dcbaf02eb8cfff8b8679584dcf06c450cbba4fd612016679929bf6851838556793", 0xab}], 0x1, &(0x7f0000007b40)=[@tclass={{0x14, 0x29, 0x43, 0x10000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x30}}, {{&(0x7f0000007b80)={0xa, 0x4e21, 0x0, @empty, 0x7fffffff}, 0x1c, &(0x7f0000007dc0)=[{&(0x7f0000007bc0)="85d3c0ed6609b45c67ee7b39ea8f3cdd900959b6f6e4249230a3bf1f8fec80ee37cb6e15330e5b4cc524811e97b637a7c8196f558c1640923155459b08ff943703447f7a1e8617ec699d1d4f3a590a8227f600ebe534d7c76fb60df5f802466e727eb7ac847f468f3b1cc74a1b4e486f3abd4fa7eb7669c8a326f560fe5b73c991b3faf0f8a90c4eb36528c9", 0x8c}, {&(0x7f0000007c80)="7f890550ff505cfa4886e6c31892d724b30bde6e56722504908797618bffc1292e306a838ad300b98aed6fa28477b383719b777ea7073d4ce4ccb9e9ed11585aee5fe85102934540697576ea35b73a0504531b7a18f87bf9df4275780a79b68e4488c7bef87e1f2e88c9228dc1635450d964745d9551b8c9139401c7d40e551761c4f435930968cae2886778301628fa2bcba0c974c8db943620a29a0a11ae752e171cf969b7271821d755", 0xab}, {&(0x7f0000007d40)="0fce51181d3814684a33e659f35f9ee3ffa9381ddd51f50c06dc22c4ad8feac7c0d47b4fdc10e1b11511efe1ab2fa6112c475de384e73af2e3482df6", 0x3c}, {&(0x7f0000007d80)="4c3f6a7c4f0e13d145decd8a7417221feeb0cb", 0x13}], 0x4}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000007e00)="ecd292e2a3193acd0d410b21c0919129af460f848e68d6f7d6cf646bb8c34954f2a555cb451ee9ad5a4fbd05b9b7", 0x2e}, {&(0x7f0000007e40)="958385cbefda9df94d4a28912f7cdc708a0cf4f1901d9d523ad065fa0df4f2496bb04c781395c05c13c9c81519201f971bb8a275d369eecce09cce52b8d4e2a208ae95923b8bc03e5cb5fa2b3a5041e682e3948d4d4d66a2e6678845", 0x5c}, {&(0x7f0000007ec0)="3edce3eee10bcb0cae126421075cd569c68101c093e765f9996078e681031ff9a0643236d6a71c008764d45b481c7d87ac8db39dee2da2818b2e0bdecab8ffc06344103fe6797a039d6484a99306c6d6a74292a0cbbf92921b", 0x59}, {&(0x7f0000007f40)="9a1a494d2f0e5178cb71c984e73396be649fe88670ffdfb9b22b1f83e7ce233c83d945a61b5570b031dd73445034370b0ca5c669f11ffd1d7a876a1c65494d1b183d428fe32ec21d16616c311d950d0dad", 0x51}], 0x4, &(0x7f0000008000)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x2, 0x0, 0x0, [@loopback]}}}, @dstopts={{0x20, 0x29, 0x37, {0x6, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffc}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r1}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x2c, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x18, {0x1, 0x4, 0x1f, 0x2, [0x8000, 0x4]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x754}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}], 0x100}}], 0x3, 0x40001) [ 64.656641] audit: type=1400 audit(1664760001.472:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:20:01 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3f, 0x8, 0x1, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x2, 0x6e}, &(0x7f0000000040)={0x7ff, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x0, 0x9}, &(0x7f0000000080)={0x2, 0x6a, 0xfffffffffffff801, 0x1, 0x6, 0x100, 0x9, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0xfff]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="57bdabc0a8e9ce66b0fdc3f006f6bccaeea2c0df3473cdbd0ea34470379605222e7448f182ae33271803a0be209a9c7a7efc448b3b7e1daff77da5ae36153dba2ac65f0c7b47c8940fd5", 0x4a, 0x12000, 0x0, {0x0, r4}}, 0x40) rt_sigprocmask(0x1, &(0x7f0000000380)={[0x971]}, &(0x7f00000003c0), 0x8) rt_sigtimedwait(&(0x7f0000000400), 0x0, &(0x7f0000000440), 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="859ab5ce6a0b1171dfc9949a40078807d2433e1968add14ca726221d754f1d4d6953429bf66f8bc1212e8321f51a7c81146db4a0511b95d08a1d040580a1469767ef2463a1e9614674c5d756387debea86d00aeaf624b6172f5524bf5ff1a83e2d337138213f4d4666f7051fc1df3c036e311f50e7ac865df05a4dedc579a5", 0x7f, 0x40, 0x1, {0x0, r5}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) r6 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc2, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x9, 0x8, 0x1, 0x9, 0xffff, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xe000, 0xd6, 0x0, 0x97b, 0x80, 0xffff, 0x48]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x401, 0x31a, 0x6, 0x97, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0xfff, 0x8001, 0x8, 0x7, 0x96c, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x17, 0x6c, 0x9, 0x3, 0x12, 0x2, 0x5, 0x36, 0x2, 0x48, 0x6d, 0x4, 0x6c, 0x9, 0x5, 0xcb4b1e421fb07796, 0x6c, 0xc4b1bc60fae6bccc, 0x30, 0x0, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x6, 0x30, 0xc, 0x1, 0x90, 0x3, 0x48, 0x18, 0x1b, 0x5, 0x24, 0x12, 0xb, 0x1, 0x48, 0x30, 0x48, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x7, 0x6}, {0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x16}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x85) clock_gettime(0x1, &(0x7f0000000980)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r6, 0x0) syz_io_uring_setup(0x4075, &(0x7f00000009c0)={0x0, 0x10f8, 0x1, 0x2, 0x28, 0x0, r6}, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000ac0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x6, 0xffffffff00000000, 0x80000001, 0x6, 0x1, {0x1, r4}}, 0x2) syz_io_uring_submit(r8, 0x0, &(0x7f0000000c00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x5, 0x2, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x200800) 01:20:01 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x195080, 0x0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x70) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000002c0)={0x7, 'ip6tnl0\x00', {0x8}, 0x6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000340)) creat(&(0x7f0000000740)='./file0\x00', 0x1dc) close_range(r0, r1, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x402000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r5) lsetxattr$trusted_overlay_opaque(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880), 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000008c0)={0x10000, 0x400, 0x1, 'queue1\x00', 0x2f}) syz_mount_image$tmpfs(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a00), 0x150000, &(0x7f0000000a40)={[{@huge_always}, {@huge_within_size}, {@gid={'gid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x1}}, {@huge_never}, {@uid={'uid', 0x3d, r3}}], [{@appraise}]}) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000ac0)) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x80000001, 0x5, &(0x7f0000000f00)=[{&(0x7f0000000b80)="528f58c3d947dfb597cffee9771f6ecb9a612be6a9f2c0cf419c3282a790f2a6c3808fb78c4a1b0acf67af9d7c4cd6f4a20d413a6ebde2ffde98202f6787134edee2fef8ea9f7f222e9d8bb746667e30eb0a5f5fba1544207fb0281db29271c3bfeaacae504e438efd48470ad7824ed25a1ec5a147f62732df", 0x79, 0x8000}, {&(0x7f0000000c00)="442068f61265d1e4037631fc451ef2dfad9e7640fa22e16b2107c1e80492c85c9bf00d7e87b575d1f46cb3ab453e986eb909cac9b885cad5a875aff6a82db7a243d9d5e7b7199760fd1d303df21eb49d43fee267c99b9f18cfed68c563714df76ed0918c0b48fbbfdc1fa631b54708d353a36fd50fed9b9f8fba6e0a0a52bfe34d3d47655e00074447a0b424cfbf", 0x8e, 0x4}, {&(0x7f0000000cc0)="12f387096ecca1328fb3004755a8d46f4dccabd99868592cc6c230333c4eb5318b5dc8db8937ccf8eaf81dd84de19421d8ce3265067d30ed42bf17ec78c6157844da6e057752ec9949e2ab386821300a0444cb2e", 0x54, 0xaa}, {&(0x7f0000000d40)="387fe2be178c38545900d1832326fc677430804f097db128570e4404c2f65d4fa66889907bc911fb65a40399aa07881e1b3e2cde8b68705c151357a6cb3d45ffa67ba3f0738a3d604571e1eb7b793917fea1fbb6b1a2bfab06826ba9dbee5ef65f83f1673fee9688f04c353fae8b5a90e8164b9472843f20bd63bbfde1f0a6c0d1b3cc598edf7d34c09cd533150a125e94a0e3be2b", 0x95, 0x1ff}, {&(0x7f0000000e00)="0304c744f735321d38b93f80e13746fe1301ba57b3851f255f5d7c35fa90dc59a4481f728dc1960d2cce4d261e7b435bf5d6b1af60e4f526e33a372571391686727c4c8c8a4f81ac5e6c3b28a940d118dbc5bfa5ca1013d9587c97c0b733ab0e92e25ae1ff4ba0774dd586471ec3c59dd66ae0538ab225c62ab5a130f5739065616a24572f5fe829ac19af6a5d22e6c0ef47ef258ab72e07805861e4d5efa309674333605eac8fb38622ee86d6179177ec954eea0aa139bb9415e294433c09411a800e25d3dada6624186b16177d37200ec6ed72e9c24b4265c784356a271f5c29d0d0e2392cff938c0108c1", 0xec, 0x4}], 0x1a10000, &(0x7f0000000f80)={[{@block={'block', 0x3d, 0x800}}, {@gid={'gid', 0x3d, r4}}, {}, {@cruft}, {@utf8}], [{@subj_type={'subj_type', 0x3d, 'huge=always'}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x130, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6e18}, {0x6, 0x11, 0xf3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x84) 01:20:01 executing program 5: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0x9}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0xf, 0x101, 0x5, "06573f6b1b448f58d4692e47faee6a"}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="cc9952e23cfc54aff5d1c6d341a51f3887039d069af8d88e57732b903132e15a2ce43f46ce95e215c34ccdcb9cd3765a5c18a6601819b5a71b818331d02d185b2d54ce9d5c1b4e04afd26298520b1438c11c9f58b71608", 0x57}], 0x1, 0xff, 0x7) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)="1f8d0a2a2c95a3efbba47776a8679b4710d2e53245562a8ef3a36a0c1cd11ff956288a777f3d5f0ac637bc9b0afa20a127f917ccb1ef544f84d74f1528b986567f114eb6b94fc5ecc812ce2f6de4d11d063ff474ed770827410dbea34927f24b9821f7e9b0bedc0f84e1181404757bfab81ff08c27e9a2ddfa143e43ff53e8521b994cad4619573165536f3664956a97bd7e33dd823a7af541392831d34e7100f0081fad6f736e264cffde06012ff8f895c676bff201818090421297e1b9ce88cc11c49c3e0c9261d3fdeddd6856014fab", 0xd1) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x28100, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000300)={r0, r0, 0x40}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) pwrite64(r0, &(0x7f0000000340)="420c0794e26defaf", 0x8, 0x7) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x48805) r3 = openat$cgroup(r0, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x1, r3, 0x1}) r4 = dup(r0) openat$cgroup_devices(r4, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000580)) 01:20:01 executing program 6: finit_module(0xffffffffffffffff, &(0x7f0000000000)='9\x00', 0x2) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000080)={0x80000001, 0x3}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000000c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000100)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x3f) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001240)={0x0, @multicast1, @initdev}, &(0x7f0000001280)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000012c0)={0x238, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8010}, 0x20044010) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001580), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000, 0xe}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000019c0)={0x53, 0xfffffffffffffffd, 0xfe, 0xe7, @buffer={0x0, 0xad, &(0x7f0000001700)=""/173}, &(0x7f00000017c0)="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", &(0x7f00000018c0)=""/178, 0x40, 0x13, 0xffffffffffffffff, &(0x7f0000001980)}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001a40)={0x800, {0x0, 0x1, 0x0, 0xeaa, 0x9}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001a80)={'wg2\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000001ac0)={r0}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000001d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0xd0, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1f}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x8, 0x6}, {0x0, 0x7}, {0xf0, 0x5}], "3a0f3330b4495499"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x40, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0xcb, 0x2}, {0x20, 0x3}, {0x9, 0x3}, {0x36, 0x4}, {0x5}, {0x7, 0x5}, {0xa8, 0x4}, {0x4, 0x3}, {0x1, 0x6}, {0x1}, {0xfd, 0x1}, {0x4, 0x2}], "129abc09874c4df5"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x3f, 0x4}, {0x7}, {0x6, 0x6}], "c14cee396c68da05"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x0, 0x6}, {0xff}, {0x3, 0x4}, {0x40, 0x6}, {0xff, 0x2}, {0x3f, 0x4}, {0xbd, 0x5}, {0xff, 0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x2}, {0x1f, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x6}, {0x7}, {0xd3, 0x7}], "b72257216ed68797"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x4}, {0x81, 0x1}, {0x1f}, {0x20, 0x4}, {0x9, 0x3}, {0x2}, {0x40, 0x1}, {0x4, 0x4}], "ab860a3111297240"}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8004045) 01:20:01 executing program 7: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'wg2\x00', 0x2}, 0x18) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000080)={0x100000001, 0x20, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000180)={0x2, 0x3c2}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x58}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000400)={0x624, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x5e4, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_b, @broadcast, @random="ab5de1cc5ae1", {0x4}}, {0x1, 0x1, 0x1, 0x0, 0x7}}, {@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="0be1656ac05f", @device_b, @random="e21262f5008a", {0x7, 0x1}}, {0xf, 0x1, 0x0, 0x1, 0x7f}}}, @a_msdu=[{@device_b, @broadcast, 0xc1, "92edb85629ddc5032b3c2f3217af93a826b05ea4ed9029012e2cf73b15f5b688fa6d0d3c4a244a53348190a6176e645637a31584019181c1ea415f210e83e91a45bd860e09ca7b5458395693fe90e402a0780efc437baf671e6b004a5fb5210bf510fab58e0ac3132a5458272e8d66786f0d75ed56432deb445c35565eb1ff43a43e9202f41ac2138b3df92761650bb6c6147b7b74b6133828e4f9ecbc84e8f2a421d955b0b5333345552e9c784a9d8056163d1d9cbfbf1fc03a48233bb4074353"}, {@device_b, @device_a, 0x56, "f7294081ade01dfb863686ab649989ac166371050df7f615efebffd6983bf9e7d84db3ae3b9f1d792fca497765bfb5cb61e0c32c3e2b379c76567b0dcd541fc6ef4165f69e85b3cf660fcc317ffe7d2ca06a1328b9b7"}, {@device_a, @device_b, 0xb1, "ff6b20af28ac927577c4d1787ead72d38621a774cd472de73fe8ba6471236e2ef6e0060d65cd802009ca63f3edd705b8437adcf5afcf15a127b5d636e13aeb21e0885cfcc08ef170827d21fb2a1164f65c41925238edba0f9df9ca09249d96fb1d32c25588f6d99fa5eaadc3dc5e9f5fcc808ba176947ad5d0d468250f7b9f03b9ff73d20953eaea2952f32ad0abb9d75c028426878155c8d3375c7ef5391845aa26975807ed2709fd4a02c46a4d74b877"}, {@device_b, @device_a, 0x7f, "c9d802bc059177b9e3d231936777bf7b3b57bafe8578089f3a0832672344166e4eaea4ea75a6debe9d91f05d6d49dd498440adf8978b4cfd7d4998633060b9411c648e4fc0601a534eaa23883fc6f89354e5ed76f48e2377e15bcc667b4002c28aa292ff387232bbafce7d8e5995978528fc85c3948214c14e954a0390b3e2"}, {@device_b, @broadcast, 0x1a, "937d558fb9b1c74a3032331f8c9518cd64e5094d91ce944790e7"}, {@device_b, @broadcast, 0xf3, "9eaf745c1020c8edf1ca4ecf9d5d380e441f8a71219302ed32c04847571a789b8ae74aced25f47b9a48a079aaa4110cf2d092afb24a05fa1a4320d6f168502520895533e8986ccc5cd6dfc39b4924568f3288f83ac83a091b5b89c84af4a1b124e597f58231b4cb75cb5650126998bec8dfaffb9d91fee89f8a8e3f234324f90e2e27f65c42323fad688fc9ac72482e2ea3fa34256083a114673ab667a09435f6e33e0ae88b1858deb5f94850f3845a510fca07e16da8430cfedd94fa5a9b757f284eb843867cc5ba2feb63aea9ad755403bd78faceb7917f5f4194a63e609c0b101bfbab137a41057d1e5d3a97bf26013b919"}, {@device_a, @device_a, 0xc9, "7ef8ca2fb060c0f7a841861b67a0b542ceff68400fad7bc530b77028f20a83f44e0f983e1b17ca4577f7ff84fb958fc1f9ce39ceae15d73a8265eddb38a6d7188b338180b66ac0e2388503400c3510c13f2a012ecdfe08f585cf29907e50ed7c29065fbf35276fa1e362be32b421437ebdc4780d257b88eac1fdfb1d5cb7c27a1938e856db95a06e5cc0f5200f347823a8886b7aec461e1c78e2d60c50107dfb7ffd5aaf841b1cec561947be997c6f4ee538deccb353a21341aa71f84bfbfc6afd60ea91144ee83a02"}, {@broadcast, @device_b, 0x61, "e80b189746ac548bfc64b6dc6b8d8abf419a347fe7152488983fc2cbe719962d3edbd7853ed262cea39402573d4ebd37fbcf0741b88a26ef0d0a412073d46c7fcf1951bdbec2c20446ad6e9dcfa99348fc81a949406b029a4f0ec56929a3e3a1d8"}, {@device_a, @device_a, 0xa4, "30c444144f090c7a1345492ad9c58a821c5a5f11f45515e2436af1579e62bb66b5a043ffd9b09c6a0c8d9d04a409d01102181eb7fb94354485a19e18db6ef3542f5d935f7ee602ec2f53472430b07e0cbf653ff42374a848caefbcfe7c1fa33f83011da6709c66eaf045af9419c7da96db91714871250e361595d6dd43c8edfa9363166085e07ea9cb6b1c1d01049dd4637cfe6eb4619a2aca1b6647b4c7b2c5ebb7aeda"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x624}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000ac0)={0x0, 0x2}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001ac0)) openat$cgroup_ro(r1, &(0x7f0000001b40)='memory.events.local\x00', 0x0, 0x0) r6 = openat(r0, &(0x7f0000001b80)='./file0\x00', 0x80000, 0x9522ce2cb8a280c) getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000001bc0), &(0x7f0000001c00)=0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r1, {r4}}, './file0\x00'}) ioctl$SG_GET_SG_TABLESIZE(r7, 0x227f, &(0x7f0000001c80)) [ 65.971637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.978123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.987217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.990566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.994848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.996319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.000881] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.024688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.027900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.033672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.035648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.036931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.048740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.052260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.062395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.064876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.066225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.071875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.078672] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.085700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.087020] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.093264] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.093438] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.094934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.096765] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.098518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.103972] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.121686] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.124817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.126625] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.127520] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.127570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.141304] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.141387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.148517] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.151174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.152813] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.155527] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.163356] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.165765] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.167525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.172645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.174837] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.176688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.183461] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.208646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.209903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.218433] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.222404] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.269238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.276727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.286826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.314543] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.342270] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.350291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.355117] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.050471] Bluetooth: hci0: command 0x0409 tx timeout [ 68.114079] Bluetooth: hci2: command 0x0409 tx timeout [ 68.115063] Bluetooth: hci3: command 0x0409 tx timeout [ 68.178104] Bluetooth: hci1: command 0x0409 tx timeout [ 68.242086] Bluetooth: hci5: command 0x0409 tx timeout [ 68.243290] Bluetooth: hci6: command 0x0409 tx timeout [ 68.306110] Bluetooth: hci4: command 0x0409 tx timeout [ 68.498057] Bluetooth: hci7: command 0x0409 tx timeout [ 70.098109] Bluetooth: hci0: command 0x041b tx timeout [ 70.162123] Bluetooth: hci3: command 0x041b tx timeout [ 70.163070] Bluetooth: hci2: command 0x041b tx timeout [ 70.226111] Bluetooth: hci1: command 0x041b tx timeout [ 70.290132] Bluetooth: hci6: command 0x041b tx timeout [ 70.291076] Bluetooth: hci5: command 0x041b tx timeout [ 70.354086] Bluetooth: hci4: command 0x041b tx timeout [ 70.546088] Bluetooth: hci7: command 0x041b tx timeout [ 72.146739] Bluetooth: hci0: command 0x040f tx timeout [ 72.210150] Bluetooth: hci2: command 0x040f tx timeout [ 72.211043] Bluetooth: hci3: command 0x040f tx timeout [ 72.274103] Bluetooth: hci1: command 0x040f tx timeout [ 72.338118] Bluetooth: hci5: command 0x040f tx timeout [ 72.339053] Bluetooth: hci6: command 0x040f tx timeout [ 72.402226] Bluetooth: hci4: command 0x040f tx timeout [ 72.594109] Bluetooth: hci7: command 0x040f tx timeout [ 74.194096] Bluetooth: hci0: command 0x0419 tx timeout [ 74.258155] Bluetooth: hci3: command 0x0419 tx timeout [ 74.258841] Bluetooth: hci2: command 0x0419 tx timeout [ 74.322106] Bluetooth: hci1: command 0x0419 tx timeout [ 74.386117] Bluetooth: hci6: command 0x0419 tx timeout [ 74.386936] Bluetooth: hci5: command 0x0419 tx timeout [ 74.450102] Bluetooth: hci4: command 0x0419 tx timeout [ 74.642058] Bluetooth: hci7: command 0x0419 tx timeout 01:20:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x406, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @can={0x1d, 0x0}, @rc={0x1f, @any, 0x89}, @in={0x2, 0x4e21, @private=0xa010101}, 0x2, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x81, 0x625a}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r1, 0x2f, 0xd3, 0x5, 0x2, 0x0, @mcast2, @private2, 0x0, 0x7800, 0xd3, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r1, 0x29, 0x8, 0x0, 0x1, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8000, 0x6, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x29, 0x3, 0x4, 0x80000000, 0x46, @mcast1, @local, 0x20, 0x7847, 0xffffffc1, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x110, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x110}}, 0x86) socket$nl_generic(0x10, 0x3, 0x10) [ 118.431478] audit: type=1400 audit(1664760055.247:7): avc: denied { open } for pid=3791 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.432958] audit: type=1400 audit(1664760055.247:8): avc: denied { kernel } for pid=3791 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.450572] ------------[ cut here ]------------ [ 118.450594] [ 118.450597] ====================================================== [ 118.450601] WARNING: possible circular locking dependency detected [ 118.450606] 6.0.0-rc7-next-20220930 #1 Not tainted [ 118.450612] ------------------------------------------------------ [ 118.450616] syz-executor.7/3793 is trying to acquire lock: [ 118.450622] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 118.450662] [ 118.450662] but task is already holding lock: [ 118.450664] ffff88800f51a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.450691] [ 118.450691] which lock already depends on the new lock. [ 118.450691] [ 118.450694] [ 118.450694] the existing dependency chain (in reverse order) is: [ 118.450697] [ 118.450697] -> #3 (&ctx->lock){....}-{2:2}: [ 118.450711] _raw_spin_lock+0x2a/0x40 [ 118.450722] __perf_event_task_sched_out+0x53b/0x18d0 [ 118.450734] __schedule+0xedd/0x2470 [ 118.450747] schedule+0xda/0x1b0 [ 118.450761] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.450773] syscall_exit_to_user_mode+0x19/0x40 [ 118.450786] do_syscall_64+0x48/0x90 [ 118.450804] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.450817] [ 118.450817] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 118.450830] _raw_spin_lock_nested+0x30/0x40 [ 118.450841] raw_spin_rq_lock_nested+0x1e/0x30 [ 118.450854] task_fork_fair+0x63/0x4d0 [ 118.450871] sched_cgroup_fork+0x3d0/0x540 [ 118.450885] copy_process+0x4183/0x6e20 [ 118.450895] kernel_clone+0xe7/0x890 [ 118.450905] user_mode_thread+0xad/0xf0 [ 118.450915] rest_init+0x24/0x250 [ 118.450926] arch_call_rest_init+0xf/0x14 [ 118.450944] start_kernel+0x4c6/0x4eb [ 118.450959] secondary_startup_64_no_verify+0xe0/0xeb [ 118.450975] [ 118.450975] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 118.450989] _raw_spin_lock_irqsave+0x39/0x60 [ 118.450999] try_to_wake_up+0xab/0x1930 [ 118.451012] up+0x75/0xb0 [ 118.451026] __up_console_sem+0x6e/0x80 [ 118.451042] console_unlock+0x46a/0x590 [ 118.451058] do_con_write+0xc05/0x1d50 [ 118.451069] con_write+0x21/0x40 [ 118.451078] n_tty_write+0x4d4/0xfe0 [ 118.451090] file_tty_write.constprop.0+0x455/0x8a0 [ 118.451101] vfs_write+0x9c3/0xd90 [ 118.451117] ksys_write+0x127/0x250 [ 118.451132] do_syscall_64+0x3b/0x90 [ 118.451149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.451161] [ 118.451161] -> #0 ((console_sem).lock){....}-{2:2}: [ 118.451175] __lock_acquire+0x2a02/0x5e70 [ 118.451192] lock_acquire+0x1a2/0x530 [ 118.451208] _raw_spin_lock_irqsave+0x39/0x60 [ 118.451218] down_trylock+0xe/0x70 [ 118.451233] __down_trylock_console_sem+0x3b/0xd0 [ 118.451249] vprintk_emit+0x16b/0x560 [ 118.451265] vprintk+0x84/0xa0 [ 118.451280] _printk+0xba/0xf1 [ 118.451291] report_bug.cold+0x72/0xab [ 118.451307] handle_bug+0x3c/0x70 [ 118.451323] exc_invalid_op+0x14/0x50 [ 118.451340] asm_exc_invalid_op+0x16/0x20 [ 118.451352] group_sched_out.part.0+0x2c7/0x460 [ 118.451370] ctx_sched_out+0x8f1/0xc10 [ 118.451386] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.451397] __schedule+0xedd/0x2470 [ 118.451410] schedule+0xda/0x1b0 [ 118.451423] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.451434] syscall_exit_to_user_mode+0x19/0x40 [ 118.451446] do_syscall_64+0x48/0x90 [ 118.451463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.451475] [ 118.451475] other info that might help us debug this: [ 118.451475] [ 118.451478] Chain exists of: [ 118.451478] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 118.451478] [ 118.451492] Possible unsafe locking scenario: [ 118.451492] [ 118.451495] CPU0 CPU1 [ 118.451497] ---- ---- [ 118.451500] lock(&ctx->lock); [ 118.451505] lock(&rq->__lock); [ 118.451512] lock(&ctx->lock); [ 118.451518] lock((console_sem).lock); [ 118.451524] [ 118.451524] *** DEADLOCK *** [ 118.451524] [ 118.451526] 2 locks held by syz-executor.7/3793: [ 118.451532] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 118.451561] #1: ffff88800f51a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.451587] [ 118.451587] stack backtrace: [ 118.451590] CPU: 0 PID: 3793 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 118.451602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.451610] Call Trace: [ 118.451613] [ 118.451618] dump_stack_lvl+0x8b/0xb3 [ 118.451636] check_noncircular+0x263/0x2e0 [ 118.451652] ? format_decode+0x26c/0xb50 [ 118.451668] ? print_circular_bug+0x450/0x450 [ 118.451685] ? simple_strtoul+0x30/0x30 [ 118.451700] ? perf_swevent_event+0x6c/0x550 [ 118.451717] ? format_decode+0x26c/0xb50 [ 118.451734] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 118.451751] __lock_acquire+0x2a02/0x5e70 [ 118.451773] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 118.451795] lock_acquire+0x1a2/0x530 [ 118.451811] ? down_trylock+0xe/0x70 [ 118.451828] ? lock_release+0x750/0x750 [ 118.451848] ? vprintk+0x84/0xa0 [ 118.451866] _raw_spin_lock_irqsave+0x39/0x60 [ 118.451877] ? down_trylock+0xe/0x70 [ 118.451893] down_trylock+0xe/0x70 [ 118.451909] ? vprintk+0x84/0xa0 [ 118.451925] __down_trylock_console_sem+0x3b/0xd0 [ 118.451942] vprintk_emit+0x16b/0x560 [ 118.451961] vprintk+0x84/0xa0 [ 118.451978] _printk+0xba/0xf1 [ 118.451989] ? record_print_text.cold+0x16/0x16 [ 118.452005] ? report_bug.cold+0x66/0xab [ 118.452023] ? group_sched_out.part.0+0x2c7/0x460 [ 118.452041] report_bug.cold+0x72/0xab [ 118.452059] handle_bug+0x3c/0x70 [ 118.452076] exc_invalid_op+0x14/0x50 [ 118.452094] asm_exc_invalid_op+0x16/0x20 [ 118.452107] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.452128] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.452139] RSP: 0018:ffff888018077c48 EFLAGS: 00010006 [ 118.452148] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.452155] RDX: ffff88800fe5b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 118.452163] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 118.452170] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800f51a400 [ 118.452178] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 118.452189] ? group_sched_out.part.0+0x2c7/0x460 [ 118.452209] ? group_sched_out.part.0+0x2c7/0x460 [ 118.452228] ctx_sched_out+0x8f1/0xc10 [ 118.452248] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.452262] ? lock_is_held_type+0xd7/0x130 [ 118.452275] ? __perf_cgroup_move+0x160/0x160 [ 118.452286] ? set_next_entity+0x304/0x550 [ 118.452303] ? update_curr+0x267/0x740 [ 118.452321] ? lock_is_held_type+0xd7/0x130 [ 118.452335] __schedule+0xedd/0x2470 [ 118.452352] ? io_schedule_timeout+0x150/0x150 [ 118.452368] ? trace_rcu_dyntick+0x1a7/0x250 [ 118.452388] schedule+0xda/0x1b0 [ 118.452402] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.452415] syscall_exit_to_user_mode+0x19/0x40 [ 118.452428] do_syscall_64+0x48/0x90 [ 118.452446] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.452459] RIP: 0033:0x7efc49b2fb19 [ 118.452467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.452477] RSP: 002b:00007efc470a5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.452488] RAX: 0000000000000001 RBX: 00007efc49c42f68 RCX: 00007efc49b2fb19 [ 118.452495] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc49c42f6c [ 118.452502] RBP: 00007efc49c42f60 R08: 000000000000000e R09: 0000000000000000 [ 118.452510] R10: 0000000000000004 R11: 0000000000000246 R12: 00007efc49c42f6c [ 118.452517] R13: 00007ffcd924649f R14: 00007efc470a5300 R15: 0000000000022000 [ 118.452529] [ 118.509211] WARNING: CPU: 0 PID: 3793 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 118.509900] Modules linked in: [ 118.510141] CPU: 0 PID: 3793 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1 [ 118.510747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.511568] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.511975] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.513297] RSP: 0018:ffff888018077c48 EFLAGS: 00010006 [ 118.513689] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.514215] RDX: ffff88800fe5b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 118.514748] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 118.515277] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800f51a400 [ 118.515804] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 118.516333] FS: 00007efc470a5700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 118.516929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.517357] CR2: 00007fdea3e530f0 CR3: 000000001857a000 CR4: 0000000000350ef0 [ 118.517879] Call Trace: [ 118.518074] [ 118.518251] ctx_sched_out+0x8f1/0xc10 [ 118.518563] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.518960] ? lock_is_held_type+0xd7/0x130 [ 118.519291] ? __perf_cgroup_move+0x160/0x160 [ 118.519638] ? set_next_entity+0x304/0x550 [ 118.519966] ? update_curr+0x267/0x740 [ 118.520270] ? lock_is_held_type+0xd7/0x130 [ 118.520601] __schedule+0xedd/0x2470 [ 118.520889] ? io_schedule_timeout+0x150/0x150 [ 118.521238] ? trace_rcu_dyntick+0x1a7/0x250 [ 118.521577] schedule+0xda/0x1b0 [ 118.521840] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.522213] syscall_exit_to_user_mode+0x19/0x40 [ 118.522576] do_syscall_64+0x48/0x90 [ 118.522865] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.523250] RIP: 0033:0x7efc49b2fb19 [ 118.523531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.524862] RSP: 002b:00007efc470a5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.525422] RAX: 0000000000000001 RBX: 00007efc49c42f68 RCX: 00007efc49b2fb19 [ 118.525943] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc49c42f6c [ 118.526466] RBP: 00007efc49c42f60 R08: 000000000000000e R09: 0000000000000000 [ 118.527013] R10: 0000000000000004 R11: 0000000000000246 R12: 00007efc49c42f6c [ 118.527537] R13: 00007ffcd924649f R14: 00007efc470a5300 R15: 0000000000022000 [ 118.528075] [ 118.528255] irq event stamp: 908 [ 118.528513] hardirqs last enabled at (907): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 118.529199] hardirqs last disabled at (908): [] __schedule+0x1225/0x2470 [ 118.529822] softirqs last enabled at (756): [] __irq_exit_rcu+0x11b/0x180 [ 118.530447] softirqs last disabled at (707): [] __irq_exit_rcu+0x11b/0x180 [ 118.531083] ---[ end trace 0000000000000000 ]--- [ 118.859043] device syz_tun entered promiscuous mode [ 118.859678] device syz_tun left promiscuous mode [ 118.860574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3828 comm=syz-executor.7 [ 119.063004] device syz_tun entered promiscuous mode [ 119.063564] device syz_tun left promiscuous mode [ 119.065091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3840 comm=syz-executor.7 01:20:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x406, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @can={0x1d, 0x0}, @rc={0x1f, @any, 0x89}, @in={0x2, 0x4e21, @private=0xa010101}, 0x2, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x81, 0x625a}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000140)=0x100, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r1, 0x2f, 0xd3, 0x5, 0x2, 0x0, @mcast2, @private2, 0x0, 0x7800, 0xd3, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r1, 0x29, 0x8, 0x0, 0x1, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8000, 0x6, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x29, 0x3, 0x4, 0x80000000, 0x46, @mcast1, @local, 0x20, 0x7847, 0xffffffc1, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x110, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x110}}, 0x86) socket$nl_generic(0x10, 0x3, 0x10) [ 119.210209] device syz_tun entered promiscuous mode [ 119.211047] device syz_tun left promiscuous mode [ 119.211795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3860 comm=syz-executor.7 01:20:56 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3f, 0x8, 0x1, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x2, 0x6e}, &(0x7f0000000040)={0x7ff, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x0, 0x9}, &(0x7f0000000080)={0x2, 0x6a, 0xfffffffffffff801, 0x1, 0x6, 0x100, 0x9, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0xfff]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="57bdabc0a8e9ce66b0fdc3f006f6bccaeea2c0df3473cdbd0ea34470379605222e7448f182ae33271803a0be209a9c7a7efc448b3b7e1daff77da5ae36153dba2ac65f0c7b47c8940fd5", 0x4a, 0x12000, 0x0, {0x0, r4}}, 0x40) rt_sigprocmask(0x1, &(0x7f0000000380)={[0x971]}, &(0x7f00000003c0), 0x8) rt_sigtimedwait(&(0x7f0000000400), 0x0, &(0x7f0000000440), 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="859ab5ce6a0b1171dfc9949a40078807d2433e1968add14ca726221d754f1d4d6953429bf66f8bc1212e8321f51a7c81146db4a0511b95d08a1d040580a1469767ef2463a1e9614674c5d756387debea86d00aeaf624b6172f5524bf5ff1a83e2d337138213f4d4666f7051fc1df3c036e311f50e7ac865df05a4dedc579a5", 0x7f, 0x40, 0x1, {0x0, r5}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) r6 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc2, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x9, 0x8, 0x1, 0x9, 0xffff, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xe000, 0xd6, 0x0, 0x97b, 0x80, 0xffff, 0x48]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x401, 0x31a, 0x6, 0x97, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0xfff, 0x8001, 0x8, 0x7, 0x96c, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x17, 0x6c, 0x9, 0x3, 0x12, 0x2, 0x5, 0x36, 0x2, 0x48, 0x6d, 0x4, 0x6c, 0x9, 0x5, 0xcb4b1e421fb07796, 0x6c, 0xc4b1bc60fae6bccc, 0x30, 0x0, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x6, 0x30, 0xc, 0x1, 0x90, 0x3, 0x48, 0x18, 0x1b, 0x5, 0x24, 0x12, 0xb, 0x1, 0x48, 0x30, 0x48, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x7, 0x6}, {0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x16}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x85) clock_gettime(0x1, &(0x7f0000000980)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r6, 0x0) syz_io_uring_setup(0x4075, &(0x7f00000009c0)={0x0, 0x10f8, 0x1, 0x2, 0x28, 0x0, r6}, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000ac0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x6, 0xffffffff00000000, 0x80000001, 0x6, 0x1, {0x1, r4}}, 0x2) syz_io_uring_submit(r8, 0x0, &(0x7f0000000c00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x5, 0x2, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x200800) 01:20:56 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3f, 0x8, 0x1, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x2, 0x6e}, &(0x7f0000000040)={0x7ff, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x0, 0x9}, &(0x7f0000000080)={0x2, 0x6a, 0xfffffffffffff801, 0x1, 0x6, 0x100, 0x9, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0xfff]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="57bdabc0a8e9ce66b0fdc3f006f6bccaeea2c0df3473cdbd0ea34470379605222e7448f182ae33271803a0be209a9c7a7efc448b3b7e1daff77da5ae36153dba2ac65f0c7b47c8940fd5", 0x4a, 0x12000, 0x0, {0x0, r4}}, 0x40) rt_sigprocmask(0x1, &(0x7f0000000380)={[0x971]}, &(0x7f00000003c0), 0x8) rt_sigtimedwait(&(0x7f0000000400), 0x0, &(0x7f0000000440), 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="859ab5ce6a0b1171dfc9949a40078807d2433e1968add14ca726221d754f1d4d6953429bf66f8bc1212e8321f51a7c81146db4a0511b95d08a1d040580a1469767ef2463a1e9614674c5d756387debea86d00aeaf624b6172f5524bf5ff1a83e2d337138213f4d4666f7051fc1df3c036e311f50e7ac865df05a4dedc579a5", 0x7f, 0x40, 0x1, {0x0, r5}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) r6 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc2, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x9, 0x8, 0x1, 0x9, 0xffff, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xe000, 0xd6, 0x0, 0x97b, 0x80, 0xffff, 0x48]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x401, 0x31a, 0x6, 0x97, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0xfff, 0x8001, 0x8, 0x7, 0x96c, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x17, 0x6c, 0x9, 0x3, 0x12, 0x2, 0x5, 0x36, 0x2, 0x48, 0x6d, 0x4, 0x6c, 0x9, 0x5, 0xcb4b1e421fb07796, 0x6c, 0xc4b1bc60fae6bccc, 0x30, 0x0, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x6, 0x30, 0xc, 0x1, 0x90, 0x3, 0x48, 0x18, 0x1b, 0x5, 0x24, 0x12, 0xb, 0x1, 0x48, 0x30, 0x48, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x7, 0x6}, {0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x16}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x85) clock_gettime(0x1, &(0x7f0000000980)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r6, 0x0) syz_io_uring_setup(0x4075, &(0x7f00000009c0)={0x0, 0x10f8, 0x1, 0x2, 0x28, 0x0, r6}, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000ac0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x6, 0xffffffff00000000, 0x80000001, 0x6, 0x1, {0x1, r4}}, 0x2) syz_io_uring_submit(r8, 0x0, &(0x7f0000000c00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x5, 0x2, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x200800) 01:20:56 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3f, 0x8, 0x1, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x2, 0x6e}, &(0x7f0000000040)={0x7ff, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x0, 0x9}, &(0x7f0000000080)={0x2, 0x6a, 0xfffffffffffff801, 0x1, 0x6, 0x100, 0x9, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0xfff]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="57bdabc0a8e9ce66b0fdc3f006f6bccaeea2c0df3473cdbd0ea34470379605222e7448f182ae33271803a0be209a9c7a7efc448b3b7e1daff77da5ae36153dba2ac65f0c7b47c8940fd5", 0x4a, 0x12000, 0x0, {0x0, r4}}, 0x40) rt_sigprocmask(0x1, &(0x7f0000000380)={[0x971]}, &(0x7f00000003c0), 0x8) rt_sigtimedwait(&(0x7f0000000400), 0x0, &(0x7f0000000440), 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="859ab5ce6a0b1171dfc9949a40078807d2433e1968add14ca726221d754f1d4d6953429bf66f8bc1212e8321f51a7c81146db4a0511b95d08a1d040580a1469767ef2463a1e9614674c5d756387debea86d00aeaf624b6172f5524bf5ff1a83e2d337138213f4d4666f7051fc1df3c036e311f50e7ac865df05a4dedc579a5", 0x7f, 0x40, 0x1, {0x0, r5}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) r6 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc2, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x9, 0x8, 0x1, 0x9, 0xffff, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xe000, 0xd6, 0x0, 0x97b, 0x80, 0xffff, 0x48]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x401, 0x31a, 0x6, 0x97, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0xfff, 0x8001, 0x8, 0x7, 0x96c, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x17, 0x6c, 0x9, 0x3, 0x12, 0x2, 0x5, 0x36, 0x2, 0x48, 0x6d, 0x4, 0x6c, 0x9, 0x5, 0xcb4b1e421fb07796, 0x6c, 0xc4b1bc60fae6bccc, 0x30, 0x0, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x6, 0x30, 0xc, 0x1, 0x90, 0x3, 0x48, 0x18, 0x1b, 0x5, 0x24, 0x12, 0xb, 0x1, 0x48, 0x30, 0x48, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x7, 0x6}, {0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x16}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x85) clock_gettime(0x1, &(0x7f0000000980)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r6, 0x0) syz_io_uring_setup(0x4075, &(0x7f00000009c0)={0x0, 0x10f8, 0x1, 0x2, 0x28, 0x0, r6}, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000ac0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x6, 0xffffffff00000000, 0x80000001, 0x6, 0x1, {0x1, r4}}, 0x2) syz_io_uring_submit(r8, 0x0, &(0x7f0000000c00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x5, 0x2, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x200800) 01:20:56 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3f, 0x8, 0x1, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x2, 0x6e}, &(0x7f0000000040)={0x7ff, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x0, 0x9}, &(0x7f0000000080)={0x2, 0x6a, 0xfffffffffffff801, 0x1, 0x6, 0x100, 0x9, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0xfff]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="57bdabc0a8e9ce66b0fdc3f006f6bccaeea2c0df3473cdbd0ea34470379605222e7448f182ae33271803a0be209a9c7a7efc448b3b7e1daff77da5ae36153dba2ac65f0c7b47c8940fd5", 0x4a, 0x12000, 0x0, {0x0, r4}}, 0x40) rt_sigprocmask(0x1, &(0x7f0000000380)={[0x971]}, &(0x7f00000003c0), 0x8) rt_sigtimedwait(&(0x7f0000000400), 0x0, &(0x7f0000000440), 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="859ab5ce6a0b1171dfc9949a40078807d2433e1968add14ca726221d754f1d4d6953429bf66f8bc1212e8321f51a7c81146db4a0511b95d08a1d040580a1469767ef2463a1e9614674c5d756387debea86d00aeaf624b6172f5524bf5ff1a83e2d337138213f4d4666f7051fc1df3c036e311f50e7ac865df05a4dedc579a5", 0x7f, 0x40, 0x1, {0x0, r5}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) r6 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc2, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x9, 0x8, 0x1, 0x9, 0xffff, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xe000, 0xd6, 0x0, 0x97b, 0x80, 0xffff, 0x48]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x401, 0x31a, 0x6, 0x97, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0xfff, 0x8001, 0x8, 0x7, 0x96c, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x17, 0x6c, 0x9, 0x3, 0x12, 0x2, 0x5, 0x36, 0x2, 0x48, 0x6d, 0x4, 0x6c, 0x9, 0x5, 0xcb4b1e421fb07796, 0x6c, 0xc4b1bc60fae6bccc, 0x30, 0x0, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x6, 0x30, 0xc, 0x1, 0x90, 0x3, 0x48, 0x18, 0x1b, 0x5, 0x24, 0x12, 0xb, 0x1, 0x48, 0x30, 0x48, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x7, 0x6}, {0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x16}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x85) clock_gettime(0x1, &(0x7f0000000980)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r6, 0x0) syz_io_uring_setup(0x4075, &(0x7f00000009c0)={0x0, 0x10f8, 0x1, 0x2, 0x28, 0x0, r6}, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000ac0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x6, 0xffffffff00000000, 0x80000001, 0x6, 0x1, {0x1, r4}}, 0x2) syz_io_uring_submit(r8, 0x0, &(0x7f0000000c00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x5, 0x2, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x200800) 01:20:56 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3f, 0x8, 0x1, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x2, 0x6e}, &(0x7f0000000040)={0x7ff, 0x9, 0x10000, 0x4, 0x1, 0x9, 0x0, 0x9}, &(0x7f0000000080)={0x2, 0x6a, 0xfffffffffffff801, 0x1, 0x6, 0x100, 0x9, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0xfff]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="57bdabc0a8e9ce66b0fdc3f006f6bccaeea2c0df3473cdbd0ea34470379605222e7448f182ae33271803a0be209a9c7a7efc448b3b7e1daff77da5ae36153dba2ac65f0c7b47c8940fd5", 0x4a, 0x12000, 0x0, {0x0, r4}}, 0x40) rt_sigprocmask(0x1, &(0x7f0000000380)={[0x971]}, &(0x7f00000003c0), 0x8) rt_sigtimedwait(&(0x7f0000000400), 0x0, &(0x7f0000000440), 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="859ab5ce6a0b1171dfc9949a40078807d2433e1968add14ca726221d754f1d4d6953429bf66f8bc1212e8321f51a7c81146db4a0511b95d08a1d040580a1469767ef2463a1e9614674c5d756387debea86d00aeaf624b6172f5524bf5ff1a83e2d337138213f4d4666f7051fc1df3c036e311f50e7ac865df05a4dedc579a5", 0x7f, 0x40, 0x1, {0x0, r5}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) r6 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcc2, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x9, 0x8, 0x1, 0x9, 0xffff, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xe000, 0xd6, 0x0, 0x97b, 0x80, 0xffff, 0x48]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x401, 0x31a, 0x6, 0x97, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0xfff, 0x8001, 0x8, 0x7, 0x96c, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x17, 0x6c, 0x9, 0x3, 0x12, 0x2, 0x5, 0x36, 0x2, 0x48, 0x6d, 0x4, 0x6c, 0x9, 0x5, 0xcb4b1e421fb07796, 0x6c, 0xc4b1bc60fae6bccc, 0x30, 0x0, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x6, 0x30, 0xc, 0x1, 0x90, 0x3, 0x48, 0x18, 0x1b, 0x5, 0x24, 0x12, 0xb, 0x1, 0x48, 0x30, 0x48, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x7, 0x6}, {0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x16}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x2}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x5}]}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x85) clock_gettime(0x1, &(0x7f0000000980)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x810, r6, 0x0) syz_io_uring_setup(0x4075, &(0x7f00000009c0)={0x0, 0x10f8, 0x1, 0x2, 0x28, 0x0, r6}, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000ac0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x6, 0xffffffff00000000, 0x80000001, 0x6, 0x1, {0x1, r4}}, 0x2) syz_io_uring_submit(r8, 0x0, &(0x7f0000000c00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x5, 0x2, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x200800) [ 120.409096] loop4: detected capacity change from 0 to 264192 [ 120.414091] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.483817] loop4: detected capacity change from 0 to 264192 VM DIAGNOSIS: 01:20:55 Registers: info registers vcpu 0 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888018077690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006f R11=0000000000000001 R12=000000000000006f R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007efc470a5700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdea3e530f0 CR3=000000001857a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007efc49c167c0 00007efc49c167c8 YMM02=0000000000000000 0000000000000000 00007efc49c167e0 00007efc49c167c0 YMM03=0000000000000000 0000000000000000 00007efc49c167c8 00007efc49c167c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=ffff88801b951ac0 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff814683c3 RDI=ffff88801b951eb4 RBP=ffff88801b951ac0 RSP=ffff88800d1ff6a0 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=0000000000000000 R11=0000000000000001 R12=00007fb44c713d82 R13=0000000000000000 R14=ffff88801b951ac0 R15=0000000000000000 RIP=ffffffff813129b5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb44c6ca260 CR3=000000001cc32000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000