Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:9162' (ECDSA) to the list of known hosts. 2022/10/04 08:56:11 fuzzer started 2022/10/04 08:56:12 dialing manager at localhost:35095 syzkaller login: [ 35.949448] cgroup: Unknown subsys name 'net' [ 36.047152] cgroup: Unknown subsys name 'rlimit' 2022/10/04 08:56:27 syscalls: 2215 2022/10/04 08:56:27 code coverage: enabled 2022/10/04 08:56:27 comparison tracing: enabled 2022/10/04 08:56:27 extra coverage: enabled 2022/10/04 08:56:27 setuid sandbox: enabled 2022/10/04 08:56:27 namespace sandbox: enabled 2022/10/04 08:56:27 Android sandbox: enabled 2022/10/04 08:56:27 fault injection: enabled 2022/10/04 08:56:27 leak checking: enabled 2022/10/04 08:56:27 net packet injection: enabled 2022/10/04 08:56:27 net device setup: enabled 2022/10/04 08:56:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 08:56:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 08:56:27 USB emulation: enabled 2022/10/04 08:56:27 hci packet injection: enabled 2022/10/04 08:56:27 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 08:56:27 802.15.4 emulation: enabled 2022/10/04 08:56:28 fetching corpus: 50, signal 23938/25772 (executing program) 2022/10/04 08:56:28 fetching corpus: 100, signal 33520/37063 (executing program) 2022/10/04 08:56:28 fetching corpus: 150, signal 41043/46226 (executing program) 2022/10/04 08:56:28 fetching corpus: 200, signal 49997/56712 (executing program) 2022/10/04 08:56:28 fetching corpus: 250, signal 56269/64473 (executing program) 2022/10/04 08:56:28 fetching corpus: 300, signal 59143/68847 (executing program) 2022/10/04 08:56:28 fetching corpus: 350, signal 62850/74023 (executing program) 2022/10/04 08:56:28 fetching corpus: 400, signal 67562/80097 (executing program) 2022/10/04 08:56:28 fetching corpus: 450, signal 72005/85870 (executing program) 2022/10/04 08:56:29 fetching corpus: 500, signal 75325/90547 (executing program) 2022/10/04 08:56:29 fetching corpus: 550, signal 80365/96732 (executing program) 2022/10/04 08:56:29 fetching corpus: 600, signal 83666/101302 (executing program) 2022/10/04 08:56:29 fetching corpus: 650, signal 86026/104956 (executing program) 2022/10/04 08:56:29 fetching corpus: 700, signal 88969/109105 (executing program) 2022/10/04 08:56:29 fetching corpus: 750, signal 92121/113439 (executing program) 2022/10/04 08:56:29 fetching corpus: 800, signal 94927/117380 (executing program) 2022/10/04 08:56:30 fetching corpus: 850, signal 97465/121089 (executing program) 2022/10/04 08:56:30 fetching corpus: 900, signal 100151/124844 (executing program) 2022/10/04 08:56:30 fetching corpus: 950, signal 102089/127923 (executing program) 2022/10/04 08:56:30 fetching corpus: 1000, signal 103981/130918 (executing program) 2022/10/04 08:56:30 fetching corpus: 1050, signal 107344/135167 (executing program) 2022/10/04 08:56:30 fetching corpus: 1100, signal 109196/138127 (executing program) 2022/10/04 08:56:30 fetching corpus: 1150, signal 110624/140660 (executing program) 2022/10/04 08:56:30 fetching corpus: 1200, signal 112395/143456 (executing program) 2022/10/04 08:56:30 fetching corpus: 1250, signal 115131/147043 (executing program) 2022/10/04 08:56:31 fetching corpus: 1300, signal 116184/149221 (executing program) 2022/10/04 08:56:31 fetching corpus: 1350, signal 119382/153136 (executing program) 2022/10/04 08:56:31 fetching corpus: 1400, signal 120180/155059 (executing program) 2022/10/04 08:56:31 fetching corpus: 1450, signal 121497/157384 (executing program) 2022/10/04 08:56:31 fetching corpus: 1500, signal 123261/159992 (executing program) 2022/10/04 08:56:31 fetching corpus: 1550, signal 125833/163260 (executing program) 2022/10/04 08:56:31 fetching corpus: 1600, signal 126716/165212 (executing program) 2022/10/04 08:56:31 fetching corpus: 1650, signal 128425/167749 (executing program) 2022/10/04 08:56:31 fetching corpus: 1700, signal 130304/170419 (executing program) 2022/10/04 08:56:32 fetching corpus: 1750, signal 131970/172915 (executing program) 2022/10/04 08:56:32 fetching corpus: 1800, signal 133292/175100 (executing program) 2022/10/04 08:56:32 fetching corpus: 1850, signal 134938/177510 (executing program) 2022/10/04 08:56:32 fetching corpus: 1900, signal 136619/179923 (executing program) 2022/10/04 08:56:32 fetching corpus: 1950, signal 137259/181612 (executing program) 2022/10/04 08:56:32 fetching corpus: 2000, signal 138400/183563 (executing program) 2022/10/04 08:56:32 fetching corpus: 2050, signal 139575/185593 (executing program) 2022/10/04 08:56:32 fetching corpus: 2100, signal 141076/187811 (executing program) 2022/10/04 08:56:33 fetching corpus: 2150, signal 143575/190753 (executing program) 2022/10/04 08:56:33 fetching corpus: 2200, signal 145898/193543 (executing program) 2022/10/04 08:56:33 fetching corpus: 2250, signal 148377/196320 (executing program) 2022/10/04 08:56:33 fetching corpus: 2300, signal 149359/198116 (executing program) 2022/10/04 08:56:33 fetching corpus: 2350, signal 150445/199994 (executing program) 2022/10/04 08:56:33 fetching corpus: 2400, signal 151394/201728 (executing program) 2022/10/04 08:56:33 fetching corpus: 2450, signal 152085/203297 (executing program) 2022/10/04 08:56:33 fetching corpus: 2500, signal 152646/204747 (executing program) 2022/10/04 08:56:33 fetching corpus: 2550, signal 153045/206083 (executing program) 2022/10/04 08:56:34 fetching corpus: 2600, signal 153939/207748 (executing program) 2022/10/04 08:56:34 fetching corpus: 2650, signal 154767/209324 (executing program) 2022/10/04 08:56:34 fetching corpus: 2700, signal 155797/211055 (executing program) 2022/10/04 08:56:34 fetching corpus: 2750, signal 156464/212498 (executing program) 2022/10/04 08:56:34 fetching corpus: 2800, signal 157545/214226 (executing program) 2022/10/04 08:56:34 fetching corpus: 2850, signal 158155/215620 (executing program) 2022/10/04 08:56:34 fetching corpus: 2900, signal 158731/216994 (executing program) 2022/10/04 08:56:34 fetching corpus: 2950, signal 160000/218820 (executing program) 2022/10/04 08:56:35 fetching corpus: 3000, signal 160735/220285 (executing program) 2022/10/04 08:56:35 fetching corpus: 3050, signal 161404/221699 (executing program) 2022/10/04 08:56:35 fetching corpus: 3100, signal 162118/223104 (executing program) 2022/10/04 08:56:35 fetching corpus: 3150, signal 162830/224536 (executing program) 2022/10/04 08:56:35 fetching corpus: 3200, signal 163423/225878 (executing program) 2022/10/04 08:56:35 fetching corpus: 3250, signal 163858/227130 (executing program) 2022/10/04 08:56:35 fetching corpus: 3300, signal 164615/228568 (executing program) 2022/10/04 08:56:35 fetching corpus: 3350, signal 165403/229959 (executing program) 2022/10/04 08:56:35 fetching corpus: 3400, signal 166287/231401 (executing program) 2022/10/04 08:56:36 fetching corpus: 3450, signal 167023/232756 (executing program) 2022/10/04 08:56:36 fetching corpus: 3500, signal 167555/233986 (executing program) 2022/10/04 08:56:36 fetching corpus: 3550, signal 168528/235468 (executing program) 2022/10/04 08:56:36 fetching corpus: 3600, signal 169296/236875 (executing program) 2022/10/04 08:56:36 fetching corpus: 3650, signal 170155/238261 (executing program) 2022/10/04 08:56:36 fetching corpus: 3700, signal 170990/239649 (executing program) 2022/10/04 08:56:36 fetching corpus: 3750, signal 171703/240922 (executing program) 2022/10/04 08:56:36 fetching corpus: 3800, signal 172873/242446 (executing program) 2022/10/04 08:56:37 fetching corpus: 3850, signal 173894/243913 (executing program) 2022/10/04 08:56:37 fetching corpus: 3900, signal 174487/245105 (executing program) 2022/10/04 08:56:37 fetching corpus: 3950, signal 175291/246410 (executing program) 2022/10/04 08:56:37 fetching corpus: 4000, signal 177161/248303 (executing program) 2022/10/04 08:56:37 fetching corpus: 4050, signal 178033/249671 (executing program) 2022/10/04 08:56:37 fetching corpus: 4100, signal 179061/251078 (executing program) 2022/10/04 08:56:37 fetching corpus: 4150, signal 179592/252242 (executing program) 2022/10/04 08:56:37 fetching corpus: 4200, signal 180840/253714 (executing program) 2022/10/04 08:56:37 fetching corpus: 4250, signal 182127/255191 (executing program) 2022/10/04 08:56:38 fetching corpus: 4300, signal 182822/256369 (executing program) 2022/10/04 08:56:38 fetching corpus: 4350, signal 183877/257723 (executing program) 2022/10/04 08:56:38 fetching corpus: 4400, signal 184710/258926 (executing program) 2022/10/04 08:56:38 fetching corpus: 4450, signal 185862/260291 (executing program) 2022/10/04 08:56:38 fetching corpus: 4500, signal 186632/261490 (executing program) 2022/10/04 08:56:38 fetching corpus: 4550, signal 187028/262491 (executing program) 2022/10/04 08:56:38 fetching corpus: 4600, signal 187305/263439 (executing program) 2022/10/04 08:56:38 fetching corpus: 4650, signal 187713/264407 (executing program) 2022/10/04 08:56:39 fetching corpus: 4700, signal 188569/265547 (executing program) 2022/10/04 08:56:39 fetching corpus: 4750, signal 189837/266839 (executing program) 2022/10/04 08:56:39 fetching corpus: 4800, signal 190683/268057 (executing program) 2022/10/04 08:56:39 fetching corpus: 4850, signal 191258/269089 (executing program) 2022/10/04 08:56:39 fetching corpus: 4900, signal 192508/270405 (executing program) 2022/10/04 08:56:39 fetching corpus: 4950, signal 193670/271655 (executing program) 2022/10/04 08:56:39 fetching corpus: 5000, signal 194740/272820 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/273688 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/274438 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/275213 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/275997 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/276786 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/277579 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/278373 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/279163 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/279961 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/280776 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/281528 (executing program) 2022/10/04 08:56:39 fetching corpus: 5014, signal 194825/282296 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/283075 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/283866 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/284639 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/285429 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/286222 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/287032 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/287813 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/288570 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/289361 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/290120 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/290904 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/291709 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/292509 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/293298 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/294089 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/294881 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/295675 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/296447 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/297213 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/297991 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/298764 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/299552 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/300318 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/301085 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/301882 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/302683 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/303443 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/304219 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/304991 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/305745 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/306485 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/307286 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/308098 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/308853 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/309622 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/310399 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/311176 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/311967 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/312746 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/313534 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/314302 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/315105 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/315858 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/316657 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/317459 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/317779 (executing program) 2022/10/04 08:56:40 fetching corpus: 5014, signal 194825/317779 (executing program) 2022/10/04 08:56:43 starting 8 fuzzer processes 08:56:43 executing program 0: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/90) shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3800) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/191) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = clone3(&(0x7f0000000400)={0x80000400, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, {0x9}, &(0x7f00000002c0)=""/154, 0x9a, &(0x7f0000000380)=""/51, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x8}, 0x58) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, 0xffffffffffffffff, 0xee00, 0x0, r2, 0x44, 0x8001}, 0x7f, 0x3ff, 0x40, 0x1, 0x0, r5, 0x7}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r7 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r7, 0xb) r8 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) pwritev(r4, &(0x7f0000000580)=[{&(0x7f0000000500)="747c92fba4f39e1d5aeadb865ba42596bba4f2dbc8c1cce5dd5ea7b18721024a56887335445be6097f621eec423ad6b3bdc65b9f26d3b618156d84cb912a2b2249091f887017bc29e8bfe499bd34", 0x4e}], 0x1, 0x0, 0x0) shmctl$IPC_RMID(r1, 0x0) clone3(&(0x7f0000001740)={0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x19}, &(0x7f0000000680)=""/106, 0x6a, &(0x7f0000000700)=""/66, &(0x7f0000001700)=[r5, r3, r3, r5, r5, r3, 0x0, r6, r6, r5], 0xa}, 0x58) 08:56:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x301000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}}, 0x90) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x30}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x62313fcb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040010}, 0xc000) socketpair(0x25, 0xa, 0x7, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf28}, @NL80211_ATTR_PMK={0x14, 0xfe, "70fb3161426731c089292709d1d24169"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x26}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x14004000) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x41}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x12000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000800)) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x50) r5 = openat$incfs(r0, &(0x7f0000000980)='.log\x00', 0x400001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffc, 0x51}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xeee}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa72}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x44) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x20000019) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x100, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) fgetxattr(r2, &(0x7f0000000e40)=@known='security.selinux\x00', &(0x7f0000000e80)=""/220, 0xdc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x8015) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20048800) 08:56:43 executing program 2: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x301, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/34, 0x22}], 0x3, &(0x7f0000000780)=""/24, 0x18}, 0x2023) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc4, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd9d9ffa5e40d4d2a}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000805) recvmmsg$unix(r3, &(0x7f00000014c0)=[{{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000a00)=""/122, 0x7a}, {&(0x7f0000000a80)=""/186, 0xba}, {&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f0000000c00)=""/145, 0x91}, {&(0x7f0000000cc0)=""/97, 0x61}, {&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000000e40)=""/223, 0xdf}], 0x7, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000001100)=""/110, 0x6e}, {&(0x7f0000001180)=""/65, 0x41}, {&(0x7f0000001200)=""/9, 0x9}, {&(0x7f0000001240)=""/13, 0xd}, {&(0x7f0000001280)=""/208, 0xd0}, {&(0x7f0000001380)=""/177, 0xb1}], 0x6}}], 0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, r8, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x8000) r9 = creat(&(0x7f0000001780)='./file0\x00', 0x86) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r7) getpeername$packet(r3, &(0x7f0000001840)={0x11, 0x0, 0x0}, &(0x7f0000001880)=0x14) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000018c0)={0x0, @initdev, @private}, &(0x7f0000001900)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000001a00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x74, r10, 0x300, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004804}, 0x804) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc3d, 0x7b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000800) 08:56:43 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffff]}, 0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="243c770d875d"}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) r2 = open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x58) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6}, 0x10) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ': [\n]'}, {0x20, 'vxcan0\x00'}, {0x20, '}!'}, {0x20, '\x00'}, {0x20, '($&]])\xc5'}, {0x20, '[.\xd9#~'}, {0x20, 'vxcan0\x00'}, {0x20, '{!,/!$'}, {0x20, 'vxcan0\x00'}], 0xa, "10bb5d42129e756c99d3ed51136cce7d686839b61b5921c40632fd045b9d61b3a07493ebfde43aeaf97f6b736cbc5f0ae0ea9858d69ed392f92a685ef9edd6a4739c7db0414dcc8c85cfb4573de19a7e154fcd5c536e60a9af3f4a9b3428ab502a897c44b5662613fac06833f9dd58e0dd3422223eee506a10aa9694752c09c996"}, 0xc4) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x46006, &(0x7f0000000400)={'trans=unix,', {[{@loose}], [{@audit}, {@context={'context', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '{#{-}-'}}, {@obj_type={'obj_type', 0x3d, '+{'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r3}}]}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000500)={{0x9, 0xffff}, 0x100, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000680)={{0x1f, 0xfff}, 0x100, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2, {0x68}}, './file0\x00'}) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x8, 0xa6, 0x5, 0x9, 0x0, 0x5, 0x11000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0x2}, 0x54cea4fe0935be60, 0x5, 0x7f, 0x4, 0x8, 0x3, 0x51, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, r8, 0x2) 08:56:43 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0a00, 0x4) fallocate(0xffffffffffffffff, 0x41, 0x585b, 0x10001) clone3(&(0x7f00000001c0)={0x248005000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x18}, &(0x7f0000000100)=""/62, 0x3e, &(0x7f0000000140)=""/2, &(0x7f0000000180)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0xa, {r0}}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/protocols\x00') pidfd_send_signal(0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x5, 0x3, 0x8}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={'L-', 0x1ff}, 0x16, 0x1) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000400)) pidfd_send_signal(r0, 0x18, &(0x7f0000000440)={0x5, 0x401, 0x3}, 0x0) utime(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x8, 0x7}) utime(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xfffffffffffffbff, 0x1}) utimensat(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x77359400}}, 0x100) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x19, 0x0, 0x7f, 0x80, 0x0, 0x100000001, 0x92b92, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1fc, 0x4, @perf_config_ext={0xa000000000000000, 0x7}, 0x8480, 0x0, 0x8000, 0x0, 0xebe7, 0xfff, 0x9e, 0x0, 0x6, 0x0, 0x5}, r5, 0x5, r2, 0x6) r6 = open_tree(r4, &(0x7f0000000740)='./file0\x00', 0x80800) execveat(r6, &(0x7f0000000780)='./file0\x00', &(0x7f0000000880)=[&(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='@\x00'], &(0x7f0000000940)=[&(0x7f00000008c0)='net/protocols\x00', &(0x7f0000000900)='/proc/stat\x00'], 0x1000) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x1800, &(0x7f0000000a00)={[{@xattr}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@obj_role={'obj_role', 0x3d, '@\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'L-'}}, {@fsname={'fsname', 0x3d, 'net/protocols\x00'}}, {@hash}, {@euid_gt={'euid>', 0xee01}}, {@dont_measure}]}) openat(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x8082, 0x8) 08:56:43 executing program 5: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0xfffffffffffffff7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0)=r1, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) syz_io_uring_setup(0x1111, &(0x7f0000000140)={0x0, 0xcac, 0x2, 0x0, 0x2f6, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x3f, {0x0, r0}, 0x80000000, 0x8, 0x0, {0x0, 0x0, r3}}, 0x10001) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) socket$nl_audit(0x10, 0x3, 0x9) close_range(r2, r2, 0x0) fdatasync(r1) write$binfmt_misc(r3, &(0x7f00000003c0)={'syz0', "8b306ed6b4c7a91d0c5afc466d553d3f8b063b25de08c2387a121acc4bf12df7b678255275831d74fc2de65bb6e473dbc1ff62b7e1a3228a8a681040a3e944a6295e2187222430c48e647bf42ad2d691763f3be224e70eca030c4fac585abb282584cc9cedbe073ded6c4b9356e53468255806b33e24ca0e5a9efa2cb533673d83ca5c31705eedf1e9d012f8e6ed"}, 0x92) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r5, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xb, 0x4, "f49d4ca35e2c72"}, @NL80211_KEY_SEQ={0xb, 0x4, "3d10bf968b1c26"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2a685d79a8"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "0df555e9c246878f687048193f5ad260"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008047}, 0x21) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000008c0)={0x1, 0x1, 0x1000, 0x83, &(0x7f0000000780)="339cc3a5615d1353b04ff5060a7702be0609c46bd56f72e9b148a648eaabc915f37ff51d37dad4d25c2813535d41cf44ae0fc3bc12bf263f62056c41d8ce727d925e3361238e8a9388e0373dcfbda16146674f915c6016be51110e6bba1cf45e113c3fccd4666c89a38a59d4a9697cc2ad4225a41d0146ad050477eba9cc0640c7f65a", 0x46, 0x0, &(0x7f0000000840)="a0ccaa893b03d30e076005ae0a88eeac17493106ab7abcfc267c1f423e7948e7915d00b3afdda96a84fdb233bb5f36bf5b23ffff084264dbca79a0e4846c9a1c30eb38e01acd"}) [ 66.970680] audit: type=1400 audit(1664873803.384:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:56:43 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x21) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7, 0x8000}}, './file0\x00'}) fcntl$dupfd(r2, 0x406, r1) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {r7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r10, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4f}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_aout(r11, &(0x7f0000000540)={{0x108, 0x8, 0x27, 0x47, 0x3a8, 0x73, 0x2c5, 0xa1}, "cdc6c74d60ebfeb69896aa522e238dfdba58222b57346b1568ecfec0c15043e2b035db01ef03b929ea1375eef6a3b7a940581b86cdc3a17aacc4e370cdd4b51d64", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x861) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r9, 0x10000000) syz_io_uring_submit(0x0, r12, &(0x7f0000000e40)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000dc0)=@x25}, 0x8) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000e80)=0x3) fdatasync(0xffffffffffffffff) 08:56:43 executing program 6: r0 = socket$inet(0x2, 0x3, 0x0) writev(r0, &(0x7f0000001000)=[{&(0x7f0000000000)="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", 0x1000}], 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001040)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000001140)=0xe8) sendto$inet(r0, &(0x7f0000001180)="eab32a31b65c308e6dcc65403ffb08a9281cfa2cbc42749555b86416826af77c1536e194bd33eef7794952ea828cec7b825664406f933d1ec6412d668567ef58223ccc6629fdf278ad6d4fcca0f5cc21a3cc3def65c9a090dc4f6064875d6f0f43452eddae71a9774edfb2249763acc7edb5460ee0e78c91916318ea9f3c3a4fb041066700679065f7faed7fec6a9ea8b2c38d2b9da3087eff1a5a3509d4bf7b092e389eb5e511829873aa5a40676ebac034de19a9a6d78fcf373c3afb0c0a203909a1f8cfd0d50b382ea397885b0fc452543b7d45afdfaeebcc36fb3c2bb866e775dc224269c1def2c2c09c1bbbfc54f8", 0xf1, 0x10, &(0x7f0000001280)={0x2, 0x4e21, @local}, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x8, 0x2) socketpair(0x29, 0x6, 0x180, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000001380)={0x8, 'vxcan1\x00', {'veth1_to_batadv\x00'}, 0x9}) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000013c0)={0x2, {{0x2, 0x4e21, @broadcast}}}, 0x88) getsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000001480), &(0x7f00000014c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file1\x00'}) getpeername$inet(r3, &(0x7f0000001540)={0x2, 0x0, @multicast1}, &(0x7f0000001580)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000015c0)={{0x2f, @multicast1, 0x4e22, 0x4, 'wlc\x00', 0x1, 0x9, 0x5a}, {@rand_addr=0x64010101, 0x4e22, 0x3, 0x5, 0x9, 0x10000}}, 0x44) fallocate(r0, 0x40, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001640), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000001680)={0x0, 0xf10f, 0x5, 0x7fff, 0x1, [{0x5, 0x4, 0x1, '\x00', 0xa04}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001700)) r5 = openat2(r3, &(0x7f0000001740)='./file1\x00', &(0x7f0000001780)={0x300, 0x0, 0x3}, 0x18) write$binfmt_elf64(r5, &(0x7f00000017c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1a, 0x40, 0x7, 0x1, 0x7, 0x3, 0x3, 0x80, 0x234, 0x40, 0x19d, 0x11b, 0x4, 0x38, 0x2, 0x2, 0x4, 0x4}, [{0x4, 0x9, 0x9, 0x10000, 0x6, 0x4, 0x2, 0xffffffffffffb26d}], "cd4bcd0ded8e8f81365d1ac62bcaa57c7354ed320aae2326ef89d96422e5e23baf11d122bfc1abbd23f1c890a6620a9949cd579dd8b10fdbbb187350a31a046d37df42937a91955ffc92a1d62c6f7416058abf54ecc2b368e7b2506fe65863af0f37b8ae2e7e3cd3f59ae4d8117e264b498e30207f7e7debf7a88847c36ffd5a", ['\x00']}, 0x1f8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001a40)={0x0, 0x0}) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x80, 0x8, 0x80, 0x4, 0x0, 0x2, 0x4800, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x2, @perf_config_ext={0x6, 0x331}, 0x45000, 0x100000001, 0x3, 0x5, 0x3800000000000000, 0x554, 0x8, 0x0, 0x4, 0x0, 0x5}, r6, 0x5, r5, 0x0) [ 68.315626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.318093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.321652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.323417] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.325418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.327489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.331536] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.333615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.336546] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.338334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.339921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.341532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.387493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.389859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.392773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.393914] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.396532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.398118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.400145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.401270] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.402339] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.404176] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.408836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.410237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.411608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.412426] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.413940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.415551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.419073] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.420179] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.420776] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.425177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.426006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.428233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.436497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.438278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.440423] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.440517] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.443013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.443754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.444580] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.446697] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.447181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.451363] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.452305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.461781] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.465445] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.470177] Bluetooth: hci3: HCI_REQ-0x0c1a [ 68.470201] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.482578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.484263] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.488194] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.492348] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.497943] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.499343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.506914] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.454173] Bluetooth: hci0: command 0x0409 tx timeout [ 70.454910] Bluetooth: hci1: command 0x0409 tx timeout [ 70.518362] Bluetooth: hci6: command 0x0409 tx timeout [ 70.518371] Bluetooth: hci2: command 0x0409 tx timeout [ 70.519478] Bluetooth: hci3: command 0x0409 tx timeout [ 70.519965] Bluetooth: hci7: command 0x0409 tx timeout [ 70.520738] Bluetooth: hci4: command 0x0409 tx timeout [ 70.521315] Bluetooth: hci5: command 0x0409 tx timeout [ 72.501876] Bluetooth: hci1: command 0x041b tx timeout [ 72.501962] Bluetooth: hci0: command 0x041b tx timeout [ 72.565962] Bluetooth: hci5: command 0x041b tx timeout [ 72.565996] Bluetooth: hci4: command 0x041b tx timeout [ 72.566520] Bluetooth: hci7: command 0x041b tx timeout [ 72.566953] Bluetooth: hci3: command 0x041b tx timeout [ 72.566971] Bluetooth: hci2: command 0x041b tx timeout [ 72.567488] Bluetooth: hci6: command 0x041b tx timeout [ 74.549861] Bluetooth: hci1: command 0x040f tx timeout [ 74.550961] Bluetooth: hci0: command 0x040f tx timeout [ 74.613862] Bluetooth: hci2: command 0x040f tx timeout [ 74.613887] Bluetooth: hci7: command 0x040f tx timeout [ 74.614296] Bluetooth: hci3: command 0x040f tx timeout [ 74.614700] Bluetooth: hci4: command 0x040f tx timeout [ 74.615138] Bluetooth: hci5: command 0x040f tx timeout [ 74.615530] Bluetooth: hci6: command 0x040f tx timeout [ 76.598938] Bluetooth: hci0: command 0x0419 tx timeout [ 76.599369] Bluetooth: hci1: command 0x0419 tx timeout [ 76.661975] Bluetooth: hci5: command 0x0419 tx timeout [ 76.662409] Bluetooth: hci6: command 0x0419 tx timeout [ 76.662852] Bluetooth: hci4: command 0x0419 tx timeout [ 76.663217] Bluetooth: hci7: command 0x0419 tx timeout [ 76.663571] Bluetooth: hci3: command 0x0419 tx timeout [ 76.663955] Bluetooth: hci2: command 0x0419 tx timeout [ 120.413691] audit: type=1400 audit(1664873856.826:7): avc: denied { open } for pid=3841 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.416421] audit: type=1400 audit(1664873856.827:8): avc: denied { kernel } for pid=3841 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:57:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000008f00)=[{{&(0x7f00000014c0)={0x2, 0x0, @multicast2=0xe0000003}, 0x10, &(0x7f00000047c0)=[{&(0x7f0000000100)="a2df", 0x2}], 0x1, &(0x7f0000004840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev}}}], 0x20}}], 0x1, 0x4044005) close_range(r1, r2, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r5, 0x0) dup3(r6, r6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 120.910509] ------------[ cut here ]------------ [ 120.910541] [ 120.910546] ====================================================== [ 120.910552] WARNING: possible circular locking dependency detected [ 120.910559] 6.0.0-rc7-next-20220930 #1 Not tainted [ 120.910570] ------------------------------------------------------ [ 120.910576] syz-executor.6/3877 is trying to acquire lock: [ 120.910587] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 120.910650] [ 120.910650] but task is already holding lock: [ 120.910655] ffff88803ec3dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.910701] [ 120.910701] which lock already depends on the new lock. [ 120.910701] [ 120.910706] [ 120.910706] the existing dependency chain (in reverse order) is: [ 120.910711] [ 120.910711] -> #3 (&ctx->lock){....}-{2:2}: [ 120.910736] _raw_spin_lock+0x2a/0x40 [ 120.910757] __perf_event_task_sched_out+0x53b/0x18d0 [ 120.910777] __schedule+0xedd/0x2470 [ 120.910807] schedule+0xda/0x1b0 [ 120.910831] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.910852] syscall_exit_to_user_mode+0x19/0x40 [ 120.910875] do_syscall_64+0x48/0x90 [ 120.910905] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.910929] [ 120.910929] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 120.910953] _raw_spin_lock_nested+0x30/0x40 [ 120.910973] raw_spin_rq_lock_nested+0x1e/0x30 [ 120.910995] task_fork_fair+0x63/0x4d0 [ 120.911025] sched_cgroup_fork+0x3d0/0x540 [ 120.911050] copy_process+0x4183/0x6e20 [ 120.911068] kernel_clone+0xe7/0x890 [ 120.911086] user_mode_thread+0xad/0xf0 [ 120.911104] rest_init+0x24/0x250 [ 120.911125] arch_call_rest_init+0xf/0x14 [ 120.911155] start_kernel+0x4c6/0x4eb [ 120.911182] secondary_startup_64_no_verify+0xe0/0xeb [ 120.911207] [ 120.911207] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 120.911231] _raw_spin_lock_irqsave+0x39/0x60 [ 120.911251] try_to_wake_up+0xab/0x1930 [ 120.911275] up+0x75/0xb0 [ 120.911300] __up_console_sem+0x6e/0x80 [ 120.911328] console_unlock+0x46a/0x590 [ 120.911357] do_con_write+0xc05/0x1d50 [ 120.911375] con_write+0x21/0x40 [ 120.911391] n_tty_write+0x4d4/0xfe0 [ 120.911412] file_tty_write.constprop.0+0x455/0x8a0 [ 120.911432] vfs_write+0x9c3/0xd90 [ 120.911460] ksys_write+0x127/0x250 [ 120.911488] do_syscall_64+0x3b/0x90 [ 120.911519] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.911542] [ 120.911542] -> #0 ((console_sem).lock){....}-{2:2}: [ 120.911566] __lock_acquire+0x2a02/0x5e70 [ 120.911596] lock_acquire+0x1a2/0x530 [ 120.911625] _raw_spin_lock_irqsave+0x39/0x60 [ 120.911644] down_trylock+0xe/0x70 [ 120.911671] __down_trylock_console_sem+0x3b/0xd0 [ 120.911701] vprintk_emit+0x16b/0x560 [ 120.911730] vprintk+0x84/0xa0 [ 120.911759] _printk+0xba/0xf1 [ 120.911778] report_bug.cold+0x72/0xab [ 120.911807] handle_bug+0x3c/0x70 [ 120.911837] exc_invalid_op+0x14/0x50 [ 120.911868] asm_exc_invalid_op+0x16/0x20 [ 120.911890] group_sched_out.part.0+0x2c7/0x460 [ 120.911922] ctx_sched_out+0x8f1/0xc10 [ 120.911952] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.911972] __schedule+0xedd/0x2470 [ 120.911997] schedule+0xda/0x1b0 [ 120.912021] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.912040] syscall_exit_to_user_mode+0x19/0x40 [ 120.912063] do_syscall_64+0x48/0x90 [ 120.912093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.912116] [ 120.912116] other info that might help us debug this: [ 120.912116] [ 120.912121] Chain exists of: [ 120.912121] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 120.912121] [ 120.912148] Possible unsafe locking scenario: [ 120.912148] [ 120.912152] CPU0 CPU1 [ 120.912156] ---- ---- [ 120.912160] lock(&ctx->lock); [ 120.912170] lock(&rq->__lock); [ 120.912181] lock(&ctx->lock); [ 120.912193] lock((console_sem).lock); [ 120.912203] [ 120.912203] *** DEADLOCK *** [ 120.912203] [ 120.912206] 2 locks held by syz-executor.6/3877: [ 120.912219] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 120.912273] #1: ffff88803ec3dc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.912321] [ 120.912321] stack backtrace: [ 120.912325] CPU: 1 PID: 3877 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 120.912348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.912362] Call Trace: [ 120.912367] [ 120.912374] dump_stack_lvl+0x8b/0xb3 [ 120.912407] check_noncircular+0x263/0x2e0 [ 120.912437] ? format_decode+0x26c/0xb50 [ 120.912465] ? print_circular_bug+0x450/0x450 [ 120.912496] ? simple_strtoul+0x30/0x30 [ 120.912525] ? perf_swevent_event+0x6c/0x550 [ 120.912556] ? format_decode+0x26c/0xb50 [ 120.912587] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 120.912619] __lock_acquire+0x2a02/0x5e70 [ 120.912659] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 120.912700] lock_acquire+0x1a2/0x530 [ 120.912730] ? down_trylock+0xe/0x70 [ 120.912762] ? lock_release+0x750/0x750 [ 120.912795] ? __lock_acquire+0x164d/0x5e70 [ 120.912829] ? vprintk+0x84/0xa0 [ 120.912862] _raw_spin_lock_irqsave+0x39/0x60 [ 120.912882] ? down_trylock+0xe/0x70 [ 120.912912] down_trylock+0xe/0x70 [ 120.912941] ? vprintk+0x84/0xa0 [ 120.912972] __down_trylock_console_sem+0x3b/0xd0 [ 120.913003] vprintk_emit+0x16b/0x560 [ 120.913038] vprintk+0x84/0xa0 [ 120.913092] _printk+0xba/0xf1 [ 120.913113] ? record_print_text.cold+0x16/0x16 [ 120.913142] ? report_bug.cold+0x66/0xab [ 120.913175] ? group_sched_out.part.0+0x2c7/0x460 [ 120.913209] report_bug.cold+0x72/0xab [ 120.913243] handle_bug+0x3c/0x70 [ 120.913275] exc_invalid_op+0x14/0x50 [ 120.913308] asm_exc_invalid_op+0x16/0x20 [ 120.913332] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.913368] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.913389] RSP: 0018:ffff88801d88fc48 EFLAGS: 00010006 [ 120.913405] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.913419] RDX: ffff88803edf8000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 120.913433] RBP: ffff88801f1205c8 R08: 0000000000000005 R09: 0000000000000001 [ 120.913446] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88803ec3dc00 [ 120.913460] R13: ffff88806cf3d2c0 R14: ffffffff8547d160 R15: 0000000000000002 [ 120.913480] ? group_sched_out.part.0+0x2c7/0x460 [ 120.913516] ? group_sched_out.part.0+0x2c7/0x460 [ 120.913553] ctx_sched_out+0x8f1/0xc10 [ 120.913588] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.913614] ? lock_is_held_type+0xd7/0x130 [ 120.913640] ? __perf_cgroup_move+0x160/0x160 [ 120.913659] ? set_next_entity+0x304/0x550 [ 120.913691] ? update_curr+0x267/0x740 [ 120.913725] ? lock_is_held_type+0xd7/0x130 [ 120.913751] __schedule+0xedd/0x2470 [ 120.913782] ? io_schedule_timeout+0x150/0x150 [ 120.913811] ? trace_rcu_dyntick+0x1a7/0x250 [ 120.913847] schedule+0xda/0x1b0 [ 120.913874] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.913897] syscall_exit_to_user_mode+0x19/0x40 [ 120.913921] do_syscall_64+0x48/0x90 [ 120.913954] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.913978] RIP: 0033:0x7feabcc82b19 [ 120.913993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.914013] RSP: 002b:00007feaba1f8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.914033] RAX: 0000000000000001 RBX: 00007feabcd95f68 RCX: 00007feabcc82b19 [ 120.914046] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feabcd95f6c [ 120.914059] RBP: 00007feabcd95f60 R08: 000000000000000e R09: 0000000000000000 [ 120.914072] R10: 0000000000000007 R11: 0000000000000246 R12: 00007feabcd95f6c [ 120.914086] R13: 00007fff5c3326df R14: 00007feaba1f8300 R15: 0000000000022000 [ 120.914109] [ 121.015071] WARNING: CPU: 1 PID: 3877 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.016290] Modules linked in: [ 121.016715] CPU: 1 PID: 3877 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220930 #1 [ 121.017773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.019223] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.019949] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.022295] RSP: 0018:ffff88801d88fc48 EFLAGS: 00010006 [ 121.022997] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.023922] RDX: ffff88803edf8000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 121.024852] RBP: ffff88801f1205c8 R08: 0000000000000005 R09: 0000000000000001 [ 121.025790] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88803ec3dc00 [ 121.026716] R13: ffff88806cf3d2c0 R14: ffffffff8547d160 R15: 0000000000000002 [ 121.027643] FS: 00007feaba1f8700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 121.028686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.029450] CR2: 00000000200047c0 CR3: 000000001864c000 CR4: 0000000000350ee0 [ 121.030376] Call Trace: [ 121.030716] [ 121.031026] ctx_sched_out+0x8f1/0xc10 [ 121.031566] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.032250] ? lock_is_held_type+0xd7/0x130 [ 121.032832] ? __perf_cgroup_move+0x160/0x160 [ 121.033434] ? set_next_entity+0x304/0x550 [ 121.034010] ? update_curr+0x267/0x740 [ 121.034577] ? lock_is_held_type+0xd7/0x130 [ 121.035156] __schedule+0xedd/0x2470 [ 121.035667] ? io_schedule_timeout+0x150/0x150 [ 121.036286] ? trace_rcu_dyntick+0x1a7/0x250 [ 121.036891] schedule+0xda/0x1b0 [ 121.037378] exit_to_user_mode_prepare+0x114/0x1a0 [ 121.038036] syscall_exit_to_user_mode+0x19/0x40 [ 121.038675] do_syscall_64+0x48/0x90 [ 121.039189] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.039870] RIP: 0033:0x7feabcc82b19 [ 121.040363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.042735] RSP: 002b:00007feaba1f8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.043731] RAX: 0000000000000001 RBX: 00007feabcd95f68 RCX: 00007feabcc82b19 [ 121.044670] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feabcd95f6c [ 121.045606] RBP: 00007feabcd95f60 R08: 000000000000000e R09: 0000000000000000 [ 121.046536] R10: 0000000000000007 R11: 0000000000000246 R12: 00007feabcd95f6c [ 121.047473] R13: 00007fff5c3326df R14: 00007feaba1f8300 R15: 0000000000022000 [ 121.048416] [ 121.048732] irq event stamp: 1222 [ 121.049199] hardirqs last enabled at (1221): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 121.050423] hardirqs last disabled at (1222): [] __schedule+0x1225/0x2470 [ 121.051519] softirqs last enabled at (600): [] fpu__clear_user_states+0xdb/0x1e0 [ 121.052700] softirqs last disabled at (598): [] fpu__clear_user_states+0x24/0x1e0 [ 121.053887] ---[ end trace 0000000000000000 ]--- 08:57:37 executing program 3: listen(0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/219, 0xdb) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000006240)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000008f00)=[{{&(0x7f00000014c0)={0x2, 0x0, @multicast2=0xe0000003}, 0x10, &(0x7f00000047c0)=[{&(0x7f0000001500)="a2df", 0x2}], 0x1, &(0x7f0000004840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev}}}], 0x20}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000063c0)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000000)=[{&(0x7f0000006440)="e4ff43ac8fbee7d4b553e80dd1008ce475bcaeca1a79e9f2fe7cfbfa502d824fcdef4494d53d579359fd348057c1becdc21ba78782aae422c65691606f90bd28b1796c6c", 0x44, 0xffffffff}, {&(0x7f0000006500)="adc7f1ba115062ddfa8e691f37fbda0e94f90a3d9fdfae198be9d4cf6fa2e722c3987fd6969691e372926a34c2837c001a4c7100e19da46be9baf70d93259e72ad24824326ff199e2ae86b8f0f", 0x4d, 0xff}, {&(0x7f0000006580)="09263b299744270676a4d369bbbcbb781b5780b87bb8906d9b3068bfe928126500470358f347cbb2cde9d6bc6ef3e5b732513fb703190266b669e92f9ce8ebab2557cc50213ebb4eb558c3c17a7e95461823440a11d8db05d39c433c5da083cd209e865e481017da256f33bf42aa1939aacabb8e022dc1b2458dcf56b625e4ce0fb429a5c312894a70", 0x89}], 0x202004, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6d6263616368652c736d61636b6673726f6f743d73797a32002c646f6e745f61707072616973652c66756e633d4b455845435f494e495452414d46535f434845434b2c66736e616d653d2c66756e633d46494c455f4d4d41502c6f626a5f757365722d69705f76746930002c00079b76fb11ed93b5421a948fd34302bc70aa4b62cb2fa8b396baffb79f0521a16d340093abdfd34e0d1d49a01100ba35db3a1fc87af2162d9a5efbdd9977ae7dbcc99000"/189, @ANYRESDEC=r2]) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000094c0)={&(0x7f0000009400), 0xc, &(0x7f0000009480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 121.144099] loop3: detected capacity change from 0 to 264192 [ 121.160341] loop3: detected capacity change from 0 to 264192 08:57:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000008f00)=[{{&(0x7f00000014c0)={0x2, 0x0, @multicast2=0xe0000003}, 0x10, &(0x7f00000047c0)=[{&(0x7f0000000100)="a2df", 0x2}], 0x1, &(0x7f0000004840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev}}}], 0x20}}], 0x1, 0x4044005) close_range(r1, r2, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r5, 0x0) dup3(r6, r6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:57:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:57:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000008f00)=[{{&(0x7f00000014c0)={0x2, 0x0, @multicast2=0xe0000003}, 0x10, &(0x7f00000047c0)=[{&(0x7f0000000100)="a2df", 0x2}], 0x1, &(0x7f0000004840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev}}}], 0x20}}], 0x1, 0x4044005) close_range(r1, r2, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r5, 0x0) dup3(r6, r6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) VM DIAGNOSIS: 08:57:37 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000002 RCX=0000000000000000 RDX=0000000000000001 RSI=ffffffff840e366d RDI=ffffffff84e03d21 RBP=ffff88803e1ffae8 RSP=ffff88803e1ff918 R8 =0000000000000006 R9 =00007fe14a182000 R10=ffffffffffffffff R11=0000000000000001 R12=0000000000000002 R13=ffffffffffffffff R14=ffff88803dbd2e00 R15=00007fe14a182000 RIP=ffffffff840e36a9 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6d100f16f4 CR3=000000003f040000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000007b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88801d88f690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000007b R11=0000000000000001 R12=000000000000007b R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007feaba1f8700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200047c0 CR3=000000001864c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000