Warning: Permanently added '[localhost]:37887' (ECDSA) to the list of known hosts. 2022/09/24 19:27:05 fuzzer started 2022/09/24 19:27:05 dialing manager at localhost:38881 syzkaller login: [ 37.734435] cgroup: Unknown subsys name 'net' [ 37.836502] cgroup: Unknown subsys name 'rlimit' 2022/09/24 19:27:20 syscalls: 2215 2022/09/24 19:27:20 code coverage: enabled 2022/09/24 19:27:20 comparison tracing: enabled 2022/09/24 19:27:20 extra coverage: enabled 2022/09/24 19:27:20 setuid sandbox: enabled 2022/09/24 19:27:20 namespace sandbox: enabled 2022/09/24 19:27:20 Android sandbox: enabled 2022/09/24 19:27:20 fault injection: enabled 2022/09/24 19:27:20 leak checking: enabled 2022/09/24 19:27:20 net packet injection: enabled 2022/09/24 19:27:20 net device setup: enabled 2022/09/24 19:27:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/24 19:27:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/24 19:27:20 USB emulation: enabled 2022/09/24 19:27:20 hci packet injection: enabled 2022/09/24 19:27:20 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/24 19:27:20 802.15.4 emulation: enabled 2022/09/24 19:27:20 fetching corpus: 50, signal 30102/31828 (executing program) 2022/09/24 19:27:20 fetching corpus: 100, signal 41719/45013 (executing program) 2022/09/24 19:27:21 fetching corpus: 150, signal 48217/53006 (executing program) 2022/09/24 19:27:21 fetching corpus: 200, signal 53032/59264 (executing program) 2022/09/24 19:27:21 fetching corpus: 250, signal 59448/67018 (executing program) 2022/09/24 19:27:21 fetching corpus: 300, signal 66422/75122 (executing program) 2022/09/24 19:27:21 fetching corpus: 350, signal 69860/79860 (executing program) 2022/09/24 19:27:21 fetching corpus: 400, signal 73011/84227 (executing program) 2022/09/24 19:27:21 fetching corpus: 450, signal 76613/88991 (executing program) 2022/09/24 19:27:21 fetching corpus: 500, signal 79913/93388 (executing program) 2022/09/24 19:27:22 fetching corpus: 550, signal 83166/97714 (executing program) 2022/09/24 19:27:22 fetching corpus: 600, signal 86281/101849 (executing program) 2022/09/24 19:27:22 fetching corpus: 650, signal 90384/106828 (executing program) 2022/09/24 19:27:22 fetching corpus: 700, signal 92201/109715 (executing program) 2022/09/24 19:27:22 fetching corpus: 750, signal 94984/113483 (executing program) 2022/09/24 19:27:22 fetching corpus: 800, signal 96661/116171 (executing program) 2022/09/24 19:27:22 fetching corpus: 850, signal 98836/119289 (executing program) 2022/09/24 19:27:22 fetching corpus: 900, signal 101478/122789 (executing program) 2022/09/24 19:27:22 fetching corpus: 950, signal 103376/125586 (executing program) 2022/09/24 19:27:23 fetching corpus: 1000, signal 105606/128639 (executing program) 2022/09/24 19:27:23 fetching corpus: 1050, signal 107659/131474 (executing program) 2022/09/24 19:27:23 fetching corpus: 1100, signal 109941/134486 (executing program) 2022/09/24 19:27:23 fetching corpus: 1150, signal 111623/136965 (executing program) 2022/09/24 19:27:23 fetching corpus: 1200, signal 113377/139475 (executing program) 2022/09/24 19:27:23 fetching corpus: 1250, signal 115037/141871 (executing program) 2022/09/24 19:27:23 fetching corpus: 1300, signal 116326/143969 (executing program) 2022/09/24 19:27:23 fetching corpus: 1350, signal 117677/146123 (executing program) 2022/09/24 19:27:24 fetching corpus: 1400, signal 118523/147782 (executing program) 2022/09/24 19:27:24 fetching corpus: 1450, signal 121590/151165 (executing program) 2022/09/24 19:27:24 fetching corpus: 1500, signal 123118/153306 (executing program) 2022/09/24 19:27:24 fetching corpus: 1550, signal 124898/155643 (executing program) 2022/09/24 19:27:24 fetching corpus: 1600, signal 126362/157746 (executing program) 2022/09/24 19:27:24 fetching corpus: 1650, signal 128171/160053 (executing program) 2022/09/24 19:27:24 fetching corpus: 1700, signal 128815/161471 (executing program) 2022/09/24 19:27:24 fetching corpus: 1750, signal 131139/164066 (executing program) 2022/09/24 19:27:24 fetching corpus: 1800, signal 132662/166097 (executing program) 2022/09/24 19:27:25 fetching corpus: 1850, signal 133489/167633 (executing program) 2022/09/24 19:27:25 fetching corpus: 1900, signal 134569/169311 (executing program) 2022/09/24 19:27:25 fetching corpus: 1950, signal 135563/170922 (executing program) 2022/09/24 19:27:25 fetching corpus: 2000, signal 136338/172304 (executing program) 2022/09/24 19:27:25 fetching corpus: 2050, signal 136927/173626 (executing program) 2022/09/24 19:27:25 fetching corpus: 2100, signal 138602/175566 (executing program) 2022/09/24 19:27:25 fetching corpus: 2150, signal 139549/177074 (executing program) 2022/09/24 19:27:25 fetching corpus: 2200, signal 140644/178634 (executing program) 2022/09/24 19:27:25 fetching corpus: 2250, signal 141391/179986 (executing program) 2022/09/24 19:27:25 fetching corpus: 2300, signal 143062/181872 (executing program) 2022/09/24 19:27:26 fetching corpus: 2350, signal 143959/183262 (executing program) 2022/09/24 19:27:26 fetching corpus: 2400, signal 144622/184533 (executing program) 2022/09/24 19:27:26 fetching corpus: 2450, signal 145825/186109 (executing program) 2022/09/24 19:27:26 fetching corpus: 2500, signal 147060/187706 (executing program) 2022/09/24 19:27:26 fetching corpus: 2550, signal 147979/189076 (executing program) 2022/09/24 19:27:26 fetching corpus: 2600, signal 149621/190802 (executing program) 2022/09/24 19:27:26 fetching corpus: 2650, signal 150627/192154 (executing program) 2022/09/24 19:27:26 fetching corpus: 2700, signal 151278/193286 (executing program) 2022/09/24 19:27:26 fetching corpus: 2750, signal 152195/194556 (executing program) 2022/09/24 19:27:27 fetching corpus: 2800, signal 153796/196188 (executing program) 2022/09/24 19:27:27 fetching corpus: 2850, signal 155512/197876 (executing program) 2022/09/24 19:27:27 fetching corpus: 2900, signal 156020/198872 (executing program) 2022/09/24 19:27:27 fetching corpus: 2950, signal 157552/200408 (executing program) 2022/09/24 19:27:27 fetching corpus: 3000, signal 158601/201637 (executing program) 2022/09/24 19:27:27 fetching corpus: 3050, signal 159788/203001 (executing program) 2022/09/24 19:27:27 fetching corpus: 3100, signal 160626/204144 (executing program) 2022/09/24 19:27:27 fetching corpus: 3150, signal 161590/205366 (executing program) 2022/09/24 19:27:27 fetching corpus: 3200, signal 163371/206932 (executing program) 2022/09/24 19:27:28 fetching corpus: 3250, signal 164524/208150 (executing program) 2022/09/24 19:27:28 fetching corpus: 3300, signal 165274/209188 (executing program) 2022/09/24 19:27:28 fetching corpus: 3350, signal 166757/210562 (executing program) 2022/09/24 19:27:28 fetching corpus: 3400, signal 167568/211544 (executing program) 2022/09/24 19:27:28 fetching corpus: 3450, signal 168448/212542 (executing program) 2022/09/24 19:27:28 fetching corpus: 3500, signal 169064/213388 (executing program) 2022/09/24 19:27:28 fetching corpus: 3550, signal 170423/214568 (executing program) 2022/09/24 19:27:29 fetching corpus: 3600, signal 172069/215903 (executing program) 2022/09/24 19:27:29 fetching corpus: 3650, signal 173705/217206 (executing program) 2022/09/24 19:27:29 fetching corpus: 3700, signal 174684/218198 (executing program) 2022/09/24 19:27:29 fetching corpus: 3750, signal 175791/219213 (executing program) 2022/09/24 19:27:29 fetching corpus: 3800, signal 176417/220005 (executing program) 2022/09/24 19:27:29 fetching corpus: 3850, signal 177288/220852 (executing program) 2022/09/24 19:27:29 fetching corpus: 3900, signal 177723/221602 (executing program) 2022/09/24 19:27:29 fetching corpus: 3950, signal 178461/222419 (executing program) 2022/09/24 19:27:29 fetching corpus: 4000, signal 179255/223234 (executing program) 2022/09/24 19:27:30 fetching corpus: 4050, signal 179905/224006 (executing program) 2022/09/24 19:27:30 fetching corpus: 4100, signal 181263/225010 (executing program) 2022/09/24 19:27:30 fetching corpus: 4150, signal 181989/225836 (executing program) 2022/09/24 19:27:30 fetching corpus: 4200, signal 182776/226666 (executing program) 2022/09/24 19:27:30 fetching corpus: 4250, signal 183347/227362 (executing program) 2022/09/24 19:27:30 fetching corpus: 4300, signal 184667/228246 (executing program) 2022/09/24 19:27:30 fetching corpus: 4350, signal 185370/228961 (executing program) 2022/09/24 19:27:31 fetching corpus: 4400, signal 187188/230258 (executing program) 2022/09/24 19:27:31 fetching corpus: 4450, signal 188003/230947 (executing program) 2022/09/24 19:27:31 fetching corpus: 4500, signal 188596/231618 (executing program) 2022/09/24 19:27:31 fetching corpus: 4550, signal 189102/232235 (executing program) 2022/09/24 19:27:31 fetching corpus: 4600, signal 189490/232785 (executing program) 2022/09/24 19:27:31 fetching corpus: 4650, signal 190877/233588 (executing program) 2022/09/24 19:27:31 fetching corpus: 4700, signal 191564/234220 (executing program) 2022/09/24 19:27:31 fetching corpus: 4750, signal 193156/235045 (executing program) 2022/09/24 19:27:32 fetching corpus: 4800, signal 193824/235617 (executing program) 2022/09/24 19:27:32 fetching corpus: 4850, signal 194260/236179 (executing program) 2022/09/24 19:27:32 fetching corpus: 4900, signal 194578/236699 (executing program) 2022/09/24 19:27:32 fetching corpus: 4950, signal 195103/237208 (executing program) 2022/09/24 19:27:32 fetching corpus: 5000, signal 196237/237900 (executing program) 2022/09/24 19:27:32 fetching corpus: 5050, signal 196750/238435 (executing program) 2022/09/24 19:27:32 fetching corpus: 5100, signal 197582/238999 (executing program) 2022/09/24 19:27:32 fetching corpus: 5150, signal 198814/239618 (executing program) 2022/09/24 19:27:33 fetching corpus: 5200, signal 199716/240139 (executing program) 2022/09/24 19:27:33 fetching corpus: 5250, signal 200983/240754 (executing program) 2022/09/24 19:27:33 fetching corpus: 5300, signal 201386/241177 (executing program) 2022/09/24 19:27:33 fetching corpus: 5350, signal 201824/241596 (executing program) 2022/09/24 19:27:33 fetching corpus: 5400, signal 202623/242074 (executing program) 2022/09/24 19:27:33 fetching corpus: 5450, signal 203141/242494 (executing program) 2022/09/24 19:27:33 fetching corpus: 5500, signal 203481/242887 (executing program) 2022/09/24 19:27:34 fetching corpus: 5550, signal 204173/243335 (executing program) 2022/09/24 19:27:34 fetching corpus: 5600, signal 204682/243729 (executing program) 2022/09/24 19:27:34 fetching corpus: 5650, signal 205069/244110 (executing program) 2022/09/24 19:27:34 fetching corpus: 5700, signal 205735/244568 (executing program) 2022/09/24 19:27:34 fetching corpus: 5750, signal 206304/244941 (executing program) 2022/09/24 19:27:34 fetching corpus: 5800, signal 206892/245346 (executing program) 2022/09/24 19:27:34 fetching corpus: 5850, signal 207755/245722 (executing program) 2022/09/24 19:27:34 fetching corpus: 5900, signal 208204/246058 (executing program) 2022/09/24 19:27:35 fetching corpus: 5950, signal 208910/246370 (executing program) 2022/09/24 19:27:35 fetching corpus: 6000, signal 209422/246693 (executing program) 2022/09/24 19:27:35 fetching corpus: 6050, signal 209928/247003 (executing program) 2022/09/24 19:27:35 fetching corpus: 6100, signal 210555/247232 (executing program) 2022/09/24 19:27:35 fetching corpus: 6150, signal 211061/247237 (executing program) 2022/09/24 19:27:35 fetching corpus: 6200, signal 211728/247237 (executing program) 2022/09/24 19:27:35 fetching corpus: 6250, signal 212234/247248 (executing program) 2022/09/24 19:27:35 fetching corpus: 6300, signal 212948/247253 (executing program) 2022/09/24 19:27:35 fetching corpus: 6350, signal 213465/247255 (executing program) 2022/09/24 19:27:36 fetching corpus: 6400, signal 213925/247263 (executing program) 2022/09/24 19:27:36 fetching corpus: 6450, signal 214518/247338 (executing program) 2022/09/24 19:27:36 fetching corpus: 6500, signal 214768/247345 (executing program) 2022/09/24 19:27:36 fetching corpus: 6514, signal 215078/247379 (executing program) 2022/09/24 19:27:36 fetching corpus: 6514, signal 215078/247379 (executing program) 2022/09/24 19:27:38 starting 8 fuzzer processes 19:27:38 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x14000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0x880) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x198f, 0x40}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x70}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x10010) r3 = pidfd_getfd(r2, r2, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r1, 0x20, 0x1, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x1b}, {0x12}, {0x2}, {0xc, 0x1}, {0x9}, {0x6c, 0x1}, {0x1b, 0x1}, {0x12}, {0x36}, {0xb}, {0x36, 0x1}, {0x30, 0x1}, {0x9, 0x1}, {0x1}, {0x9, 0x1}, {0x5}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0xffffffff}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x7}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x3}, {0x12}, {0xb}, {0x16}, {0x30}, {0x3, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x12}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r4, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000007c0)=@generic={0x2, 0x0, 0x401}) r6 = accept$inet(r3, &(0x7f0000000800)={0x2, 0x0, @empty}, &(0x7f0000000840)=0x10) ioctl$int_out(r6, 0x2, &(0x7f0000000880)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r9 = syz_open_dev$mouse(&(0x7f0000000a40), 0x100, 0x84201) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x13, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 19:27:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x46c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe6cc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff271}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1a4b4e58}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x56}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6ed}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfddf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4efd, @private1={0xfc, 0x1, '\x00', 0x1}, 0xdbf}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x246}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x1) r1 = openat$cgroup(r0, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x501000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000680)={r2, r0, 0x7}) r3 = syz_open_dev$vcsa(&(0x7f00000006c0), 0xffffffffffffffff, 0x400) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x40, 0x100, 0x3}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000700)='syz0\x00', &(0x7f0000000740)='./file0\x00', r4) r5 = syz_open_dev$vcsu(&(0x7f0000000800), 0x4, 0xc0) statx(r5, &(0x7f0000000840)='./file0\x00', 0x0, 0x1, &(0x7f0000000880)) r6 = memfd_secret(0xda0b8c68c7056b43) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000980)=0x1) accept$unix(r2, &(0x7f00000009c0)=@abs, &(0x7f0000000a40)=0x6e) fchmodat(r2, &(0x7f0000000a80)='./file0\x00', 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x48}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000c00), 0x4000, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x5) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000c40)) 19:27:38 executing program 2: rmdir(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x10001}}, {@cache_fscache}, {@fscache}], [{@euid_lt={'euid<', r1}}, {@fowner_gt={'fowner>', 0xee01}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, ',#M\\\\'}}]}}) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0xff, 0x401}, {0x0, 0x2}], r1}, 0x18, 0x1) r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x70200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) fchownat(r3, &(0x7f0000000300)='./file0\x00', r5, r2, 0x1000) syncfs(r3) r6 = syz_open_dev$vcsa(&(0x7f0000000480), 0x9, 0x202) getdents64(r6, &(0x7f00000004c0)=""/216, 0xd8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@known='system.posix_acl_default\x00', &(0x7f0000000740)='9p\x00', 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000780)) r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x80, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000840)={0x200, 0x122, 0x13}, 0x18) setxattr$security_capability(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900)=@v1={0x1000000, [{0x10000, 0x3}]}, 0xc, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x90, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x413}, {0x6, 0x16, 0x369f}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40050}, 0x1c0) close_range(r7, r7, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x100) rmdir(&(0x7f0000000b00)='./file0/file0\x00') 19:27:38 executing program 3: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x1) fallocate(0xffffffffffffffff, 0x6a, 0x6, 0x800) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) r3 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r6 = io_uring_setup(0x25dc, &(0x7f00000004c0)={0x0, 0x994e, 0x1, 0x1, 0x2d9, 0x0, r0}) utimensat(r3, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{}, {0x77359400}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f00000005c0)={0x0, @adiantum, 0x0, @desc4}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000600)={0x1, 0x6, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @broadcast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote]}) fcntl$setstatus(r3, 0x4, 0x4400) fcntl$setflags(r3, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000640)="fded8483c5645c73acf219332ae6a981c07ea8f8520d764bb4d2f6c03eea2bdb37c2cd8cb8f73af9298aa80cd104efbb8e6c06ccf67a3e504eaa747f", 0x3c, r3}, 0x68) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r7, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000840), 0x80000) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000880)=0x1) 19:27:38 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0}, &(0x7f0000001480)=0xc) ptrace(0x8, r0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f00000014c0), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001540)=""/93, 0x5d}, {&(0x7f00000015c0)=""/190, 0xbe}, {&(0x7f0000001680)=""/73, 0x49}, {&(0x7f0000001700)=""/147, 0x93}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/107, 0x6b}], 0x6, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001a00)=""/10, 0xa}], 0x1, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001bc0)=""/114, 0x72}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/169, 0xa9}], 0x3, &(0x7f0000002d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000002f00), 0x0, &(0x7f0000002f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002fc0), 0x6e, &(0x7f0000003280)=[{&(0x7f0000003040)=""/121, 0x79}, {&(0x7f00000030c0)=""/77, 0x4d}, {&(0x7f0000003140)=""/134, 0x86}, {&(0x7f0000003200)=""/92, 0x5c}], 0x4, &(0x7f00000032c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}}, {{&(0x7f0000003300)=@abs, 0x6e, &(0x7f0000003880)=[{&(0x7f0000003380)=""/144, 0x90}, {&(0x7f0000003440)=""/225, 0xe1}, {&(0x7f0000003540)=""/194, 0xc2}, {&(0x7f0000003640)=""/113, 0x71}, {&(0x7f00000036c0)=""/86, 0x56}, {&(0x7f0000003740)=""/27, 0x1b}, {&(0x7f0000003780)=""/104, 0x68}, {&(0x7f0000003800)=""/106, 0x6a}], 0x8, &(0x7f0000003900)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000003a00)}}], 0x7, 0x2040, &(0x7f0000003c00)) ptrace$setopts(0x4200, r7, 0xfffffffffffffffc, 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003c40)=0x0) ptrace(0x4207, r9) pwritev(r8, &(0x7f0000003d80)=[{&(0x7f0000003c80)="26552f61d925f08ac176a061a039bed7ba4f4a1de043e50715141fcf89744ddcc624bf04190ee473b90bc94007b35b3ab1cec5832395e5d2e45c1af3645fd21e9982e2564cfdce5de10df48e8ec57e465fea9d15a9d5ec4b5027585330492583c0d6bd56e0d1a40041a00c8a683c71f7cc232ee01648f3355ec190da95d87a4ebfbbf1f86bb810", 0x87}, {&(0x7f0000003d40)="943d711ad965b27fd24887fb32103c22d7bd94f479ed3eb4ab068cbf0a546434aab2e7b08deb0f077093bde243f9cde694becf0eaeabbb2d04c4386d7b8609b9", 0x40}], 0x2, 0x100, 0x3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000003dc0)={0x0}, &(0x7f0000003e00)=0xc) ptrace$setopts(0x4200, r10, 0x6, 0x100024) bind$inet6(r3, &(0x7f0000003e40)={0xa, 0x4e23, 0xa6550e5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd0}, 0x1c) fcntl$getownex(r8, 0x10, &(0x7f0000003e80)) r11 = perf_event_open(&(0x7f0000003ec0)={0x4, 0x80, 0x1f, 0x8d, 0x8, 0x1f, 0x0, 0xb3, 0x20800, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8f, 0x0, @perf_config_ext={0xb6, 0x80000000}, 0xc3e2c9d8cdb50b89, 0x1, 0xffffffff, 0x4, 0x8, 0x0, 0x4, 0x0, 0xd89c, 0x0, 0x1}, r7, 0xe, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000003f40)={0x0, r11, 0x7, 0x400, 0x1ff, 0xfb}) r12 = getpgid(r1) recvmmsg$unix(r4, &(0x7f00000060c0)=[{{&(0x7f0000004040), 0x6e, &(0x7f0000004240)=[{&(0x7f00000040c0)=""/33, 0x21}, {&(0x7f0000004100)=""/30, 0x1e}, {&(0x7f0000004140)=""/141, 0x8d}, {&(0x7f0000004200)=""/1, 0x1}], 0x4, &(0x7f0000004280)}}, {{&(0x7f00000042c0), 0x6e, &(0x7f0000004400)=[{&(0x7f0000004340)=""/68, 0x44}, {&(0x7f00000043c0)=""/13, 0xd}], 0x2, &(0x7f0000004440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000004500)=@abs, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004580)=""/142, 0x8e}], 0x1, &(0x7f0000004680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000046c0)=@abs, 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004740)=""/146, 0x92}, {&(0x7f0000004800)=""/229, 0xe5}, {&(0x7f0000004900)}, {&(0x7f0000004940)=""/227, 0xe3}], 0x4, &(0x7f0000004a80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/123, 0x7b}, {&(0x7f0000005bc0)=""/118, 0x76}, {&(0x7f0000005c40)=""/244, 0xf4}, {&(0x7f0000005d40)=""/175, 0xaf}, {&(0x7f0000005e00)=""/159, 0x9f}, {&(0x7f0000005ec0)=""/148, 0x94}], 0x7, &(0x7f0000006000)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}], 0x5, 0x13002, &(0x7f0000006200)={0x77359400}) perf_event_open(&(0x7f0000003fc0)={0x4, 0x80, 0x6, 0x5, 0x7, 0x3, 0x0, 0x7f, 0xe602, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000003f80)}, 0x41, 0xb71, 0x3, 0x6, 0x34, 0x20, 0x401, 0x0, 0x4207, 0x0, 0x4b25}, r12, 0xc, r13, 0xa) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000006240), 0x80000, 0x0) openat(r15, &(0x7f0000006280)='./file0\x00', 0x1000, 0x2b) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006300), r14) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000006480)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006440)={&(0x7f0000006380)={0xbc, r16, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4c1}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0xc080) [ 70.402849] audit: type=1400 audit(1664047658.751:6): avc: denied { execmem } for pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:27:38 executing program 6: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="8208747db540f4becc49dce34e44ccf12bd3511242738cb913b2d4a1b09027fc3c589a997a7286884a69da00299a3dca5581a56f9df7fc942ffbd4fe86edaf91c84e1b6b75308f901871bf8b0fb852f59c93c380ed35fe5ea27930ea849501df1785e6fadc5e269c44525f0ba28d391a2425644ba7c3764bcadc91fb735dcc34bf9bf87b264df8a5974e0dbf49ce3b29f2c8eb1af98850f3727aa358b323b40fc8616b81393518029baf60b2fe6c2ae5469ffc60fc1a9eb0f67431a351cefb5100adbb8cc0c3992eca7b82546f0e13a5df32ba330fcfac9cd600147db4264bf1a6a215c4b45b4f856f803fe87de86b", 0xef, 0x400, 0x0) clock_getres(0x0, &(0x7f0000000100)) clock_getres(0x5, &(0x7f0000000140)) clock_getres(0x1, &(0x7f0000000180)) clock_getres(0x5, &(0x7f00000001c0)) clock_getres(0xd, &(0x7f0000000200)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000240)="20a68ee16d4f07bebca5411603aeb51829383494599bba587b", 0x19, 0xff, &(0x7f0000000280)={0x0, 0x989680}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00') splice(0xffffffffffffffff, &(0x7f00000002c0)=0x6, r0, &(0x7f0000000380)=0x7, 0x1ff, 0x2) clock_getres(0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) futex(&(0x7f0000000400)=0x2, 0x80, 0x0, &(0x7f0000000480)={r1, r2+60000000}, &(0x7f00000004c0)=0x1, 0x1) r3 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000500)="d259879d1d731645c73e0771fe55e20ba49d656bb0f951e7fd41e646c95ec6ad16b61630489d19cd9c8fc4aeacbccb128e2633d3fe3e52e9ee7b880323a4d871aae4e1e7f245bfa9a8e538f92474400601fae978e62997ff1e8b1cecf8d15f6e6c1389289f6b427be6d7cd2c3f1c7f7a87fcd03a713a7cfa41d300ce514ae43faf14dc12bc319165fd892230ceeb54d7fd6128cfaa29b7ae24052ca5b665d205d81710eb2b308b86805e6fe3d106ac147cb82bf17cd3545e2e29541837a15ee65c02e3fd839aac0dc8e09ba42fb0125ffd6dc03bc2753a66913fe0a12c67143c3f15d8319f04594b94c1d3db428de905cda7b5555f336762431c2e26e342aa209fab7f207691def7778c86ecc13b2e4ff991f5801843c10eea5e8c143148231d3496655086a981a2db6fbb899f7c817abddf1781b282d331cf383e2460ab28f5f7d4c52f34fa58f09ae4f0b9a77472d4c3ab919c73b30858d87360ba4d948254ace02da4acf6f8439cf48b3069adf8aa5f12b69fed54c7910155570c14bd04eb3bf5f20ed7aed899c1f753dfbe59df176ee8f4b974fdf63e8a34aa61bbe0f0b2006bf704b3a49a158acd450a0c3ddd1a24721fb70cefa2e08ffdeb0930630ac4855b8ab10b9c79e2409b795bd6f447a0fd60b19915acd3e1a1217b56fdabbdf180589a34b27cdb73495a13f72f644d0079d82ec64a9acca408a3f029f62f0e65d8238a0d3637d9474d8053a5ea8dd45782f7be7cd687c58f9746bdb01271a8d2c11ae7f58bef44e87ecdfee4701b919c62a2b67d74d3dfa0fb85c7c5dda36a11aa2c436f8aee28ab0d9610de414730af4fb4feaf4ab5271a9af6aab88b2a39452d4b48ae108af9d096dfe55f10309f26f1114bdd9dfdddf584823b558f305a0f617543fe3c06216420c50304c8dfcf92116fc8f14c2a98c61549fb768497ca8afb50cfe7fe34a79e23c22ecfd5fce6f1ace9e3de2d4aa4b9a1a6b93edc6bab4a2dae9bbf234e6b88b75c2a2b25b0dd91c15595fbeb8797bab6416acba6ba33f7b5d9726dcaa712d06ac45149415182ba52a928455d692b007976ffc95c016a26188ac35af6d6214c027787c230a3438b1d041506e18a960871a1988b474974315966f5411782948d6f33ebed6024d0a63f8155a96bc556d6275e6e2a4b8558d0b13ad45581cd1f7461cf600952c7a938b95f81a3a2f2506bc83cbdf421ec67cf5bcfd4744129ad9ea620e26bf3b97a32d622cb60f2d299e42e23f316a7334ed3bd5761d2871f9fb964400bdad111ab18ee78f7f6811038f19d5fea64b0f1d5c667d79efdeca41a32ab0503a2ebf76c8e358dec439b078c7f12847d7b63575092d2da8e90d4268e41ae2dd723ebd5160a5de44e8814ebe06cde0f683ee82a9b1886b4646daac42059b10a21292486d1a2dfaa92e76bc0e59d0515250d2a310382264aaddceaf87fb5cdbe810c073a1b8e983742d04999b6b04aee81b7253a67c8e6a7b520a35a6dd6a4ebfd6e7f8ee971910aff0beeea6436afeb89e8981e1651fedab6082647399f313a559d8f9985d2a9df001ff04e72271852f95738602d815c436db8da7c399eec1be2a781f643eac71a4babfb07b845e564d0f5dc9c8c3c4cbe18564f37ba17b12d08643239d0b07673d4d6a567bf9b3e2b06e97e3c22554432e781e4a9bc4688ad3e2babe0a1257b6586e9b213bfb52855bd8ecc243c99d97d3bfdce95d7235ff7e48dac037e42a31eb82b8db21b13c3e982665346e4777fa1e38b8f354f0131e213301eb7bdad874fa6b097428a35a2ac81a5c0ef10cdf2af91911b135f096033e4fa091023b06c0a28db278fb2205b87fd5d77b384493d34f7661fb4226e0c7419a66702cc291e7ba3a1a73b1524180eb6a429b3859e4a0478cab201bbcefa0135ca391ad968fa272014715147b3163104b19ff9bf9e5c6d3af7f5119a749f9f1429fa7ceb4b86714a4e437084aa4085a729f1f5279c50bc5b632e90942878d051301aad42ccbea268841ca50ee2751f5853e98b0a81ea4bc956a3c5dc216b9f3558b02774dbb5c6d58a743515848245a25f1712affcf450dac81260b165d50bc1b148475612bca4dd2ecf67790646520e8cc1fad63b9a05f0404b2d6b8053cfc35477fe5ed3f07697649bc727ec601c46c422f47e2484264c9255b275363aa54f6c9c2c7d455adff32d98a792728edeaf48525aa3f58afb9afd01b5d0604d33abe8338ebee22d8bbd0b51ff21007d75b301d1031b53de83e94d65c894c62f3938db2afa556548ddebe38b989ec0e3200f5ffc3d9dffb3a7030b0df0061572973d0cebbb8858d59f3d8490abc1e562205739636245d2f23c91eda9b14729953ef427b8db67b9a750c74a4d92c6441301b9ea4f30fe41a774aa8ecb56453f1ccabde7ec6f5db361ea6ab9a415edf47364f66eb9dda9d01f237eb006aed4029f64ed24565bfc761640fbd6cfcba596caa5009e4dd483a3d1d5fb2d658a7f2a334fb741c691aa4dae6fdb96a70ac9aaac59b841909a54a305d8f87c0e570db09a9f47f2a4c319f98a0b0fffa514679e8cf8331c90d8c657c396dcc1c370cbf269736c5b4bd19d4713422727b01dc89349d099fe2f17063e8310174c41a10053e291a5d2b98eb1a3a285338090f0fe3673b0def9cb3ac74714da6e07f6eaa2fff4c81a18701fed0a09db832b9abf11629c6ff5b5bf7004c68ccd055c39b21ace597cc7bf3b308c644d96dd3929bed65f384ce21dda3d79b1bd201b794b0961c04548ccf3042899f968c7881cdf12095b70217c5ce1ab0dba219be15fca3f8a8d94878df1eaa5282f426972c2218b591487478ede1a7df84d3372a3296664f41e671cd61b4c8fa14146395917d3736cf54a8ca2a0ccd013949878c67f5b832b3449e1b2696905760a69db626db123db90f53dff5f0554bf0e4964d42260577a3caa4da97b63e7eb83fca0c4ac293c76114578002d55220c374d038272541b9d1c630d2411fd8eeaf6b51a75b214698e616f2955c8c737b235c9ee178933052638dcc31d7a2649802227070806af895c30dda4106d7313147805a3d884e06b1f5f95475828437d52325249d8575c5ab397430d7e98c257836be737e34201bd85059870280c1830a2c28ea903a612eaca45e154a8c830a2284ca16cd3950ce6287bf3ad2e68186903e3595e20720b8c24edadecc1f1532f771b6bd3571b7368b4ee527c6e46b98137a09efbbdf1bb2da907202106254b4bd048b5f0c7256d18b389bf07748e102a84747f03316b9549789e9940506c4713d6962de78c691b85267bf4e36155ba02cbd64e443aa4ee05ee45e1abebf650e68bbc59f7ce2a36a867aa60fcb9c6bfff6fbba628992a7c1dc64a761b4fb5ac5231f0cead96830a21192900b61bfa8be0303c41d9eebd9e9aa4b2310fdfae52eca043b803c9cb767a7cc6a449ff5b3e105b27bb2ccb88a2a9ff692f2f46873f49bbd64369961af95cad9629e9df372774fa25f01bb77332fff4f9b67669f347df78b79dfcb0fa91b4e9be0dfb6d18e71ead312824976e551e48c5eae862edd91d3090b05fbb5925255a7e6975abfd21e093c5b2490d81d94ac8ed3b359949833332f4c0b97509fa1deeee50ec150b4ee44439103e0da738777423ab3c64553a1de4a6106162fcaa20d60d2627323a1170421800a0a9adf5749aaec383c17cd2b24ffe48f16ea108e2245662b8c63786f128d1f6b20fa19ea29db236039d8697d29408336da8f5aea8520f2c2985b8bb235d9acb311b48a7e6b20e660016214e4aef79a115fc4e1519d74effda8b43963d709ce47daff208ed8cc13ea477557e4b48a82b3d9e20a440c66276544144152a4070f1b81caa8387be1cc07eb1a76ed9a9c41408a4ea795938d1bcd3f1903dc8029fbea5035f84eee5c7621e69e12cfc97b3d501a978d9747dde0d4211a66b2b4f82d989b617b4d8bd9e8ce80e6e54a44b7bfc958b0e3f5f4f615d6442b17a26f6c19dc46087f3c462cf43f8b446ae7631e5a5e3d41a8e60f267d0d9a47dbf3e013e0530d36e88cf0d83f9e718856a898caeeb57bb1d16aa63ed2a31c97bfd0953eef905e22aceb2ea447768dd11825639ddc2bed77dba512c5db9ab92adb01c47130b65d83d3e2747eb507c95cccb91b98b82589a36cecd62a6f1c855d12319213dbedbbaea54035eb9f9ebd0db2a21fac994b2a7e69b7098edbdf86b3755ed07efd1c5681b3e6a8a3d7ec50aee97471a0e1e873c26cc9cb1bfd3dc793c879f16eb9d03c543851d0b69e09c81437ddd0bbaa388717ada00b48910627aa8f2872452e0a08a4b22d8ddad0e53ca51ef270293eb6fa4af74616fe6886c1f35e24eca3b96b409be0e345806d8c7578991f2dd93bd4ebef13bdd836fcbb1109c645ba859093d512938d725dd5033c77e9aefceb29dc08af894e34e77f9a5e53a66fe4e3ef7f9d99567de979f22c37b4daf30fe13a76e0edd47bca03b308c742bf6c78f491ccf650ff42e74d79a1e00cccb94c258756e61835d15346d1282b7a73d0ea9b92b2c058fab687c252ab34428847217692e2c7dc3cd785ac071c02356cc52f3f07ca35445893922cff05b7e020ae9f63a5c7abb16c3907ab667037ec511f4e1e6403ad0e30c7eab17bfe9fdc7877619b7019951db5c5c6c0b446cdf1781ed7af037527b7a6766c1f32d88b7f8f33a304f907fc02e8ce93b54014f98e07b3098f34c071a2737337d2f6539138d0f8c13de433a9f8317470514dac957955193929c39c1ae43df20a4e68d34923d98fb0f7d5ab3b62b9eb5b5322061d932aaea72a83c54d83ed15282da5f071439dfb1794bd4830818f5b740f5036475f573a5f19cd707f502a1a98be433e5d222a227ac352df1e9f470e79645b03e9cc00bcdd2c78848dde9526b992d552b082130c9bd9511e7491b390e56a656f32f4132d760116f11564b75b8bcd1294ed2a5ad0630b5af54210e97b596dc7a82082e1e51fd019f34b8f93d0b7ccb33fccf4a57ca7f633eda709fb16e259de014ba20e0a9b4d793bb84a6debb1666f7154709397cb70ea2df3916eaff537fec99bf0de6fa2a0214f89afe991626b91a0b3e2f27963eb77b882ee6c4e8f2510bde769b2d2578b0e2097d25a023b1e5b15c0dd5725d4d3524ab3b884394aab54908dd84c5bc4eef1ee4ffd9047c62c486eab2c95aac7e5e18e0044d9f40380a467e3df688a9ed0fffde42164c4dbd18bd5bee06e85139afeb96f931df251956954481377e4a81b6737f1b21cb95c5e67977bc36b0d97f7088134171cda1e392d33a666e207f08b58eea7db1fad1ae786ad241de7230ea08807eee9d0815f3ed5e9d7ac86d3d504c841564153d0c8c31fb7b4fd4c3e1a9727001b8160e72788e4eeaa40c590083aa8f446a1c072d934f51253d3e93f812e304107e521e397c87261a6b145c2c6d34b2f725c24f0ccf44da6a9bc9f7dc35867ccf0f5e8f14cd8dbc99d14f24087c7ff14b6c3b647000b23a08a6fe1246dc794a33e4da820c2ff55290738ec2ed4d85889f25a2ef0587d83d0100d0bff60cde6ede138bc23fd064141fca2df9f29fca6532083b811d709e43590c4c839b88314a9f615a5e516297e114f03f9a7aed737099dad851840ca78b27811a338dc7db6a2aaab9d781c8e54752aa67212282bcc4615113c34f7b429ae774452099cadc39960272693bc6b1dddfc7b58463cdc2107581904793fa26d331c01cf019737e3e6e09d4fdd3513d6f973b5aa195a932bb4deb0b81a7a0ceba560cd4d6179695", 0x1000, 0x8, &(0x7f0000001540)={r4, r5+60000000}) r6 = syz_mount_image$iso9660(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', 0x4, 0x9, &(0x7f0000002b00)=[{&(0x7f0000001600)="e11c89d306bc77e6e849c7e399ba1bf4ddd5bb34c94d690bdf018a8ce3281aa36cbb5962ea1daa890de1c7f52887a7c61d7035cfd9c3959872260a999aad0a7afbf064c1b60fa243847471fd0ee6cbe9f821d609ddaca2e9f8eb70524ff1c438a91a539418cd24746f7b7dbaf43971fb4c6a3bc8c4027e0f3713f3eeea639de8b0121eab221d6cfc3955af68", 0x8c, 0x7}, {&(0x7f00000016c0)="6903ae3539454ecff91b04139f809a9dc8aff154fc59c1c1d7defcef0ea9caba7bad4fbf2753830dcbe6af06bd13b85809a761b660ea8f6b55683e6672d0e6fd5990d46ac2b9cbb42ccdeb3421053246fdbeb8ac643a730920c52c53decc257f0f8b5b75d9d73dbc845fd9a000fc8a01e3f86409fdc9694350c12d566bd96631ede943c80417e3c416b75c9cc5674dd6744ad8bfe29a2eeb2e993d299e4efcffc47ef24a3ed85e060434bb7fbaa92180b421f8fc121f994176aef7d978afaee7", 0xc0, 0x6}, {&(0x7f0000001780)="de0cc705c2007075f1e6686cc16f77b48441a173fa40b79a66c0cf7d3d2526a98324b806804e75979e20a2460ead0589a4677dac50ea6d38b2444e1222f4d47656af396b3ce35febc4d3f4c5ee069e596d9a2715f7b269e6cda603300fc49b", 0x5f, 0x8}, {&(0x7f0000001800)="3ff3691cd50ba022bf3598fd0b802af431835232e2f8e5c20876b6ec6f9bcc2e4d3a10a812675532a7011d5f93ee0eb7deca949810820827a7d45a7d65e6c61eba06bc8281f4963c8ab41d8439e33d6dc20d0082743ff703249c9a046cb247c9ea17d53ac2e6171a41877aff7159f245f8239bc17fcc805f", 0x78, 0x5}, {&(0x7f0000001880)="bf33e0d56068a9511e281bdf6d744aaf8a3d9e7cdca82bd407b8f591018fca83bb943882ee46fced04bb4e4278c7e2faa0d62caaba33d178a1710241686abc1766fc11fc51dd79064b06ee9facab60cc9ebfab6678e438de81d40f233f1588274bdbd2fa6854f155a769457465960455350436f4a28096afe6f10eabbc8ceb4da0cdbd7ae67328a47e3f19580f08955de4e37abc2e1e531bd835b3248260a868da064f2f75504ff41f18b7df6233461d49140da3135748a19b8177fb3963a78e8e527b924389647f62e968ac387a55f46fe8758169d1411be9bf978003333fa150261b17a7e42aa0e2938ff10243d32417b0e771650f2da8d1e5f6b448eba67bf8783e20597a2b31bad3ba744b24574e21e5b2f061bbde82285ce59f3e46144aac143e817541b2299d70fc46532ee6355d22c5266b310f0005e87f65fad563a861eeaca0f593f3b412cf5c30daa5935a6562fcd57b4328b8dfaa0cf2d3682b1b76c03f5f8871e14bfe1b1686d236ef00d6fac25b7f6f7063dc0648523b6b5805c5aaf51c5c0e4106269b754f4d30862c043b337d4a63b14dcb28c33d111588e4d27b819a5e742d012061d91ba12fb093d613b9937e877344c9956f6718ce70297c35d8e098d9454f3ff4ee12234e5b5af8751f21967498291aff0436cf9a12cd3463529257757263da1f58958c845e34d2d3784efaa0c9eda859497b619e0f017152c09084cc645f50d203554837f95d59c20cd730dc8252d88f2d37da31eb750827a1347155511b0ddc7969d92283820cba14c1f6b439b54d3a0a00b30575b01f75f7ffe8524929428d627fd654c7a9a184896d1fc1135365665454344afa538d46385c3e249447e1fa8a7a661d17b558143c1c07b345e803f4ac17169cbaab940e7cb0a27b5c751e2a49c0191e65f9dbf155b0502e86e27728dcddb90947ed291638845bc469fd53b9c770e871e226a37ee2fa7e9753afd6308519302956fc6ea80e22e86fdc1bad0e0ad4fd1d23a52eb3297b612f882c404da0ab9e0f9cfb27b5f00594be1917683358133e65f7f6b0ae1f80b0aa914a988d43daf634ec393b2203ed9e4995e8056038acaea7bc59167ff6d4e8cc6d00e0c8ce3db9f0c588afd4545060955be43b403b66b130265a5e7ea90b06b2703bdba55c7d9d19c3d4a827d1bba520551b49dc2c0d4386298d6007e65d0e16fb1a0f3941ab6b7dcfc022e0a5e3e84af2ce2620db9f798b981c383f3699171da7bda3c69ac8c17b68c4c99796b15db9dce359ff3aff46fcd218ce5a34e8e2b17c615d9e8f43957cc7c7e787924a4343e398b2d459b7834d64ad5025ebb4c8837c48a760ac9bd8138c58e6e3dd6a6b5fe251caecb6574f1f2a2df631048d9158d3b822f56045405622e85023cf8689a235afc7b69ceedb243ca0375a333a69460be53f2c706929c749ca7232497ef5ddacb1ac72a8e40aa6c8c24cf4b68175128e5e7e75c7507a1fd1398eef608eae2e1cacf4cfdaf18b144abdfdcff6eac5f9be76e43f770b00c3fd5abeb110008078164b5a333be801fc4d96a72175cb5c6f0efd7493578dac53889bdf21986b2973764bed128f8ae264db29822fb7d6bf6a9dcb5e5357b6d16400a144d974a8ef6838b5991d3074ea44fd747ede588c66966f2a1d6400ed05bcadf18dc65a1d3a2bdbbeeec01e66985d26684c70f5b20c579649ff07298d027ea0f1f489822ad85dcb5d4331da13b9f0c9e56d23ffe51eb048e5467703ccf30acbbf3c73e2a609edcef1e36bb57964a54ffedaa5d420b51085add7a49456f8221265b670df8effd2435f9e079c59db0cedec48552cc816488d82e2328bd90e61a3376b5b169ef1512d3b6c8949c46d9ec4ffecb86ac1bd365a5cfa957a780127107173eed58aa9df1027a93c53b670f7baae09de31c1ab11c3aed99d0e311dee3588b8ab0f1415f158145dad3f063468ad9e1ad5f5803797735713bb50497aa8ed8afed77f176b1a4fd90c99ba09e6f7bf5f20eee47a5b60a4135af69ace8dae18a69c509afeacbbb2b806497144742e490df9742369333546eaf8306b89e4671d4848f153ddfcff26bc69dba6a3199a9bd8302b229a48801a6e24defa9c8e21b4927c03d55d9ffb93a1e580774ac9c5229919705bc557854e2c9073af4bf62b6d36856df0176398a93782315c18a35cd0628ba224a8127c1bebc04ba3756d6764d4cf26bf9728f89a576e9889dbf8398e9a686fe9a7f7c40a4f30cdce891a90871523bc3ff464f3e622139784569d3dc848cca6293ed1b5c450541aa67c7db9c12de0535c279f57c37021818218d7e6b1827c6e2d8426a34fd78924fdba2506a13b8e7b64a4ae53446826edaddb5ec466eb5af4c245112a90331884a4bacde4517e1031ee65f371abfe4796df9ccada44c0c8121bf66ebbb9274b5ed61e97fdc9292e92df4ddca98133fd87bb4eeebf91a07700c713489aca8410c09177071a3cdfb1a5d312028035b48c5552e4e08c963371d58f3bf40e25b106e56e7c0676b7af5f738e96f032443decaeda47a81c93b9a77b1ffc6efae1a93eabbf5e96444dc4eb0ecdfd06ddd95f1c9b5e5d65364cd2f8cf0bdd4870dee0ce72657de5c3f8cb0d4b15f295c5b6eebae647322f698e61bbf7dcf404e9a0bec7a7ed7c78afa37fb9ac35281114146358f17481886ba50a820c1b726f2cdaa5a2ad5a917a7b1d1cdd930c1ed654debc60d3e96b59ea068df4f83c22db09b03efea166af036e36d9d9307f6b2522513a706b3a14b288925b5c41f29a77b620849c55c7fd8a0063fc6cd72631e7c6cf16d48b640b86459be3ff241217e4500094ef4dd035f7db4a8f77f718332e9773d61dcaca786fc7795cce961f2e72a79490ab2723df92f93332830bd33cf7a7c72bfb7829e3aa5083b12482dcc2cb361d3c6d5837beafc665dcabfb591cfb95b64b84e54ed8f9311c7eef0ea8157d214cfe3d1737ed7f1ac8c9d5cd2caad9dc12c46146bc2e43075d123c69106d77e3f146626a313d5e9ca014cfab0f3f8dae2123ef23bf91d948122f22dd5447a42cffd5aefc66e1e8ed40743042a4436b0a84493e2c8853cb0915868bc63b04e3e0a30f8a2e5d04fce0ff2a4a33eca115c12bc3d582f703ecccb7027f026e5020ea73a55516e8b8ce73b673aeb86992f13a2741061f6e9fe43b82df6a995b4dd5379e583bd2468a1228812a5e64c8c16b28b927829d292ffa5dc6a483393d295dbfcb8c5ac284975dc145898dbcfb129f1ea5db268ac3eebad7bafb459f0142f7b0cf1389d296c1e07379b24304cfb96b4c6a1ac428a7257d4066dcdc730fa2b6c619c70c165d56f23511ce23c220ab96b3d5d95390fb1879154d3a9e650921b9fe8d19a9d0c2c3a4fbb7bc85caff01a0bb21def43cb1da5af1564890eea77e396f5760ceae8256d5260dfe3defdb5a257e8b1c700d59cc1735bf38433c20ecb44aea53bca3aa6d17c3d423d2a1b8d0ca9acf5ef6d1618c6e8a41bb212627f18ab67ff26ac3ff70b2904c70aeb52b7f64354dcc97c9987123737e397fca2bd9bfcce0c9ee61b0e81a01575f7377b831a1b4f4fe2b253e9f7518b675229b86a4ca1c67b8c9e84c2d9d3136a0d402a5624caffa3cf895d63620f01ca1cb805672c9c0a34130ed884eee1dd327d26bd0e909c6c7a39eeede1d067c5779d7561cb30a6ce15968955e9e01c8cfded3f4a73d3a299d3691d68fcc1e6b92e06442f193522a43800077708e12ad48d14572a101c981298991d2b36c1328addc3e628ccb38bef88f362cfb60a0bfce0244ea0aa313f0badb451d877b88f2a5fc0ce505587b717cc933a8fad8e7e0ff950570e6f9c8c70e4c9979d1ee7574d5108de30f30b3bce031c8280fbf290e9f11663166b59facd96f162a54d8b9c5bf6e4e03fcd0ac640bfcc8fdab815e63e8ae7b230d97e343151ef676b57cf13088e326ae7c9c1245c37e2d89293a7f744200a90f3c9c65f6df3c3ac0eb39fa5533b6a24352c54cbf554f53e04da5aad663cb5a341348acf001a9619f8c6c8a71fd3ec02eb9a521a71f0376e578f04588a6b6dda01887dcc49464f692c459fbc86c5217101e04fc05b6f8f8166eec8d63f4209c5f5591b1f706690bc4662a65cda88d7047b499b19894b35b279493e08ddbf0e00e1cf817a2d8bcb7de5278a1079cab76538cc16a2cb7c6f1a3737ab09ac0c8be2d909b0b514bd0592fc074ed351a9dfa0f92a0f755e0b71c5b3c76e92c315bda8ce4afebd59ad56d79026ab1805730ff0eafa024f60ca81d98802afec6c3fc5e295e224e38807b0a21cac2b61e9c2ceb9c0fc2e1ce96d1c2a1e4cd3fc6535b85df7e4636e1a3b9508f1597c5c1306427d000c752e4e94aff3a319ec946c5e26bcec3b7fb9a8bec19eb517118290fe395860dd2148dbaef0b1287a76ee2d070b6795f5a5a16a54b28b484ed08fcfec8526444e3a4437c5d4c43bf618a32684155bd736ab3f642ae8dcf4d8edcaa05c0a1f3d21e51543937579313544839f47bf94131bd60793c33a139459b0f3706b247fcc22665f9fc4151167c534070e56fa01d90c6eb0763499c806f92e5437a240bb0c0e2c64fd14b47cabdd221360660109c105b2121df718acfc74f9f96096fbe67571d6de464d10268daa32980839b1a0ab2c391ded252c5a513081ca3c2cfe26382d994cb02b32304fab1a3b6b4a19dd195d88aef1a2f4a948f594115d6e03e940f320217126be15f4f3fa665d296958d86a0742c53ff755412eb6388b514e6689e701b069753eac46cb0d501d88b07a31df0152aacb066c08e79d7f7c6f71e3215719f1d95d3d451ef04624bfda7d88e00a9d98380b71e387cb9b7bee90b84a883bf2a0946958edb74f864407560f4b43c7f0e52fe9ad6e4009dc64577b4a9b2e753657f7cb2181a298b23b5ede4535f849eebf95df3d3156f781cadc3fd80be218dcca1ff5c600a6dfdf5da631684604171daccb8dd10adf4239fc9c376a7c536c2f4b5d53a991f62a8dc7a87e97dda606fbf46a01baf54e17cabc52bf9eea6cb1cef49a5c4f5391fc4a2dc6c81fd73ff8e2bdf9b5ce3e478e8e6bd54afb12f728d2d6ba7368a860a78867271b16d2244fb079ded80e5e4ca01c0fd95d2a4452eaa9680d47198f57f11b12785143d448aeca89c82a175b48723cf712dc3271765ffbeacfc6e514b8dcd3f2b524bd69d794b5343d7e562eae8b4c592af2478d856538ec3ce80f14fd745007da054d9485f7e5ab5f55f81e04c8d2173230ae70186510cc84209ac5d8b6e8096b62e2d080d41690acba5679d083287217e4048974228e26857a9369377f9aa84ef19baf329d5840e4f8d2cad9949a8fb9a040a567f92c61403107123023d5d9344bcb7d982963b30e87674dfba72dfe32dcee64001c569bc88f1322ca822ec9035cc167f6db6235392414565cb05071c017832bd56c5ddfd2ae326a0b6991eec1e644cc18b93af0ddc320652d6a90f90e22f19c53fb1df6b6fefe8c088f3814398afdc5708bf8969d39a17abfd9cb574f76778c01e1eb8ab50a6a570662ad98313ca94bdeff0efd9db4602e0a5cfe3160c90dfe6cf7c6265afb945b12a8e1a982945b1fe78ca7fe2c343d5033a3bceb69186bd77b87b85f109df24ed90218ef9fe2aad04f29c7bb879a9ca3bd76365468ed560427aad5fffde9ff657a16a7d84c856ce49411cac631f75e2b34c2eb7939074c13db354decaa4dd68a1a5fd8a1d5b8fb847d58ee5c4afd9f471c1c882d448ee6e9e2ce816b8e301909d6add28cdc880", 0x1000, 0x8001}, {&(0x7f0000002880)="a1a4c4d0b08db6", 0x7, 0x8}, {&(0x7f00000028c0), 0x0, 0xffffffffffffff57}, {&(0x7f0000002900)="732f309196da3a911bc45663e163c52982837f498447765169fab324967960097935fff87f871e43ca3c33b9ad3c8756a773f8082e2dc9d43670a07921f6f4db774e49fd5407338a1e584ce82d33c4fa064a1d5b970f66cd0d592c4254c77ab323e1d61a4fe5949e10b3ea8caf6ace8adfa80f4b54545b395414ec6254cacfcb4864611807937f94ab115f93bcbc26411304b1487727caf45809178eb7916572da8ecdf036e5408adf0c67fd2ca9402f259ccfdf7be311c5b9f94dac58e86abc21bc0e0ad42a25beb52ec671ad2842913f98e15628ce5c377f", 0xd9, 0x4}, {&(0x7f0000002a00)="7ce096f3e15d4a9f98d0f2ffa70d10177093c1541670e6ef7e9b4e49bfc948aab40e9148a7b0dba0e6fc0bbd7a6f3edc5806f54594a64b5e945821eaa89e1a9fac18bfaf31fabb550bdbda97516560a00a3f9ebc8171b94aebec29c3ef795307c35e964b9b70722fa03b77bc7a9928b2313c2b4628372dd441b7763906927f86859afa2a38c916b9a4b768bc2584e03ff2d5c142893fce552603342e255e4625939f32781eef6b0737f0c96159bc438fe9671c0c68ae39effad5ebe3a68651e33003f38a24be29ab9928ec2d9a48704b4256f0339ff02bf2b46e260027725b3fa8ef1cb2a3beb81500f4c7043ddfa5e2749d41ff13b34e", 0xf7, 0x1000}], 0xa02888, &(0x7f0000002c00)={[{@nocompress}, {@map_off}], [{@smackfstransmute}, {@euid_lt={'euid<', 0xee01}}, {@fsmagic}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\-%{$m\'[\'['}}, {@fowner_gt}, {@pcr={'pcr', 0x3d, 0x24}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002cc0)) epoll_pwait2(r3, &(0x7f0000002ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000002f40), &(0x7f0000002f80)={[0x80]}, 0x8) clock_getres(0x3, &(0x7f0000002fc0)) clock_getres(0x0, &(0x7f0000003000)) 19:27:38 executing program 5: r0 = syz_io_uring_complete(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc2}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, &(0x7f0000000080)=0xfff, 0x6) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r2, 0x0, &(0x7f00000000c0)="fbffc282cf42bf103c8dfa2db70bd74bda085c43e9debcf0284647fda4f45b7ce2c19e18485922bb58a7b7edcee146000b64b37309620988578314", 0x3b, 0xc000}, 0x61) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x3, 'gretap0\x00', {0x1ff}, 0xc4}) r6 = signalfd(r2, &(0x7f0000000180)={[0x9]}, 0x8) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f00000001c0)={0x200, 0xe806, 0x4, 0x9754, 0x18, "6fc4a3be5da6acaf08c68c1137f5671a1e6d6f", 0x2, 0x7b9c}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003100)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000003200)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f00000032c0)={'ip6tnl0\x00', &(0x7f0000003240)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x9, 0x800, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x40, 0x1, 0x80}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003400)={&(0x7f0000003300)={0xd8, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2580}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0xd8}}, 0x48000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000006a40)={&(0x7f0000003480)=@abs, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/163, 0xa3}, {&(0x7f00000055c0)=""/250, 0xfa}, {&(0x7f00000056c0)=""/33, 0x21}, {&(0x7f0000005700)=""/212, 0xd4}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/146, 0x92}], 0x8, &(0x7f0000006940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x40000140) ioctl$TCGETS(r11, 0x5401, &(0x7f0000006a80)) r12 = ioctl$TIOCGPTPEER(r10, 0x5441, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(r12, 0x82307202, &(0x7f0000006ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 19:27:38 executing program 7: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x9, 0x40, 0x6, @local, @remote, 0x20, 0x40, 0x4, 0x2c}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000004c0)={0x0, @ax25={0x3, @bcast, 0x3}, @can={0x1d, 0x0}, @hci={0x1f, 0x2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000480)='wg0\x00', 0xb883, 0x200, 0x2}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1ec, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb4c85495f81422b}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000000) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000880)=0x9, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000818}, 0x24008811) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8873}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x38}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}]}, 0x8c}}, 0x0) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000bc0)=0x14) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000c80)={0xa, &(0x7f0000000c00)=[{0x3, 0x8, 0x7, 0x200}, {0x1e, 0x9, 0x3f, 0x3f}, {0x80, 0x5, 0x2, 0xfff}, {0x2, 0x20, 0xf9, 0xf94}, {0x400, 0x2, 0x3, 0x5}, {0x173, 0x7, 0x4, 0x6}, {0x6, 0x7, 0x2, 0x7}, {0x9e94, 0xea, 0x2, 0x200}, {0x1f, 0x0, 0x97, 0x7}, {0x20, 0x1, 0x56, 0x3}]}, 0x10) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000d00)={0x0, @llc={0x1a, 0x311, 0x1, 0x7f, 0xff, 0x3, @multicast}, @ax25={0x3, @default, 0x5}, @generic={0x22, "3d05a5c8c966b440f17f81fc5cab"}, 0x9447, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)='xfrm0\x00', 0x1, 0x7, 0xaf6f}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r8, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x50) r9 = pidfd_getfd(0xffffffffffffffff, r7, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000e80)) [ 71.780990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.782934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.784257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.785753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.786805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.788229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.790637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.792355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.793655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.794959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.797543] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.798920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.813205] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.818620] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.825301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.827012] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.829578] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.831146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.832624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.833843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.847507] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.848837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.853900] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.855337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.856630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.857835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.862805] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.866519] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.892603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.911392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.920733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.926513] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.928049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.929567] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.936577] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.937834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.942994] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.957566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.959132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.964311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.965717] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.988566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.989586] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.001587] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.007954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.011677] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.019614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.030389] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.038986] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.853213] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 73.854543] Bluetooth: hci1: command 0x0409 tx timeout [ 73.855124] Bluetooth: hci0: command 0x0409 tx timeout [ 73.917167] Bluetooth: hci6: command 0x0409 tx timeout [ 73.917803] Bluetooth: hci4: command 0x0409 tx timeout [ 73.981403] Bluetooth: hci2: command 0x0409 tx timeout [ 74.045823] Bluetooth: hci3: command 0x0409 tx timeout [ 74.109122] Bluetooth: hci7: command 0x0409 tx timeout [ 75.901126] Bluetooth: hci0: command 0x041b tx timeout [ 75.901612] Bluetooth: hci1: command 0x041b tx timeout [ 75.965145] Bluetooth: hci4: command 0x041b tx timeout [ 75.965612] Bluetooth: hci6: command 0x041b tx timeout [ 76.029118] Bluetooth: hci2: command 0x041b tx timeout [ 76.093218] Bluetooth: hci3: command 0x041b tx timeout [ 76.157210] Bluetooth: hci7: command 0x041b tx timeout [ 77.949182] Bluetooth: hci1: command 0x040f tx timeout [ 77.949257] Bluetooth: hci0: command 0x040f tx timeout [ 78.013244] Bluetooth: hci6: command 0x040f tx timeout [ 78.013273] Bluetooth: hci4: command 0x040f tx timeout [ 78.077282] Bluetooth: hci2: command 0x040f tx timeout [ 78.141208] Bluetooth: hci3: command 0x040f tx timeout [ 78.205163] Bluetooth: hci7: command 0x040f tx timeout [ 79.229189] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 79.997225] Bluetooth: hci0: command 0x0419 tx timeout [ 79.997279] Bluetooth: hci1: command 0x0419 tx timeout [ 80.061127] Bluetooth: hci4: command 0x0419 tx timeout [ 80.062156] Bluetooth: hci6: command 0x0419 tx timeout [ 80.125123] Bluetooth: hci2: command 0x0419 tx timeout [ 80.189142] Bluetooth: hci3: command 0x0419 tx timeout [ 80.254118] Bluetooth: hci7: command 0x0419 tx timeout [ 84.093117] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 86.638624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.639974] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.656587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.663255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.675760] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.676635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.702908] Bluetooth: hci5: HCI_REQ-0x0c1a [ 88.765290] Bluetooth: hci5: command 0x0409 tx timeout [ 90.813144] Bluetooth: hci5: command 0x041b tx timeout [ 92.861121] Bluetooth: hci5: command 0x040f tx timeout [ 94.909170] Bluetooth: hci5: command 0x0419 tx timeout 19:28:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) [ 129.693813] audit: type=1400 audit(1664047718.042:7): avc: denied { open } for pid=3695 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.695640] audit: type=1400 audit(1664047718.042:8): avc: denied { kernel } for pid=3695 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.715508] ------------[ cut here ]------------ [ 129.715536] [ 129.715541] ====================================================== [ 129.715545] WARNING: possible circular locking dependency detected [ 129.715551] 6.0.0-rc6-next-20220923 #1 Not tainted [ 129.715559] ------------------------------------------------------ [ 129.715563] syz-executor.5/3697 is trying to acquire lock: [ 129.715572] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 129.715623] [ 129.715623] but task is already holding lock: [ 129.715626] ffff88800eed4020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.715663] [ 129.715663] which lock already depends on the new lock. [ 129.715663] [ 129.715667] [ 129.715667] the existing dependency chain (in reverse order) is: [ 129.715671] [ 129.715671] -> #3 (&ctx->lock){....}-{2:2}: [ 129.715689] _raw_spin_lock+0x2a/0x40 [ 129.715713] __perf_event_task_sched_out+0x53b/0x18d0 [ 129.715730] __schedule+0xedd/0x2470 [ 129.715748] schedule+0xda/0x1b0 [ 129.715764] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.715780] syscall_exit_to_user_mode+0x19/0x40 [ 129.715796] do_syscall_64+0x48/0x90 [ 129.715817] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.715833] [ 129.715833] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 129.715851] _raw_spin_lock_nested+0x30/0x40 [ 129.715874] raw_spin_rq_lock_nested+0x1e/0x30 [ 129.715891] task_fork_fair+0x63/0x4d0 [ 129.715912] sched_cgroup_fork+0x3d0/0x540 [ 129.715930] copy_process+0x4183/0x6e20 [ 129.715944] kernel_clone+0xe7/0x890 [ 129.715956] user_mode_thread+0xad/0xf0 [ 129.715970] rest_init+0x24/0x250 [ 129.715984] arch_call_rest_init+0xf/0x14 [ 129.716006] start_kernel+0x4c1/0x4e6 [ 129.716026] secondary_startup_64_no_verify+0xe0/0xeb [ 129.716045] [ 129.716045] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 129.716065] _raw_spin_lock_irqsave+0x39/0x60 [ 129.716089] try_to_wake_up+0xab/0x1930 [ 129.716106] up+0x75/0xb0 [ 129.716123] __up_console_sem+0x6e/0x80 [ 129.716144] console_unlock+0x46a/0x590 [ 129.716164] do_con_write+0xc05/0x1d50 [ 129.716180] con_write+0x21/0x40 [ 129.716193] n_tty_write+0x4d4/0xfe0 [ 129.716210] file_tty_write.constprop.0+0x49c/0x8f0 [ 129.716227] vfs_write+0x9c3/0xd90 [ 129.716250] ksys_write+0x127/0x250 [ 129.716272] do_syscall_64+0x3b/0x90 [ 129.716292] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.716308] [ 129.716308] -> #0 ((console_sem).lock){....}-{2:2}: [ 129.716326] __lock_acquire+0x2a02/0x5e70 [ 129.716348] lock_acquire+0x1a2/0x530 [ 129.716368] _raw_spin_lock_irqsave+0x39/0x60 [ 129.716391] down_trylock+0xe/0x70 [ 129.716410] __down_trylock_console_sem+0x3b/0xd0 [ 129.716430] vprintk_emit+0x16b/0x560 [ 129.716451] vprintk+0x84/0xa0 [ 129.716471] _printk+0xba/0xf1 [ 129.716486] report_bug.cold+0x72/0xab [ 129.716506] handle_bug+0x3c/0x70 [ 129.716527] exc_invalid_op+0x14/0x50 [ 129.716548] asm_exc_invalid_op+0x16/0x20 [ 129.716562] group_sched_out.part.0+0x2c7/0x460 [ 129.716577] ctx_sched_out+0x8f1/0xc10 [ 129.716590] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.716606] __schedule+0xedd/0x2470 [ 129.716623] schedule+0xda/0x1b0 [ 129.716639] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.716653] syscall_exit_to_user_mode+0x19/0x40 [ 129.716668] do_syscall_64+0x48/0x90 [ 129.716689] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.716705] [ 129.716705] other info that might help us debug this: [ 129.716705] [ 129.716708] Chain exists of: [ 129.716708] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 129.716708] [ 129.716727] Possible unsafe locking scenario: [ 129.716727] [ 129.716730] CPU0 CPU1 [ 129.716733] ---- ---- [ 129.716736] lock(&ctx->lock); [ 129.716743] lock(&rq->__lock); [ 129.716752] lock(&ctx->lock); [ 129.716760] lock((console_sem).lock); [ 129.716767] [ 129.716767] *** DEADLOCK *** [ 129.716767] [ 129.716770] 2 locks held by syz-executor.5/3697: [ 129.716779] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 129.716816] #1: ffff88800eed4020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 129.716852] [ 129.716852] stack backtrace: [ 129.716855] CPU: 0 PID: 3697 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220923 #1 [ 129.716871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.716882] Call Trace: [ 129.716886] [ 129.716892] dump_stack_lvl+0x8b/0xb3 [ 129.716915] check_noncircular+0x263/0x2e0 [ 129.716936] ? format_decode+0x26c/0xb50 [ 129.716963] ? print_circular_bug+0x450/0x450 [ 129.716985] ? enable_ptr_key_workfn+0x20/0x20 [ 129.717006] ? format_decode+0x26c/0xb50 [ 129.717028] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 129.717051] __lock_acquire+0x2a02/0x5e70 [ 129.717079] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 129.717107] lock_acquire+0x1a2/0x530 [ 129.717129] ? down_trylock+0xe/0x70 [ 129.717150] ? lock_release+0x750/0x750 [ 129.717176] ? vprintk+0x84/0xa0 [ 129.717199] _raw_spin_lock_irqsave+0x39/0x60 [ 129.717224] ? down_trylock+0xe/0x70 [ 129.717244] down_trylock+0xe/0x70 [ 129.717264] ? vprintk+0x84/0xa0 [ 129.717285] __down_trylock_console_sem+0x3b/0xd0 [ 129.717308] vprintk_emit+0x16b/0x560 [ 129.717332] vprintk+0x84/0xa0 [ 129.717354] _printk+0xba/0xf1 [ 129.717368] ? record_print_text.cold+0x16/0x16 [ 129.717388] ? report_bug.cold+0x66/0xab [ 129.717411] ? group_sched_out.part.0+0x2c7/0x460 [ 129.717426] report_bug.cold+0x72/0xab [ 129.717450] handle_bug+0x3c/0x70 [ 129.717471] exc_invalid_op+0x14/0x50 [ 129.717494] asm_exc_invalid_op+0x16/0x20 [ 129.717510] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.717528] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.717543] RSP: 0018:ffff88803e4b7c48 EFLAGS: 00010006 [ 129.717554] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.717564] RDX: ffff88801f3c1ac0 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 129.717574] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 129.717584] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800eed4000 [ 129.717594] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 129.717608] ? group_sched_out.part.0+0x2c7/0x460 [ 129.717625] ? group_sched_out.part.0+0x2c7/0x460 [ 129.717643] ctx_sched_out+0x8f1/0xc10 [ 129.717659] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.717679] ? lock_is_held_type+0xd7/0x130 [ 129.717697] ? __perf_cgroup_move+0x160/0x160 [ 129.717712] ? set_next_entity+0x304/0x550 [ 129.717735] ? update_curr+0x267/0x740 [ 129.717759] ? lock_is_held_type+0xd7/0x130 [ 129.717776] __schedule+0xedd/0x2470 [ 129.717798] ? io_schedule_timeout+0x150/0x150 [ 129.717818] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.717845] schedule+0xda/0x1b0 [ 129.717864] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.717879] syscall_exit_to_user_mode+0x19/0x40 [ 129.717896] do_syscall_64+0x48/0x90 [ 129.717919] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.717935] RIP: 0033:0x7fef44edab19 [ 129.717946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.717960] RSP: 002b:00007fef42450218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.717974] RAX: 0000000000000001 RBX: 00007fef44fedf68 RCX: 00007fef44edab19 [ 129.717984] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef44fedf6c [ 129.717994] RBP: 00007fef44fedf60 R08: 000000000000000e R09: 0000000000000000 [ 129.718003] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fef44fedf6c [ 129.718012] R13: 00007ffdc8b5c4ef R14: 00007fef42450300 R15: 0000000000022000 [ 129.718029] [ 129.789033] WARNING: CPU: 0 PID: 3697 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 129.789873] Modules linked in: [ 129.790173] CPU: 0 PID: 3697 Comm: syz-executor.5 Not tainted 6.0.0-rc6-next-20220923 #1 [ 129.790903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.791899] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.792387] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.794012] RSP: 0018:ffff88803e4b7c48 EFLAGS: 00010006 [ 129.794494] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.795130] RDX: ffff88801f3c1ac0 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 129.795770] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 129.796410] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800eed4000 [ 129.797057] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 129.797698] FS: 00007fef42450700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 129.798417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.798939] CR2: 00007ff855754810 CR3: 000000003e814000 CR4: 0000000000350ef0 [ 129.799584] Call Trace: [ 129.799820] [ 129.800032] ctx_sched_out+0x8f1/0xc10 [ 129.800411] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.800880] ? lock_is_held_type+0xd7/0x130 [ 129.801287] ? __perf_cgroup_move+0x160/0x160 [ 129.801702] ? set_next_entity+0x304/0x550 [ 129.802097] ? update_curr+0x267/0x740 [ 129.802461] ? lock_is_held_type+0xd7/0x130 [ 129.802854] __schedule+0xedd/0x2470 [ 129.803203] ? io_schedule_timeout+0x150/0x150 [ 129.803629] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.804079] schedule+0xda/0x1b0 [ 129.804396] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.804840] syscall_exit_to_user_mode+0x19/0x40 [ 129.805280] do_syscall_64+0x48/0x90 [ 129.805627] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.806089] RIP: 0033:0x7fef44edab19 [ 129.806427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.808051] RSP: 002b:00007fef42450218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.808719] RAX: 0000000000000001 RBX: 00007fef44fedf68 RCX: 00007fef44edab19 [ 129.809368] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef44fedf6c [ 129.810012] RBP: 00007fef44fedf60 R08: 000000000000000e R09: 0000000000000000 [ 129.810650] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fef44fedf6c [ 129.811280] R13: 00007ffdc8b5c4ef R14: 00007fef42450300 R15: 0000000000022000 [ 129.811923] [ 129.812138] irq event stamp: 668 [ 129.812439] hardirqs last enabled at (667): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 129.813274] hardirqs last disabled at (668): [] __schedule+0x1225/0x2470 [ 129.814012] softirqs last enabled at (654): [] __irq_exit_rcu+0x11b/0x180 [ 129.814777] softirqs last disabled at (645): [] __irq_exit_rcu+0x11b/0x180 [ 129.815534] ---[ end trace 0000000000000000 ]--- [ 130.022018] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 130.022018] program syz-executor.5 not setting count and/or reply_len properly [ 130.182417] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 130.182417] program syz-executor.5 not setting count and/or reply_len properly [ 130.196059] hrtimer: interrupt took 12223 ns 19:28:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) [ 131.266211] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 131.266211] program syz-executor.5 not setting count and/or reply_len properly 19:28:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) [ 131.436413] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 131.436413] program syz-executor.5 not setting count and/or reply_len properly 19:28:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) [ 131.560322] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 131.560322] program syz-executor.5 not setting count and/or reply_len properly 19:28:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) [ 131.667774] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 131.667774] program syz-executor.5 not setting count and/or reply_len properly 19:28:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) [ 131.801146] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 131.801146] program syz-executor.5 not setting count and/or reply_len properly 19:28:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) [ 131.913511] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 131.913511] program syz-executor.5 not setting count and/or reply_len properly 19:28:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r1, r1, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = mq_open(&(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x10, &(0x7f0000000300)={0x20e5, 0x3ff, 0xa03c, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="e4ffffffdb6caf2b00000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) [ 132.015104] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 132.015104] program syz-executor.5 not setting count and/or reply_len properly [ 135.165155] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 135.421145] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 135.421149] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 135.421293] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 135.485078] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 135.485083] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 137.668268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.670098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.671700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.674562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.675995] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.677640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.680613] Bluetooth: hci1: HCI_REQ-0x0c1a [ 137.822350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.823791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.825011] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.830480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.838224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 137.839405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.848864] Bluetooth: hci7: HCI_REQ-0x0c1a [ 139.389290] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 139.709377] Bluetooth: hci1: command 0x0409 tx timeout VM DIAGNOSIS: 19:28:38 Registers: info registers vcpu 0 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88803e4b7698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000079 R11=0000000000000001 R12=0000000000000079 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fef42450700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff855754810 CR3=000000003e814000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fef44fc17c0 00007fef44fc17c8 YMM02=0000000000000000 0000000000000000 00007fef44fc17e0 00007fef44fc17c0 YMM03=0000000000000000 0000000000000000 00007fef44fc17c8 00007fef44fc17c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff88801bdc9418 RBX=ffff88801f257950 RCX=ffffffff816cbe49 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88801bdc9418 RBP=ffff88801bdc9418 RSP=ffff88801f2578b8 R8 =0000000000000006 R9 =00007f52ce021fff R10=00007f52ce400000 R11=0000000000000001 R12=ffff88801bdc8e00 R13=ffff88801f257b48 R14=ffff88800ec4b1a0 R15=00007f52ce21e000 RIP=ffffffff8178692e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f52ce21db70 CR3=000000001d70c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000