Warning: Permanently added '[localhost]:41009' (ECDSA) to the list of known hosts. 2022/09/25 12:21:40 fuzzer started 2022/09/25 12:21:40 dialing manager at localhost:38881 syzkaller login: [ 36.772684] cgroup: Unknown subsys name 'net' [ 36.860538] cgroup: Unknown subsys name 'rlimit' 2022/09/25 12:21:53 syscalls: 2215 2022/09/25 12:21:53 code coverage: enabled 2022/09/25 12:21:53 comparison tracing: enabled 2022/09/25 12:21:53 extra coverage: enabled 2022/09/25 12:21:53 setuid sandbox: enabled 2022/09/25 12:21:53 namespace sandbox: enabled 2022/09/25 12:21:53 Android sandbox: enabled 2022/09/25 12:21:53 fault injection: enabled 2022/09/25 12:21:53 leak checking: enabled 2022/09/25 12:21:53 net packet injection: enabled 2022/09/25 12:21:53 net device setup: enabled 2022/09/25 12:21:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/25 12:21:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/25 12:21:53 USB emulation: enabled 2022/09/25 12:21:53 hci packet injection: enabled 2022/09/25 12:21:53 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/25 12:21:53 802.15.4 emulation: enabled 2022/09/25 12:21:54 fetching corpus: 50, signal 24024/25835 (executing program) 2022/09/25 12:21:54 fetching corpus: 100, signal 33698/37162 (executing program) 2022/09/25 12:21:54 fetching corpus: 150, signal 41751/46791 (executing program) 2022/09/25 12:21:54 fetching corpus: 200, signal 49696/56156 (executing program) 2022/09/25 12:21:54 fetching corpus: 250, signal 61329/68966 (executing program) 2022/09/25 12:21:54 fetching corpus: 300, signal 65650/74623 (executing program) 2022/09/25 12:21:54 fetching corpus: 350, signal 71797/81988 (executing program) 2022/09/25 12:21:55 fetching corpus: 400, signal 75353/86766 (executing program) 2022/09/25 12:21:55 fetching corpus: 450, signal 77314/90008 (executing program) 2022/09/25 12:21:55 fetching corpus: 500, signal 80442/94277 (executing program) 2022/09/25 12:21:55 fetching corpus: 550, signal 83770/98696 (executing program) 2022/09/25 12:21:55 fetching corpus: 600, signal 88035/103879 (executing program) 2022/09/25 12:21:55 fetching corpus: 650, signal 90165/107082 (executing program) 2022/09/25 12:21:55 fetching corpus: 700, signal 93074/110964 (executing program) 2022/09/25 12:21:55 fetching corpus: 750, signal 95364/114284 (executing program) 2022/09/25 12:21:56 fetching corpus: 800, signal 97367/117296 (executing program) 2022/09/25 12:21:56 fetching corpus: 850, signal 102691/123159 (executing program) 2022/09/25 12:21:56 fetching corpus: 900, signal 104431/125816 (executing program) 2022/09/25 12:21:56 fetching corpus: 950, signal 108107/130172 (executing program) 2022/09/25 12:21:56 fetching corpus: 1000, signal 112455/135008 (executing program) 2022/09/25 12:21:56 fetching corpus: 1050, signal 115305/138557 (executing program) 2022/09/25 12:21:56 fetching corpus: 1100, signal 117260/141256 (executing program) 2022/09/25 12:21:57 fetching corpus: 1150, signal 119181/143919 (executing program) 2022/09/25 12:21:57 fetching corpus: 1200, signal 120567/146149 (executing program) 2022/09/25 12:21:57 fetching corpus: 1250, signal 121420/147871 (executing program) 2022/09/25 12:21:57 fetching corpus: 1300, signal 122858/150114 (executing program) 2022/09/25 12:21:57 fetching corpus: 1350, signal 124284/152281 (executing program) 2022/09/25 12:21:57 fetching corpus: 1400, signal 126142/154827 (executing program) 2022/09/25 12:21:57 fetching corpus: 1450, signal 126758/156306 (executing program) 2022/09/25 12:21:57 fetching corpus: 1500, signal 129023/159025 (executing program) 2022/09/25 12:21:57 fetching corpus: 1550, signal 130408/161078 (executing program) 2022/09/25 12:21:58 fetching corpus: 1600, signal 131912/163163 (executing program) 2022/09/25 12:21:58 fetching corpus: 1650, signal 133379/165261 (executing program) 2022/09/25 12:21:58 fetching corpus: 1700, signal 135237/167530 (executing program) 2022/09/25 12:21:58 fetching corpus: 1750, signal 136317/169271 (executing program) 2022/09/25 12:21:58 fetching corpus: 1800, signal 137240/170852 (executing program) 2022/09/25 12:21:58 fetching corpus: 1850, signal 139142/173116 (executing program) 2022/09/25 12:21:58 fetching corpus: 1900, signal 140486/174967 (executing program) 2022/09/25 12:21:58 fetching corpus: 1950, signal 141465/176576 (executing program) 2022/09/25 12:21:59 fetching corpus: 2000, signal 142988/178510 (executing program) 2022/09/25 12:21:59 fetching corpus: 2050, signal 143972/180038 (executing program) 2022/09/25 12:21:59 fetching corpus: 2100, signal 145005/181608 (executing program) 2022/09/25 12:21:59 fetching corpus: 2150, signal 146216/183241 (executing program) 2022/09/25 12:21:59 fetching corpus: 2200, signal 147259/184807 (executing program) 2022/09/25 12:21:59 fetching corpus: 2250, signal 148982/186743 (executing program) 2022/09/25 12:21:59 fetching corpus: 2300, signal 149861/188164 (executing program) 2022/09/25 12:21:59 fetching corpus: 2350, signal 150862/189668 (executing program) 2022/09/25 12:22:00 fetching corpus: 2400, signal 151707/190999 (executing program) 2022/09/25 12:22:00 fetching corpus: 2450, signal 152870/192501 (executing program) 2022/09/25 12:22:00 fetching corpus: 2500, signal 153974/193977 (executing program) 2022/09/25 12:22:00 fetching corpus: 2550, signal 154919/195320 (executing program) 2022/09/25 12:22:00 fetching corpus: 2600, signal 155652/196554 (executing program) 2022/09/25 12:22:00 fetching corpus: 2650, signal 156297/197696 (executing program) 2022/09/25 12:22:00 fetching corpus: 2700, signal 157020/198928 (executing program) 2022/09/25 12:22:00 fetching corpus: 2750, signal 158112/200314 (executing program) 2022/09/25 12:22:00 fetching corpus: 2800, signal 158773/201419 (executing program) 2022/09/25 12:22:01 fetching corpus: 2850, signal 160290/203073 (executing program) 2022/09/25 12:22:01 fetching corpus: 2900, signal 161008/204247 (executing program) 2022/09/25 12:22:01 fetching corpus: 2950, signal 162062/205586 (executing program) 2022/09/25 12:22:01 fetching corpus: 3000, signal 162585/206597 (executing program) 2022/09/25 12:22:01 fetching corpus: 3050, signal 163782/207965 (executing program) 2022/09/25 12:22:01 fetching corpus: 3100, signal 164687/209190 (executing program) 2022/09/25 12:22:01 fetching corpus: 3150, signal 165498/210300 (executing program) 2022/09/25 12:22:01 fetching corpus: 3200, signal 166781/211641 (executing program) 2022/09/25 12:22:02 fetching corpus: 3250, signal 167517/212716 (executing program) 2022/09/25 12:22:02 fetching corpus: 3300, signal 168560/213886 (executing program) 2022/09/25 12:22:02 fetching corpus: 3350, signal 169452/215016 (executing program) 2022/09/25 12:22:02 fetching corpus: 3400, signal 170898/216398 (executing program) 2022/09/25 12:22:02 fetching corpus: 3450, signal 171531/217338 (executing program) 2022/09/25 12:22:02 fetching corpus: 3500, signal 171929/218181 (executing program) 2022/09/25 12:22:02 fetching corpus: 3550, signal 172652/219160 (executing program) 2022/09/25 12:22:02 fetching corpus: 3600, signal 173383/220061 (executing program) 2022/09/25 12:22:03 fetching corpus: 3650, signal 173858/220882 (executing program) 2022/09/25 12:22:03 fetching corpus: 3700, signal 174356/221714 (executing program) 2022/09/25 12:22:03 fetching corpus: 3750, signal 175001/222626 (executing program) 2022/09/25 12:22:03 fetching corpus: 3800, signal 175880/223600 (executing program) 2022/09/25 12:22:03 fetching corpus: 3850, signal 176185/224351 (executing program) 2022/09/25 12:22:03 fetching corpus: 3900, signal 177074/225351 (executing program) 2022/09/25 12:22:03 fetching corpus: 3950, signal 177987/226310 (executing program) 2022/09/25 12:22:03 fetching corpus: 4000, signal 178699/227214 (executing program) 2022/09/25 12:22:03 fetching corpus: 4050, signal 179689/228172 (executing program) 2022/09/25 12:22:03 fetching corpus: 4100, signal 180309/229050 (executing program) 2022/09/25 12:22:04 fetching corpus: 4150, signal 180862/229909 (executing program) 2022/09/25 12:22:04 fetching corpus: 4200, signal 182067/230917 (executing program) 2022/09/25 12:22:04 fetching corpus: 4250, signal 182868/231728 (executing program) 2022/09/25 12:22:04 fetching corpus: 4300, signal 183566/232540 (executing program) 2022/09/25 12:22:04 fetching corpus: 4350, signal 184162/233338 (executing program) 2022/09/25 12:22:04 fetching corpus: 4400, signal 184549/234049 (executing program) 2022/09/25 12:22:04 fetching corpus: 4450, signal 185168/234817 (executing program) 2022/09/25 12:22:04 fetching corpus: 4500, signal 185416/235453 (executing program) 2022/09/25 12:22:05 fetching corpus: 4550, signal 186150/236233 (executing program) 2022/09/25 12:22:05 fetching corpus: 4600, signal 186781/236961 (executing program) 2022/09/25 12:22:05 fetching corpus: 4650, signal 187250/237649 (executing program) 2022/09/25 12:22:05 fetching corpus: 4700, signal 188164/238419 (executing program) 2022/09/25 12:22:05 fetching corpus: 4750, signal 188971/239141 (executing program) 2022/09/25 12:22:05 fetching corpus: 4800, signal 189669/239835 (executing program) 2022/09/25 12:22:05 fetching corpus: 4850, signal 190262/240536 (executing program) 2022/09/25 12:22:05 fetching corpus: 4900, signal 190999/241403 (executing program) 2022/09/25 12:22:05 fetching corpus: 4950, signal 191863/242093 (executing program) 2022/09/25 12:22:06 fetching corpus: 5000, signal 192469/242732 (executing program) 2022/09/25 12:22:06 fetching corpus: 5050, signal 192860/243327 (executing program) 2022/09/25 12:22:06 fetching corpus: 5100, signal 193555/243966 (executing program) 2022/09/25 12:22:06 fetching corpus: 5150, signal 193955/244557 (executing program) 2022/09/25 12:22:06 fetching corpus: 5200, signal 194504/245175 (executing program) 2022/09/25 12:22:06 fetching corpus: 5250, signal 196106/245911 (executing program) 2022/09/25 12:22:06 fetching corpus: 5300, signal 196749/246541 (executing program) 2022/09/25 12:22:06 fetching corpus: 5350, signal 197253/247062 (executing program) 2022/09/25 12:22:07 fetching corpus: 5400, signal 197956/247643 (executing program) 2022/09/25 12:22:07 fetching corpus: 5450, signal 198881/248264 (executing program) 2022/09/25 12:22:07 fetching corpus: 5500, signal 199701/248829 (executing program) 2022/09/25 12:22:07 fetching corpus: 5550, signal 200258/249308 (executing program) 2022/09/25 12:22:07 fetching corpus: 5600, signal 200632/249802 (executing program) 2022/09/25 12:22:07 fetching corpus: 5650, signal 201281/250343 (executing program) 2022/09/25 12:22:07 fetching corpus: 5700, signal 201849/250874 (executing program) 2022/09/25 12:22:07 fetching corpus: 5750, signal 202479/251383 (executing program) 2022/09/25 12:22:08 fetching corpus: 5800, signal 202813/251840 (executing program) 2022/09/25 12:22:08 fetching corpus: 5850, signal 203281/252281 (executing program) 2022/09/25 12:22:08 fetching corpus: 5900, signal 203651/252741 (executing program) 2022/09/25 12:22:08 fetching corpus: 5950, signal 204024/253170 (executing program) 2022/09/25 12:22:08 fetching corpus: 6000, signal 204620/253611 (executing program) 2022/09/25 12:22:08 fetching corpus: 6050, signal 205111/254048 (executing program) 2022/09/25 12:22:08 fetching corpus: 6100, signal 205816/254463 (executing program) 2022/09/25 12:22:08 fetching corpus: 6150, signal 206268/254865 (executing program) 2022/09/25 12:22:08 fetching corpus: 6200, signal 206486/255234 (executing program) 2022/09/25 12:22:09 fetching corpus: 6250, signal 207220/255616 (executing program) 2022/09/25 12:22:09 fetching corpus: 6300, signal 207905/255980 (executing program) 2022/09/25 12:22:09 fetching corpus: 6350, signal 208330/256119 (executing program) 2022/09/25 12:22:09 fetching corpus: 6400, signal 209558/256119 (executing program) 2022/09/25 12:22:09 fetching corpus: 6450, signal 209952/256134 (executing program) 2022/09/25 12:22:09 fetching corpus: 6500, signal 210208/256134 (executing program) 2022/09/25 12:22:09 fetching corpus: 6550, signal 210538/256134 (executing program) 2022/09/25 12:22:09 fetching corpus: 6600, signal 211028/256140 (executing program) 2022/09/25 12:22:09 fetching corpus: 6650, signal 211530/256140 (executing program) 2022/09/25 12:22:09 fetching corpus: 6700, signal 211835/256149 (executing program) 2022/09/25 12:22:10 fetching corpus: 6750, signal 212212/256160 (executing program) 2022/09/25 12:22:10 fetching corpus: 6800, signal 213686/256160 (executing program) 2022/09/25 12:22:10 fetching corpus: 6850, signal 213995/256160 (executing program) 2022/09/25 12:22:10 fetching corpus: 6900, signal 215218/256174 (executing program) 2022/09/25 12:22:10 fetching corpus: 6950, signal 216029/256174 (executing program) 2022/09/25 12:22:10 fetching corpus: 6953, signal 216037/256174 (executing program) 2022/09/25 12:22:10 fetching corpus: 6953, signal 216037/256174 (executing program) 2022/09/25 12:22:13 starting 8 fuzzer processes 12:22:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0xdf7, 0x5, 0x0, 0x5, 0x1000, 0x40}) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x8, 0x0, 0x5, 0x0, 0xff, 0x100, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfdd, 0x6, @perf_bp={&(0x7f0000000080), 0x2}, 0x1200, 0xb5a9, 0x6, 0x7, 0x4, 0x8001, 0x5, 0x0, 0x7f, 0x0, 0x8}, r0, 0x6, r0, 0x5) write$binfmt_aout(r1, &(0x7f0000000140)={{0x10b, 0x22, 0x40, 0x212, 0x339, 0x7, 0x140, 0x66}, "323ac9535cfe8e6111d76a77f80b97f49ad572f4148539d0116cd7f83f52b14ab0", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x541) faccessat2(r0, &(0x7f00000006c0)='./file0\x00', 0x80, 0x1000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/class/ata_link', 0x2000, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000740), 0x109420, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = accept$inet(r4, 0x0, &(0x7f00000007c0)) fsetxattr$system_posix_acl(r5, &(0x7f0000000800)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x2, 0xee00}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x0, 0xee01}], {0x4, 0x5}, [{}], {0x10, 0x2}, {0x20, 0x3}}, 0x54, 0x2) r6 = socket$netlink(0x10, 0x3, 0x9) fcntl$setpipe(r6, 0x407, 0x1ff) r7 = syz_open_dev$vcsn(&(0x7f0000000940), 0x4, 0x209040) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000008c0)=':\x00', &(0x7f0000000900)='./file0\x00', r7) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000980)={'\x00', 0x4, 0x0, 0x2}) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x18c, 0x15, 0x800, 0x70bd25, 0x25dfdbfc, {0x22, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "9329565618a200eb303e7c35d13a7ba96ed0cf848a1462d657e5f04af6ee2efdfe60239c4a6849cd8e69ec5190948aa4579090cfc4b93b9cd00fcf9fd5aa8520837406c65196532ea9ae81a4782782ea1510b573a0b4a91023111f6ba2837494ef0e9b00e553e0d03f2caa27eb06a145ee4e72e8e24602b8dbaedfbb19acdcb9ac6d97e3238e8dffe8a99d6661dc0c8558f55de224a9a0a29bcaf0cecc0f25"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "9bff523defb2"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "9682b2016fcc864800b89838120a0cb4bb97c1a0a6c43a151a5162b3c907df11acbbbb00953b3d71701fcb1b153762c152d1ee31f89838a11d33db8db3dfcae2a8a6530d4ea92512d95a44b4a38db6ccb77631446919f08c0eca0d30d02adf5974e6d237a760b1134f03874486aa2a6de310d656ed7dffe44ecddaa85f5e97c02380b03063337d75435d6b89ce75c8f16176110fd79a8c17cbcd1e3f90ecd05381f5f0c5"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "b1e514cba9b4be5f87b46dc010354d42e30fcf425450de57a02b180d"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r3, {0x7, 0x80000001}}, './file1\x00'}) readlinkat(r8, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=""/66, 0x42) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000d80)={0x0, 0xffffffff80000000, 0x3}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001180)=0xa0) 12:22:13 executing program 2: fsync(0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000804}, 0x800c010) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000001c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffd, 0x55, 0x6, @buffer={0x0, 0xcd, &(0x7f0000000240)=""/205}, &(0x7f0000000340)="5b9ee53333aff0b6378100cb51a030626502052dab7ebb0a7714a1c563c522cb3bc4a4df1a6fcc0650c86a4b4de9982e567787f67672b14d6577af534219946ad269861db7fa35f344b73f6693e4c21b077aaa0de7", &(0x7f00000003c0)=""/25, 0x8, 0x10003, 0x0, &(0x7f0000000400)}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x200040, 0x0) close(r2) r3 = syz_open_dev$vcsa(&(0x7f0000000500), 0x8, 0x400) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000540)=0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x200400, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000005c0)={0x0, 0x3, 0x4, 0x9}) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x80080, 0x179) r5 = syz_open_dev$loop(&(0x7f0000000640), 0xff, 0x10200) fcntl$getownex(r5, 0x10, &(0x7f0000000680)) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x51}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) 12:22:13 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x9}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x126}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x86, 0xac, "6eb963d6baafae3045b8dd2b13d8b8903d1fe3cf747d77dbeb2ced23b6d670fbc1bac5c2fc4f5f3337cf0cd4d133728c46fbe2b6c8e9a91e1806a8a4bfbdedd5d4e9bf69d28145733c1c6cc177966bd959b00003b8ff1f56a4b656778e68e8aaa3f1d3cfc2975435fb4c7eedad325ffd8ee2a332e24280e12e02de000f44935b9ea1"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x104, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x54, 0xc5, "d25e6c86c49e9988aa8296f7a68334f3c68ab7d3b9cef7399465adeed6a9f81fd0c7bf16a0ef86dbe588630bd6644220264097a164b25ace625ba23620188014daa4d6b93387e3c7aee46b2274b8311e"}, @NL80211_ATTR_VENDOR_DATA={0x82, 0xc5, "618885739b6b6333bf22831fe6d30459109941e6227d1b5e2159efdf2da11874f5012ceb77c71d156ee5a036454bcd329eac0e3ab78686aab6520c51cb490d567b619b5256fdbc84dee520b6a66f501b343cc2533c7d5f99ffd94c457393c30fbb2275c206b7207eb3f52239a246c8b45e04bab964e290c8d9abe91da41d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x54087}, 0x4000880) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8ef3}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1080}, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x8200, 0x0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x508, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x80) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x40800) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3c}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}]}, 0x40}}, 0x80) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b80), 0x400, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x164, r3, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bfcb7522efda0aca028cb5dadce28c9de86b0aa4e8361d47"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "619a7a3e5c3c256ac3efd0d7cc80723a03b942ce8edaf20b"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8fb1c697d1d20b8118e02665b3b0d9f1656ce495e3eabbfe"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0c81344f65c9d764ebafdf3e9aea7fcabd87027afd8189a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d48eb12c44042b78c8ef1641c05b26b1e2ca2f50b478e5e1"}]]}, 0x164}, 0x1, 0x0, 0x0, 0x10028040}, 0x44000) r7 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x8c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x202, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000fc0)=0x40, 0x2) [ 69.189523] audit: type=1400 audit(1664108533.325:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:22:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1282}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x366}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10d3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x95a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9c8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf81}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1387}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x4000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5bcfb29e3e"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4798e63c82"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2000044}, 0x4) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r9, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x22, 0x34, @random="f7b8b7540e1ac098318bb34bc66c7e6709cf6cb65cf7ef87ac13a174bb5f"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x10000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20044000) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x29, 0xff, 0x3f, 0xffff7fff, 0x10, @mcast1, @empty, 0x8000, 0x7, 0x3, 0x4}}) sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x208, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x40, 0x9, 0x1}, {0x9, 0x9, 0x5, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x37f}}, {0x8}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 12:22:13 executing program 4: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x4, 0x1, 0x2, 0xfff9, 0x1a, "6aea8c405ee3b401"}) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000080)=""/131) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x239480, 0x8) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0xb0, 0x1e, &(0x7f0000000180)}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000005c0)={0x7, "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"}) fsetxattr$security_ima(r0, &(0x7f0000000800), &(0x7f0000000840)=@md5={0x1, "ef64d55df38fcf93687f069d429ad528"}, 0x11, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000008c0)={{}, 0x0, 0x0, @unused=[0x6, 0x1, 0x9, 0x39e7], @name="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"}) r2 = accept4$unix(r1, 0x0, &(0x7f00000018c0), 0x80800) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001900)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001940)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000001980)) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000019c0), &(0x7f0000001a00), 0x2, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r4, &(0x7f0000001a40)=@phonet, &(0x7f0000001ac0)=0x80) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001f00)={0x1, 0x1, 0x14, 0x15, 0x1ff, &(0x7f0000001b00)}) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000001f40)={0x45b}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7ff) 12:22:13 executing program 5: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$inet6(0xa, 0x6, 0x1) write(r2, &(0x7f0000000100)="16a916c89caa93f02e8e73202cbe7e6fd0dc7b75278fe1a9f1f7d5d6e7569b2209966bd3635d0c9c199b00e0fbda1d2a1fe35d1b3abf856ca727828ac1f86b19a801667d455c7e7387c679412b6830b64d3984daab641fba3cd7603a2b056124a05c807ea1c99af3aa950058f31489b9eef5162173", 0x75) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x2a2600) ftruncate(r3, 0x1) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r3, 0x4, 0x20, 0x81}) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000200)={'\x00', 0x7, 0x1, 0x7ff}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x3, 0x7}, 0x8, 0x4, 0x4e, 0xa7d, 0x22, 'syz0\x00', "ccdf4d3182acc774cd92d86a0d54977637f6147db6f6e1663d2744d0cac4c8c6", "ae5fd75e3fff001e3d310ba3599be8baa00cc9ff8e88ad219d134012a33d2977", [{0x0, 0x8, {0x0, 0x3}}, {0x5, 0x8f0c, {0x2, 0x5}}, {0x6, 0x1, {0x0, 0xff}}, {0xbf, 0xdf0, {0x1, 0xe0}}, {0x2, 0x9, {0x2, 0x400}}, {0xa7, 0x4, {0x0, 0x1}}, {0x8b0e, 0x3f, {0x2, 0x80000001}}, {0x5, 0x200, {0x3, 0x81}}, {0x4ba0, 0x9, {0x1, 0x80}}, {0x5, 0x9, {0x3, 0x4}}, {0xbfaf, 0x6, {0x2, 0x3ff}}, {0x185, 0x5, {0x2, 0x4}}, {0x2, 0x7, {0x1, 0x8}}, {0xee, 0x1, {0x3, 0x40000000}}, {0x8, 0x9, {0x0, 0x1}}, {0x3ff, 0x333, {0x2, 0x2}}, {0x8, 0x401, {0x0, 0x6}}, {0x3ff, 0x6, {0x3, 0x3}}, {0x81, 0x200, {0x0, 0x4}}, {0x5, 0x81, {0x927e5b2d0687e062}}, {0x0, 0x1cc, {0x3, 0x7fff}}, {0xfffc, 0x7, {0x0, 0x7}}, {0xbc7, 0x401, {0x2, 0xf6}}, {0xfff8, 0x7, {0x6192e4d078b3316d, 0x80}}, {0x7f, 0x7, {0x3, 0x6}}, {0x4, 0xdaa4, {0x3, 0xce}}, {0xffe0, 0x0, {0x0, 0x81}}, {0x7, 0x0, {0x3, 0x7}}, {0x3728, 0x1f, {0x1, 0x7fff}}, {0x45ca, 0x1, {0x3}}, {0x600, 0x0, {0x0, 0x1}}, {0x4, 0xf10d, {0x0, 0x100}}, {0x80, 0x8, {0x0, 0x5}}, {0x3, 0x800, {0x2, 0x1}}, {0x3, 0x2, {0x3, 0x1}}, {0x90, 0x8786, {0x0, 0x5}}, {0x100, 0x5, {0x1, 0x4}}, {0x8, 0x6, {0x0, 0x2}}, {0x1, 0x7, {0x2, 0x1}}, {0x3, 0xfff, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x800}, 0x7, 0x8, 0xd0, 0x200, 0xc, 'syz1\x00', "1db1db647b0ceaa7c06d218023e1a89eff3bcb9eaa0fb73ce29bf52e9f8a30bc", "4c3855a825b07e3915b624be61f1961c980008ae398c0a9af4c42bb5604091ac", [{0x401, 0x9, {0x2, 0x9}}, {0x1, 0x4, {0x1, 0xfffffffc}}, {0x7, 0x9, {0x0, 0x4}}, {0x6, 0x5, {0x3, 0x3}}, {0x6, 0x8001, {0x1, 0x8}}, {0x8, 0x8, {0x2}}, {0x53b, 0x81, {0x3, 0x42000000}}, {0xcf, 0x8, {0x2, 0x42d1}}, {0x2, 0xe5c, {0xae31e4df1c4b83e9, 0x101}}, {0x7, 0x7, {0x3, 0x80000000}}, {0x80, 0xa5e3, {0x1}}, {0x6, 0x7f, {0x2, 0xa}}, {0x1000, 0x9, {0x0, 0xa4}}, {0x3, 0x4, {0x3, 0x8}}, {0xfffb, 0x9f0, {0x3, 0x80}}, {0x9, 0x0, {0x2, 0x4}}, {0x7ff, 0x2, {0x2, 0x8}}, {0x1, 0x200, {0x2, 0x10001}}, {0x6, 0x3, {0x2, 0x7}}, {0x8, 0x80, {0x0, 0x100}}, {0xb83, 0xf299, {0x3, 0x3ff}}, {0x0, 0x7, {0x2, 0x8}}, {0x9, 0x8000, {0x3, 0x3}}, {0x6, 0x51b6, {0x0, 0xfff}}, {0x1f, 0x5, {0x0, 0x7}}, {0x400, 0x100, {0x2, 0x80000000}}, {0x3, 0x4f, {0x2, 0x3}}, {0x0, 0x8, {0x1, 0x9fed}}, {0xf9, 0x9, {0x3, 0x6}}, {0x401, 0x8, {0x0, 0x6}}, {0x2, 0xffff, {0x0, 0x7}}, {0x7, 0x8, {0x1, 0x940}}, {0x1, 0x6, {0x1, 0x6}}, {0x7ff, 0x6c8, {0x2, 0x2}}, {0x8a00, 0x6, {0x2, 0x7}}, {0x2, 0x0, {0x1, 0x401}}, {0x7ff, 0x2, {0x2, 0x6}}, {0xc131, 0x7, {0x2, 0x4}}, {0x1, 0x7f, {0x0, 0x3}}, {0x6, 0x3, {0x1, 0x8}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40004}, 0x40884) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000800)) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000840)='hybla\x00', 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000880)=0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000940)={0x7fffffff, 0x48, '\x00', 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000980)={0x7, 0x80000000}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x88, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x840) 12:22:13 executing program 7: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/164, 0xa4}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/42, 0x2a}], 0x3, &(0x7f0000000200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/239, 0xef}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f00000006c0)=""/63, 0x3f}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000007c0)=""/109, 0x6d}], 0x5}}], 0x3, 0x140, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8084}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x33e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc25}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4892}, 0xc080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000fc0), 0x100, 0x0) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4080002}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x114, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x114}}, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xc8, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x309}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32b4}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20}, 0x20000004) r11 = accept(r5, &(0x7f0000001400)=@nl=@proc, &(0x7f0000001480)=0x80) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x94, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001680)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r13, &(0x7f0000001b40)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b00)={&(0x7f0000001700)={0x3c4, r10, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @empty, 0xffff}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6a80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "837f3438b3765492958ed9c090af5ebe66658cd33890"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "109a65d8ae312f2b632f1ed29bea06220baa47d1f4fe67c0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "63c847eed8e58c2be7d4d9ef07eb0dfbfb787ff797e21cb91c684b"}}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "55af4b382fe0c1ef4f05ad67f71fd26084956c3c6046959b5b7a8eb26fb21fb2a6adadfcd635b62c8b99836e306cef95f303ef461bd9636bbed005a3f6b451142a1fc4d41ade33e322c0ccbef8b66a756cd25e236ed0b2eb9392cd94c376fbf16ab223631af9f81bc0ab12e9ba83603ab3828039661043a2838497a4c6a8f1eb1bcc22baf2d1e7b9dc5b5c17fe34d6c410c91ececb467491607845f8bd71b687da145ca8ff8e18e87d8297159bf2bb61a49440059ab562ce5fa455213505bde7c562c6"}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2cb7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x44000}, 0x20000080) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040804}, 0x81) 12:22:13 executing program 6: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xd851e5ee8ab16d7) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x89000) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x2710}}, 0x0) r1 = memfd_create(&(0x7f0000000140)='\x00', 0x4) write(r1, &(0x7f0000000180)="f051bdab41ff129cc38c2864dd0210f383fdcfa7d7908bd4607c45ce06eba3e005183c8d4c3598925aa91f55aac1a686a5a30ac023b3ed0c3b8c540da926a8762aef3eae16d23b03dc863d1e4e90b8a23c0ac2980fd9646ff81170fca670935d9ffccac2681286132e822d1bd21066402c9f", 0x72) fcntl$addseals(r1, 0x409, 0x2) r2 = accept4$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000540)={0x6, 'bridge0\x00', {0x24}, 0x9}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "dd78ca2e35b93ac0975fdd4efd4591"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "d05d67bb2a992dcddbe5"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x2040005) r3 = openat2(r0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x90001}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000780)={0x0, r1, 0x3, 0x3ff, 0xffff, 0x10000}) r4 = syz_open_dev$vcsa(&(0x7f00000007c0), 0xcbd, 0x30302) ioctl$RTC_AIE_OFF(r4, 0x7002) stat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x7, 0x9, &(0x7f0000001e00)=[{&(0x7f0000000880)="0cedb7564d83e3664e31f8fa477d6ef09a36044d3c641e430b986a73bf169abe5de6e01cc6a1dd6051c58e7c527339c0134ab41968ea455f734607819e6285a25610197b697ea1612ad808b8648bb5d88bd9ee00195983c629a8eef38f8a16739be2d11ff88799749071ac390ceff1a4a9afe70ecaf59fd85613472c7252f6a75867b8eb5751e8803697cd26c1e347465f9c38c657b8b719896a637e2d267c95902540a2146d40683b23edb7d7015118fefeeab1e241ce7abe8e78df380b", 0xbe, 0xa2}, {&(0x7f0000000940)="c06c06a9d41aa58c14573fd684cf3a41691d7978fb53080f917d050353d536a57e99f833e99a8dd57a40c9c399900bd76622a110afc89b8c4ab7e87aecb8649b5cfc2e80f89da2d33dd669b192d06321945718258138f4edfa2cf984e8f9c538db94eeef4513c7e60f057469d3438862daa1c6101bad5950c082ff321a56c4fa1e93e06b8c5e172cb3d80f4ada12c85bf05f6f69481f55eda47dd48d3eb65bb81b3a9d71be1a51d1750d45f149", 0xad, 0x75}, {&(0x7f0000000a00)="8d0e8f20c1b00a34289bb16f51d755823c664d62fc5e463bfbd07f89db60954f700b43324fc30e4c4e3a8877f1258d185af3577a0c3dc2244d6f65dfdc9e82005c55563e67433aadb0d7be0efdf48e498a568dc0d8b18f6ce8b72fbb57c3b09523e5dbbb65f45331252a9cf43736a666789c8e628dbdd19773b06059c9bc05b8847001548c6bd8c77319dd59d928e5b514a487b7ed97bd1df95808fafba954690614863cca93865218bd76c253", 0xad, 0x8f}, {&(0x7f0000000ac0)="f0832a685016e57793b93a26d1ad8705d72568bb12245e7946342ebd1fadfd03b8074e37d898b8fb42d716d638a18f65975ef62faa21586ab1c58d4688db8121c9a2d49ec4b3a51030d5b40f2e5ced61b7ebf165e4ce71701931e74d21dad5da19f579880ff777d276b8", 0x6a, 0x4}, {&(0x7f0000000b40)="c5dd5dfa589293c5210549971d2050dd67d014643165e4b5182ecd8e3a4b2b364abec200d78b15ab71f201ff0525760e2f4c882dd2552966e03f32aff579c308e05569eec7887e8494dc694578f32b4b0be93fb40657b564cce30d2db3a32fd23ed8dbec8447819307099c6f003f3d4d1a96edd86cd1b961f085443a571f603dedcbb9c50ea3d0c3f9f61a6bc6134f62c09482daef3a4fa5bef44e83a583bc3f2728a9014949ce11208fb5679b712096e2fccfddb3340e41e2c178750727eabc1da3ab340719b1", 0xc7, 0x10000}, {&(0x7f0000000c40)="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", 0x1000, 0x3}, {&(0x7f0000001c40)="8b", 0x1, 0x18a}, {&(0x7f0000001c80)="feff2146870a2d35a8d85c7082a29705d73e9b51a84f50e916f5b9caa3f0598c6ac77cd81f9f4f20df306bf5e7d8bec797d1557b74716cfe3f89c9dc93b0428fb450d8680630d9709a0ad574900855e57310ebfeac991eb73c4dc59f0e3fa912dc2b5f4a37f7aa36a0695d81b5332d452b4da9153b9b0942662410074eb452f9169b54c0114047e5aca310bf2a57e072f46864553f7f672b26179402f2fa509c3deff5445cae3d395d7dfafae386d63274e1f0b1e513ff34", 0xb8, 0x200}, {&(0x7f0000001d40)="0c6e86a17714806fc8dd971dbafcffbcf1b32995f131f5169bfd29a53c3b2fe37af4f50d5dea5e195a70239732c9d937d57947fd4c9941023d27c2840ed376ccf1575cee10bff22b66d6adfcdf00691311f5c3c9ac41c664e813a6502385c49b226a2d9843b9d2ac8a3027a3f16db9d13f318b06b47ff129fac9815a6b4054ff71502d49ca7d7cc46d4fe55f00db8bee63dc7b18b01ce54951544a97e11cbad64bb4af208ba3ac", 0xa7, 0x5}], 0x140001, &(0x7f0000001fc0)={[{@fat=@check_normal}, {@dots}, {@dots}], [{@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_lt={'euid<', r5}}, {@seclabel}]}) fadvise64(r2, 0x800, 0x6, 0x3) r7 = dup3(r4, r6, 0x80000) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000002040)={0x2, {0x2, 0x1, 0x8000, 0xdce, 0x2, 0xf}}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000002080)={0x1, 0x4, 0x0, 0x16, 0x6, [{0x80000000, 0x5, 0x6, '\x00', 0x884}, {0x10000, 0x964, 0x101, '\x00', 0x200}, {0x6, 0x1, 0x1, '\x00', 0x1008}, {0x0, 0xffff, 0x100000000, '\x00', 0x400}, {0x3ff, 0x7, 0xc4, '\x00', 0x168e}, {0x6, 0x7, 0x9, '\x00', 0x1}]}) [ 70.513640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.515496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.516785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.520676] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.523390] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.524251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.524537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.527302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.528668] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.530441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.534504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.535560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.550926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.553130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.554567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.555821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.558641] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.559803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.559899] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.562338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.563496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.564813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.566148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.568063] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.573231] Bluetooth: hci4: HCI_REQ-0x0c1a [ 70.575425] Bluetooth: hci1: HCI_REQ-0x0c1a [ 70.579494] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.589125] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.618713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.619301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.622842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.625117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.626826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.629141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.632546] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.635471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.636762] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 70.638377] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.639545] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.639650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.646780] Bluetooth: hci0: HCI_REQ-0x0c1a [ 70.646806] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.648167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.662523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.672727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.675191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.676466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.679776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.689927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.693722] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.695431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.703731] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.706203] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.742293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.747772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.756658] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.636469] Bluetooth: hci3: command 0x0409 tx timeout [ 72.636497] Bluetooth: hci1: command 0x0409 tx timeout [ 72.637285] Bluetooth: hci4: command 0x0409 tx timeout [ 72.638273] Bluetooth: hci2: command 0x0409 tx timeout [ 72.700100] Bluetooth: hci0: command 0x0409 tx timeout [ 72.701139] Bluetooth: hci7: command 0x0409 tx timeout [ 72.764128] Bluetooth: hci6: command 0x0409 tx timeout [ 72.828114] Bluetooth: hci5: command 0x0409 tx timeout [ 74.684146] Bluetooth: hci4: command 0x041b tx timeout [ 74.684623] Bluetooth: hci1: command 0x041b tx timeout [ 74.685068] Bluetooth: hci3: command 0x041b tx timeout [ 74.686147] Bluetooth: hci2: command 0x041b tx timeout [ 74.749087] Bluetooth: hci7: command 0x041b tx timeout [ 74.749489] Bluetooth: hci0: command 0x041b tx timeout [ 74.813161] Bluetooth: hci6: command 0x041b tx timeout [ 74.877034] Bluetooth: hci5: command 0x041b tx timeout [ 76.732200] Bluetooth: hci2: command 0x040f tx timeout [ 76.733061] Bluetooth: hci3: command 0x040f tx timeout [ 76.733780] Bluetooth: hci1: command 0x040f tx timeout [ 76.734864] Bluetooth: hci4: command 0x040f tx timeout [ 76.796166] Bluetooth: hci0: command 0x040f tx timeout [ 76.796910] Bluetooth: hci7: command 0x040f tx timeout [ 76.860240] Bluetooth: hci6: command 0x040f tx timeout [ 76.924139] Bluetooth: hci5: command 0x040f tx timeout [ 78.780129] Bluetooth: hci4: command 0x0419 tx timeout [ 78.780600] Bluetooth: hci1: command 0x0419 tx timeout [ 78.781033] Bluetooth: hci3: command 0x0419 tx timeout [ 78.781418] Bluetooth: hci2: command 0x0419 tx timeout [ 78.845066] Bluetooth: hci7: command 0x0419 tx timeout [ 78.845498] Bluetooth: hci0: command 0x0419 tx timeout [ 78.909044] Bluetooth: hci6: command 0x0419 tx timeout [ 78.973051] Bluetooth: hci5: command 0x0419 tx timeout [ 125.056750] audit: type=1400 audit(1664108589.193:7): avc: denied { open } for pid=3855 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.065612] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=3857 comm=syz-executor.0 [ 125.075570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=3857 comm=syz-executor.0 [ 125.788839] audit: type=1400 audit(1664108589.925:8): avc: denied { create } for pid=3906 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 126.120665] loop6: detected capacity change from 0 to 256 [ 126.145466] loop6: detected capacity change from 0 to 256 12:23:24 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0xa04a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1846, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x30, 0x1f, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x1ff, 0x7, 0x1, {0x22, 0xf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9b, 0x3, 0x3f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xff, 0x81, 0x4, 0x10, 0x9}, 0x200, &(0x7f0000000080)={0x5, 0xf, 0x200, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1, 0x0, 0x5, [0xffc1b0, 0xc00f, 0xf, 0xff00c0, 0xc000, 0xff3ebf]}, @generic={0xd9, 0x10, 0x4, "0ace2e614e2a0d00a6994f05bbba7fef569f7fc1dcb431efcd964b245446009144a94c2409ec95ac50c06f59d53ee7ac458edf80a6db642e68f8ad098d0d8cb8bd72461feb44a1939b75503fa14123cfb7d4558f5253d6c89e9f4ced61022f08bbc6323cfa773d0585d48342b49d8b919ce8f7c015262758977fa1f7e298a864968eeabcc2a333aa3d672713c99477b79a9d3322cea170c7e4b1a9b71241080d70a8921c3c50bc4a4cef9b947e4a60cd83ade508f3e36014708112576da4967a8543c5beb737dfc0141cacaa8214a6768216c34eafc0"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "981690153ebd7ae5ae26b7aca9f88002"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "7bf710038db1bf3c6a38b6fe0bf1766d"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x7ff, 0xf00f, 0x3, [0xff000f, 0xc0c0, 0xc000, 0xffff00]}, @generic={0xba, 0x10, 0xa, "5a39ade872882d6e5ac6ff6e2ea5ef2250cbf10d13e8f0b2eae07d44d1f42c610aa107bb9993afe7fd9cf6e43958985730f4b02ad3fb95d273c773241007f6ad0942ede0e0265ccf829f8a282861b4d066366d2d8b1e2b4080a9dba082af87234ed19fa84ccdc9db96a456e1d6246fcca5322960b7588d37bb4260eb5c16d37040538bf8394d9d7b8e66c9468ac3dc4d89c7437d6aeac0c31c9501ac39883902197159882462755f1c5d54a88aeabe6a695121ab79ed86"}]}, 0x8, [{0xe6, &(0x7f0000000280)=@string={0xe6, 0x3, "581d1a3be82b18083d2d4844d1ecf7f5a73d3433aa2cf3426d651d0245194f6ba2f9832d5ac5e2e35c3a8459458307b3892e049a3a807f114363f145fb75353907d8d26a5a8310eba89a5b78348750a3e109e236a65d022e721a7118a6eb095ac3513fe2bf24c74bfa953640ca61241f36239559b7ab95c9254b6c5943bbe228daeb34cd8034526cf6cb4ca6c957c578e6cf944d55304ee2102f1795b5dc85a066663aa5e97921ca16b0c7297769f0c7a9071ea3f0c98140f4315f69816019850acfac33cd46f2f42f1028d4ef642e8dcdddb721e90b9e39415a0e2421820597460e293d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0xa2, &(0x7f00000003c0)=@string={0xa2, 0x3, "90999caa842cc9c62cbbdcfba2e21b0cdf6aaad28715fca3bf1f6308ab83936b7cdb3c759e6af8aa557542c55ed4e72bb56f8cec5aea57d6ebc2709c0fa360543e0885c600a852d6e5710ef9c0c47e3a06be7ba5725149df990e3ce522157a624c0f360d56644223c76e49b5abf813395d0a7834f5331510bc5d5e49bb9c772e2a64917cd94f5157f5f0281db1bf5e8eb8eb013511dcfef261b09c18814052b5"}}, {0xc7, &(0x7f0000000480)=@string={0xc7, 0x3, "21b15cfc71cf80131ab807df8d862acefb3ea2d70f7f89de95230a2a8f88b70596f68c0abbc89ba8a6bb3be5f30b11bfabac6215efdb2ffb60669a711e62ffa1e4f71aee8a0183ef47137536837ae6fa0ecaecc59611dcadaf49aa674b167460ab52e7e1f20b37ed4ca11fa517bdeb7b23d51593f597739ff9c4f1314e364f05b076b3fb4c571f4b0c6ef0814f4b7cc92a6232f7f3f1d02c281b72ee91bd16b49e67c1c0ac868c31115099dc770b9e38593077385bd12b56156c0924c429e4f793fcc2cc1f"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc0f}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x443}}, {0x92, &(0x7f0000000600)=@string={0x92, 0x3, "34b43075826334c71217e6f09b70915b0f35c4a2e214f7758cbc9127155135319d0496cd48b49a6b5be8e870bdd12bfd6c15f1809730c99e7dcd7ccf6b76295e42879ff1096509cadb71088965c96b407588615c3572b7428f755d522f80d5376311b9d7a84d460d8c5c0518c83c2a5cacfcf4ada7928934e911ce85bc5ed9cc1cfe91ba35af573d68c8ac3660dc44a5"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40a}}]}) 12:23:24 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf1887000) chroot(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x142) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x8}) syz_io_uring_setup(0x1d71, &(0x7f0000000180)={0x0, 0xbfc3, 0x1, 0x1, 0xed, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYRES64=r0]) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x454c, 0x0) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000380)='./file1\x00', 0x101000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0xfffffdef) 12:23:25 executing program 0: sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80c200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x80000001, 0x5, &(0x7f0000000740)=[{&(0x7f0000000380)="803e4d137366aeb647f1456f224a3229638089e2fe39dec8abdccbb22f266d7fe28bb8d299254f50705b07d91a78e7ec656bfdc2d6eb87d07979d4ce0991ece964878f7aa369ead14b510ef669bd18c3c82c16", 0x53, 0x4}, {&(0x7f0000000400)="13b230a0876c3877205777cefd9b0cf74a24a7f3b795de660d930341fd7fe3fc75560d524cb66ba41298c04da20dde1a4f47673a798ce0e6f0b41113ea6c087e84de52936e2e4024675b6d4dbf6325bf102260eb662184a489f86b5dd95eec26edf60aa47f61721b415eba6366701cc03ddda32a85c28bc1a82aeba02c50e218055cb72e380e", 0x86, 0xfffffffffffffbff}, {&(0x7f00000004c0)="918c57e5494b19f74164cd8fdf83a6a9198413c986b6280d942e47209ac702c8035159b0a4641662086fc70facaeefc61e355a030bd4c1287d5abfce7eeb4b3e671c54a91e055e2f58476b81937ade694a09b232341c8b16806d9339896c935af1e176ee5f09c346032850a21bc4388505373ca36dbe8cecc7acc847f9cd58a63c27dbb00685c11b4fc381db8b59ef80e2e81cf75fead1ae9675e2ec94acb5a1055cb5a9d54057adaf2b8536e598e8ed2c82640181a7d7ee885e107edc14c5aa4ac503683b4a9b1f13d3d48dc170a5d4c999168780e7c78157af5abf8f81a77c59", 0xe1, 0x505d}, {&(0x7f00000005c0)="138039034931be20393ab602300f00366aa0e56d4322e611c80f27c19ae1611f24e3c2f26ff5c07b914e870b53213970a29eb7130b9ebd7a2e829dda9c774c19352b85e6c155c8897609f46e8b23ad2c91077ad2fa0a83cc983a376a22c96d80ad933b2221d1c4974e30ab4bc75e362f83cd719e27be6b1c35cb996babca078a28ab9f6373a2903142e047115a778efe5863b67ef528816ecdd13e15cec5e6a70fa5a924586b4e4930e81179eee8e8d02bfbb5f65afc6003e4c456ce706c6169bd0e258a700feda1923ac7e72753956f0831e9f7e396407cc449d4ee6115ab9e4ed79ad85c7a668bd473c1bc778aa2d229cd67ef", 0xf4, 0x1}, {&(0x7f00000006c0)="d5155af1583f737d1cd267b0439c75d3880986f87801f29b894bb16b38ac1921a7b64222eba2731f6a4c96b5544009338f1c072e218249a2d214d0e1279d15f31104bf7e12ce8fc4a50916423ddc", 0x4e, 0x244}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="756e0000786c6174653d032c6e6f6e756d7461696c3d6f776e65723dd82e9af3eba2522b73a3b5cd5334955842508121873aad489464935be31140ad146d4f8e186ac1596a7c4b0965ff000d2f952070", @ANYRESDEC=0xee01, @ANYBLOB=',subj_type=/,\x00']) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 12:23:25 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r1 = shmget$private(0x0, 0x14000, 0x8, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 12:23:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) prlimit64(r0, 0xb, &(0x7f0000000100)={0x9, 0x200}, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/1450], 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:23:25 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040013}, 0x4001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 12:23:25 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffff3c, 0x5e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "87cfb0133c638364bb9635b799e5788a"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "b4faaaaf8a12698d3f9bec350d8c4dab"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "aadc82c920e7f390a7400916e5c723da"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4048841}, 0x20000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400020101000470008000f80100200040000300000000000000800029842f98f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0, 0x100000}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000000480)="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", 0x11f, 0x5}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000000340)="2e202020202020202020201000b9ea70325132510000ea7032510300000000002e2e2020202020202020201000b9ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b9ea70325132510000ea70325104001a040000", 0x80, 0x1a00}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x5}, {&(0x7f0000010e00)="73797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572738c7a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727300"/128, 0x80, 0x4800}], 0x0, &(0x7f0000010f00)) [ 140.900369] audit: type=1400 audit(1664108605.037:9): avc: denied { kernel } for pid=3977 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:23:25 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = epoll_create(0x1000) copy_file_range(0xffffffffffffffff, 0x0, r1, &(0x7f0000000080), 0x7f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x16000, 0x0) ioctl$CDROMCLOSETRAY(r2, 0x5319) getpriority(0x1, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$CDROMRESUME(r3, 0x5302) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000200)={0x8, 0xad, 0x40, 0x4, 0x8, 0xec}) getuid() socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fork() ptrace$setregset(0x4205, r4, 0x201, &(0x7f0000000000)={&(0x7f0000001780)="3a9ec60a5b4402d1e125d1f1a2362f69c8d7a2626bb7b16988784e12278a6108f428e5e5d2bd5c23fdc956e5ee20e46b33548696501cf4803b1df8dcf6d2c59b534026994da8114a614f9f0051132a6514c090eaf64e08657c48660956bcf02aa447ff962e15ba35ccadbffaf45090d0a41a2badb28a", 0x76}) r5 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x20001, 0x0) ioctl$CDROMREADRAW(r5, 0x5314, &(0x7f0000001800)={0x0, 0x1, 0x9, 0x5, 0x7}) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) [ 140.907756] loop7: detected capacity change from 0 to 40 [ 140.912448] loop0: detected capacity change from 0 to 264192 [ 140.914344] FAT-fs (loop0): Unrecognized mount option "un" or missing value [ 140.921415] ------------[ cut here ]------------ [ 140.921436] [ 140.921439] ====================================================== [ 140.921443] WARNING: possible circular locking dependency detected [ 140.921447] 6.0.0-rc6-next-20220923 #1 Not tainted [ 140.921453] ------------------------------------------------------ [ 140.921457] syz-executor.4/3979 is trying to acquire lock: [ 140.921464] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 140.921503] [ 140.921503] but task is already holding lock: [ 140.921507] ffff88800eede420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 140.921536] [ 140.921536] which lock already depends on the new lock. [ 140.921536] [ 140.921539] [ 140.921539] the existing dependency chain (in reverse order) is: [ 140.921542] [ 140.921542] -> #3 (&ctx->lock){....}-{2:2}: [ 140.921556] _raw_spin_lock+0x2a/0x40 [ 140.921575] __perf_event_task_sched_out+0x53b/0x18d0 [ 140.921588] __schedule+0xedd/0x2470 [ 140.921601] schedule+0xda/0x1b0 [ 140.921614] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.921626] syscall_exit_to_user_mode+0x19/0x40 [ 140.921638] do_syscall_64+0x48/0x90 [ 140.921655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.921667] [ 140.921667] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 140.921681] _raw_spin_lock_nested+0x30/0x40 [ 140.921699] raw_spin_rq_lock_nested+0x1e/0x30 [ 140.921712] task_fork_fair+0x63/0x4d0 [ 140.921729] sched_cgroup_fork+0x3d0/0x540 [ 140.921743] copy_process+0x4183/0x6e20 [ 140.921753] kernel_clone+0xe7/0x890 [ 140.921763] user_mode_thread+0xad/0xf0 [ 140.921773] rest_init+0x24/0x250 [ 140.921784] arch_call_rest_init+0xf/0x14 [ 140.921802] start_kernel+0x4c1/0x4e6 [ 140.921817] secondary_startup_64_no_verify+0xe0/0xeb [ 140.921831] [ 140.921831] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 140.921844] _raw_spin_lock_irqsave+0x39/0x60 [ 140.921862] try_to_wake_up+0xab/0x1930 [ 140.921875] up+0x75/0xb0 [ 140.921889] __up_console_sem+0x6e/0x80 [ 140.921905] console_unlock+0x46a/0x590 [ 140.921920] vprintk_emit+0x1bd/0x560 [ 140.921936] vprintk+0x84/0xa0 [ 140.921951] _printk+0xba/0xf1 [ 140.921963] kauditd_hold_skb.cold+0x3f/0x4e [ 140.921979] kauditd_send_queue+0x233/0x290 [ 140.921994] kauditd_thread+0x5da/0x9a0 [ 140.922008] kthread+0x2ed/0x3a0 [ 140.922022] ret_from_fork+0x22/0x30 [ 140.922034] [ 140.922034] -> #0 ((console_sem).lock){....}-{2:2}: [ 140.922048] __lock_acquire+0x2a02/0x5e70 [ 140.922064] lock_acquire+0x1a2/0x530 [ 140.922080] _raw_spin_lock_irqsave+0x39/0x60 [ 140.922098] down_trylock+0xe/0x70 [ 140.922112] __down_trylock_console_sem+0x3b/0xd0 [ 140.922127] vprintk_emit+0x16b/0x560 [ 140.922143] vprintk+0x84/0xa0 [ 140.922158] _printk+0xba/0xf1 [ 140.922168] report_bug.cold+0x72/0xab [ 140.922184] handle_bug+0x3c/0x70 [ 140.922200] exc_invalid_op+0x14/0x50 [ 140.922216] asm_exc_invalid_op+0x16/0x20 [ 140.922227] group_sched_out.part.0+0x2c7/0x460 [ 140.922238] ctx_sched_out+0x8f1/0xc10 [ 140.922248] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.922260] __schedule+0xedd/0x2470 [ 140.922273] schedule+0xda/0x1b0 [ 140.922285] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.922296] syscall_exit_to_user_mode+0x19/0x40 [ 140.922308] do_syscall_64+0x48/0x90 [ 140.922324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.922336] [ 140.922336] other info that might help us debug this: [ 140.922336] [ 140.922338] Chain exists of: [ 140.922338] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 140.922338] [ 140.922353] Possible unsafe locking scenario: [ 140.922353] [ 140.922356] CPU0 CPU1 [ 140.922358] ---- ---- [ 140.922361] lock(&ctx->lock); [ 140.922366] lock(&rq->__lock); [ 140.922373] lock(&ctx->lock); [ 140.922379] lock((console_sem).lock); [ 140.922385] [ 140.922385] *** DEADLOCK *** [ 140.922385] [ 140.922387] 2 locks held by syz-executor.4/3979: [ 140.922393] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 140.922422] #1: ffff88800eede420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 140.922449] [ 140.922449] stack backtrace: [ 140.922452] CPU: 1 PID: 3979 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 140.922465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 140.922481] Call Trace: [ 140.922485] [ 140.922489] dump_stack_lvl+0x8b/0xb3 [ 140.922507] check_noncircular+0x263/0x2e0 [ 140.922523] ? format_decode+0x26c/0xb50 [ 140.922539] ? print_circular_bug+0x450/0x450 [ 140.922556] ? enable_ptr_key_workfn+0x20/0x20 [ 140.922572] ? format_decode+0x26c/0xb50 [ 140.922589] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 140.922606] __lock_acquire+0x2a02/0x5e70 [ 140.922627] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 140.922649] lock_acquire+0x1a2/0x530 [ 140.922666] ? down_trylock+0xe/0x70 [ 140.922682] ? lock_release+0x750/0x750 [ 140.922702] ? vprintk+0x84/0xa0 [ 140.922719] _raw_spin_lock_irqsave+0x39/0x60 [ 140.922739] ? down_trylock+0xe/0x70 [ 140.922757] down_trylock+0xe/0x70 [ 140.922774] ? vprintk+0x84/0xa0 [ 140.922790] __down_trylock_console_sem+0x3b/0xd0 [ 140.922807] vprintk_emit+0x16b/0x560 [ 140.922825] vprintk+0x84/0xa0 [ 140.922842] _printk+0xba/0xf1 [ 140.922853] ? record_print_text.cold+0x16/0x16 [ 140.922869] ? report_bug.cold+0x66/0xab [ 140.922886] ? group_sched_out.part.0+0x2c7/0x460 [ 140.922898] report_bug.cold+0x72/0xab [ 140.922916] handle_bug+0x3c/0x70 [ 140.922933] exc_invalid_op+0x14/0x50 [ 140.922950] asm_exc_invalid_op+0x16/0x20 [ 140.922962] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 140.922977] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 140.922988] RSP: 0018:ffff88804161fc48 EFLAGS: 00010006 [ 140.922997] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.923005] RDX: ffff88800ff29ac0 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 140.923013] RBP: ffff888041bf0000 R08: 0000000000000005 R09: 0000000000000001 [ 140.923020] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800eede400 [ 140.923028] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 140.923039] ? group_sched_out.part.0+0x2c7/0x460 [ 140.923052] ? group_sched_out.part.0+0x2c7/0x460 [ 140.923065] ctx_sched_out+0x8f1/0xc10 [ 140.923078] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.923094] ? lock_is_held_type+0xd7/0x130 [ 140.923107] ? __perf_cgroup_move+0x160/0x160 [ 140.923119] ? set_next_entity+0x304/0x550 [ 140.923136] ? update_curr+0x267/0x740 [ 140.923154] ? lock_is_held_type+0xd7/0x130 [ 140.923167] __schedule+0xedd/0x2470 [ 140.923183] ? io_schedule_timeout+0x150/0x150 [ 140.923199] ? rcu_read_lock_sched_held+0x3e/0x80 [ 140.923220] schedule+0xda/0x1b0 [ 140.923234] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.923246] syscall_exit_to_user_mode+0x19/0x40 [ 140.923259] do_syscall_64+0x48/0x90 [ 140.923276] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.923289] RIP: 0033:0x7f4df3bcdb19 [ 140.923297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.923308] RSP: 002b:00007f4df1143218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.923318] RAX: 0000000000000001 RBX: 00007f4df3ce0f68 RCX: 00007f4df3bcdb19 [ 140.923326] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4df3ce0f6c [ 140.923333] RBP: 00007f4df3ce0f60 R08: 000000000000000e R09: 0000000000000000 [ 140.923340] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4df3ce0f6c [ 140.923347] R13: 00007ffdd04176df R14: 00007f4df1143300 R15: 0000000000022000 [ 140.923360] [ 140.925546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.925579] WARNING: CPU: 1 PID: 3979 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 140.926979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.927574] Modules linked in: [ 140.927581] CPU: 1 PID: 3979 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 140.944204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.944425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 140.944435] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 140.948433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.948595] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 140.975008] hrtimer: interrupt took 16822 ns [ 140.975077] RSP: 0018:ffff88804161fc48 EFLAGS: 00010006 [ 140.986295] random: crng reseeded on system resumption [ 140.986447] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.986457] RDX: ffff88800ff29ac0 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 140.986465] RBP: ffff888041bf0000 R08: 0000000000000005 R09: 0000000000000001 [ 140.986487] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800eede400 [ 140.986495] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 140.986505] FS: 00007f4df1143700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 140.986518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.986526] CR2: 0000001b2de20000 CR3: 000000004044e000 CR4: 0000000000350ee0 [ 140.986535] Call Trace: [ 140.986538] [ 140.986544] ctx_sched_out+0x8f1/0xc10 [ 140.986558] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.986574] ? lock_is_held_type+0xd7/0x130 [ 140.986588] ? __perf_cgroup_move+0x160/0x160 [ 140.986600] ? set_next_entity+0x304/0x550 [ 140.986618] ? update_curr+0x267/0x740 [ 140.986636] ? lock_is_held_type+0xd7/0x130 [ 140.986650] __schedule+0xedd/0x2470 [ 140.986667] ? io_schedule_timeout+0x150/0x150 [ 140.986685] ? rcu_read_lock_sched_held+0x3e/0x80 [ 140.986704] schedule+0xda/0x1b0 [ 140.986719] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.986732] syscall_exit_to_user_mode+0x19/0x40 [ 140.986745] do_syscall_64+0x48/0x90 [ 140.986763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.986776] RIP: 0033:0x7f4df3bcdb19 [ 140.986784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.986796] RSP: 002b:00007f4df1143218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.986808] RAX: 0000000000000001 RBX: 00007f4df3ce0f68 RCX: 00007f4df3bcdb19 [ 140.986816] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4df3ce0f6c [ 140.986824] RBP: 00007f4df3ce0f60 R08: 000000000000000e R09: 0000000000000000 [ 140.986832] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4df3ce0f6c [ 140.986839] R13: 00007ffdd04176df R14: 00007f4df1143300 R15: 0000000000022000 [ 140.986853] [ 140.986857] irq event stamp: 618 [ 140.986861] hardirqs last enabled at (617): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 140.986876] hardirqs last disabled at (618): [] __schedule+0x1225/0x2470 [ 140.986894] softirqs last enabled at (606): [] __irq_exit_rcu+0x11b/0x180 [ 140.986914] softirqs last disabled at (561): [] __irq_exit_rcu+0x11b/0x180 [ 140.986934] ---[ end trace 0000000000000000 ]--- [ 140.994150] loop0: detected capacity change from 0 to 264192 [ 141.017334] loop6: detected capacity change from 0 to 4096 [ 141.021190] FAT-fs (loop6): bogus number of FAT structure [ 141.021825] FAT-fs (loop6): Can't find a valid FAT filesystem [ 141.069702] FAT-fs (loop0): Unrecognized mount option "un" or missing value 12:23:25 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r2 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) r3 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x5000) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmctl$SHM_UNLOCK(r3, 0xc) pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmget(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12:23:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[], 0x78}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1d190000000000000000100000000c0004f50000000001000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) 12:23:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x0, '7R\n', 0x2, 0xef}) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x410, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}, 0x22}]}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x40, 0x40) [ 141.197158] random: crng reseeded on system resumption 12:23:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x6}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000040)=ANY=[@ANYRES64]) newfstatat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="65294f1b1b88db44200481bd29041947836d78", 0x13, 0x100000001}, {&(0x7f0000000240)="7b812a40366049c7b6c088734a99e44f8b8a0f85cecea93234771d69130fce743d20be6472a13c0aaaf3e8f340c8c6f289f4f27de6161ae2f9c0ce8861ace4b4d31e8dffcc031d45ff23f84b8dd931ad45adc12771beafa38675e034268284ddcd4cf495ae9021510e04795d0cc01860072c49494156e0523f74d40d7a8647156a5baa8865", 0x85, 0x6}], 0x20000, &(0x7f0000001a40)={[{@shortname_winnt}, {@uni_xlateno}, {@rodir}], [{@hash}, {@dont_hash}, {@dont_hash}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '/(-\x03'}}, {@permit_directio}, {@uid_gt={'uid>', r0}}, {@fowner_gt={'fowner>', 0xee01}}, {@fowner_lt={'fowner<', 0xee01}}, {@appraise_type}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/63, 0x3f}], 0x1, &(0x7f0000000340)=""/4096, 0x1000}, 0x10000) [ 141.225367] tmpfs: Bad value for 'mpol' [ 141.231139] tmpfs: Bad value for 'mpol' [ 141.259595] loop0: detected capacity change from 0 to 4096 [ 141.265284] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' 12:23:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x1c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)=@ethtool_eee={0x44, 0x0, 0xc7, 0x200, 0xfffffffc, 0x90000000, 0xffff, 0x5, [0x9c, 0x5]}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="e200330080800000080211000001080211000000505050505050"], 0x100}}, 0x0) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x101041, 0x0) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) [ 141.289565] loop0: detected capacity change from 0 to 264192 12:23:25 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r1 = shmget$private(0x0, 0x14000, 0x8, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) [ 141.337546] random: crng reseeded on system resumption [ 141.347107] Restarting kernel threads ... done. 12:23:25 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r1 = shmget$private(0x0, 0x14000, 0x8, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) [ 141.440246] random: crng reseeded on system resumption [ 141.448404] Restarting kernel threads ... done. [ 141.462546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.463897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.089647] loop0: detected capacity change from 0 to 4096 [ 142.090960] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 142.098388] loop0: detected capacity change from 0 to 264192 VM DIAGNOSIS: 12:23:25 Registers: info registers vcpu 0 RAX=00000000000041bb RBX=0000000000000001 RCX=ffffc900007cb000 RDX=0000000000040000 RSI=ffffffff812c6236 RDI=0000000000000001 RBP=ffff888041c3fb20 RSP=ffff888041c3fae8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000003e R13=ffff88800ff29ac0 R14=0000000000000000 R15=ffff888041c3fc40 RIP=ffffffff812c6238 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc80deaf700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc80deae130 CR3=000000001bf60000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000040000002 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88800ff29ac0 RSI=ffffffff812c6236 RDI=0000000000000001 RBP=ffff88804161f978 RSP=ffff88804161f940 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000004c R13=ffff8880416b5040 R14=0000000000000000 R15=ffff88804161f9c8 RIP=ffffffff812c6238 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4df1143700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2de20000 CR3=000000004044e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4df3cb47c0 00007f4df3cb47c8 YMM02=0000000000000000 0000000000000000 00007f4df3cb47e0 00007f4df3cb47c0 YMM03=0000000000000000 0000000000000000 00007f4df3cb47c8 00007f4df3cb47c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000