Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:62720' (ECDSA) to the list of known hosts. 2022/09/25 17:08:38 fuzzer started 2022/09/25 17:08:39 dialing manager at localhost:38881 syzkaller login: [ 39.686668] cgroup: Unknown subsys name 'net' [ 39.770326] cgroup: Unknown subsys name 'rlimit' 2022/09/25 17:08:53 syscalls: 2215 2022/09/25 17:08:53 code coverage: enabled 2022/09/25 17:08:53 comparison tracing: enabled 2022/09/25 17:08:53 extra coverage: enabled 2022/09/25 17:08:53 setuid sandbox: enabled 2022/09/25 17:08:53 namespace sandbox: enabled 2022/09/25 17:08:53 Android sandbox: enabled 2022/09/25 17:08:53 fault injection: enabled 2022/09/25 17:08:53 leak checking: enabled 2022/09/25 17:08:53 net packet injection: enabled 2022/09/25 17:08:53 net device setup: enabled 2022/09/25 17:08:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/25 17:08:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/25 17:08:53 USB emulation: enabled 2022/09/25 17:08:53 hci packet injection: enabled 2022/09/25 17:08:53 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/25 17:08:53 802.15.4 emulation: enabled 2022/09/25 17:08:53 fetching corpus: 50, signal 23057/24880 (executing program) 2022/09/25 17:08:53 fetching corpus: 100, signal 37920/41341 (executing program) 2022/09/25 17:08:53 fetching corpus: 150, signal 46373/51335 (executing program) 2022/09/25 17:08:53 fetching corpus: 200, signal 57278/63569 (executing program) 2022/09/25 17:08:53 fetching corpus: 250, signal 60930/68647 (executing program) 2022/09/25 17:08:53 fetching corpus: 300, signal 64598/73700 (executing program) 2022/09/25 17:08:54 fetching corpus: 350, signal 72323/82490 (executing program) 2022/09/25 17:08:54 fetching corpus: 400, signal 75998/87356 (executing program) 2022/09/25 17:08:54 fetching corpus: 450, signal 78428/91051 (executing program) 2022/09/25 17:08:54 fetching corpus: 500, signal 82077/95803 (executing program) 2022/09/25 17:08:54 fetching corpus: 550, signal 85801/100562 (executing program) 2022/09/25 17:08:54 fetching corpus: 600, signal 87994/103906 (executing program) 2022/09/25 17:08:54 fetching corpus: 650, signal 90148/107156 (executing program) 2022/09/25 17:08:55 fetching corpus: 700, signal 95246/112966 (executing program) 2022/09/25 17:08:55 fetching corpus: 750, signal 96922/115677 (executing program) 2022/09/25 17:08:55 fetching corpus: 800, signal 99951/119536 (executing program) 2022/09/25 17:08:55 fetching corpus: 850, signal 102042/122612 (executing program) 2022/09/25 17:08:55 fetching corpus: 900, signal 103783/125298 (executing program) 2022/09/25 17:08:55 fetching corpus: 950, signal 107291/129446 (executing program) 2022/09/25 17:08:55 fetching corpus: 1000, signal 108111/131359 (executing program) 2022/09/25 17:08:55 fetching corpus: 1050, signal 110705/134665 (executing program) 2022/09/25 17:08:56 fetching corpus: 1100, signal 114176/138721 (executing program) 2022/09/25 17:08:56 fetching corpus: 1150, signal 115800/141144 (executing program) 2022/09/25 17:08:56 fetching corpus: 1200, signal 117003/143246 (executing program) 2022/09/25 17:08:56 fetching corpus: 1250, signal 120206/146918 (executing program) 2022/09/25 17:08:56 fetching corpus: 1300, signal 121998/149451 (executing program) 2022/09/25 17:08:56 fetching corpus: 1350, signal 124823/152754 (executing program) 2022/09/25 17:08:56 fetching corpus: 1400, signal 126356/155042 (executing program) 2022/09/25 17:08:56 fetching corpus: 1450, signal 127641/157118 (executing program) 2022/09/25 17:08:57 fetching corpus: 1500, signal 129642/159709 (executing program) 2022/09/25 17:08:57 fetching corpus: 1550, signal 131008/161771 (executing program) 2022/09/25 17:08:57 fetching corpus: 1600, signal 132200/163667 (executing program) 2022/09/25 17:08:57 fetching corpus: 1650, signal 133546/165680 (executing program) 2022/09/25 17:08:57 fetching corpus: 1700, signal 134994/167729 (executing program) 2022/09/25 17:08:57 fetching corpus: 1750, signal 136610/169867 (executing program) 2022/09/25 17:08:57 fetching corpus: 1800, signal 137584/171545 (executing program) 2022/09/25 17:08:57 fetching corpus: 1850, signal 138410/173112 (executing program) 2022/09/25 17:08:57 fetching corpus: 1900, signal 139401/174752 (executing program) 2022/09/25 17:08:58 fetching corpus: 1950, signal 140371/176340 (executing program) 2022/09/25 17:08:58 fetching corpus: 2000, signal 141516/178040 (executing program) 2022/09/25 17:08:58 fetching corpus: 2050, signal 142662/179775 (executing program) 2022/09/25 17:08:58 fetching corpus: 2100, signal 143838/181477 (executing program) 2022/09/25 17:08:58 fetching corpus: 2150, signal 145280/183295 (executing program) 2022/09/25 17:08:58 fetching corpus: 2200, signal 146042/184662 (executing program) 2022/09/25 17:08:58 fetching corpus: 2250, signal 146543/185847 (executing program) 2022/09/25 17:08:58 fetching corpus: 2300, signal 147635/187438 (executing program) 2022/09/25 17:08:59 fetching corpus: 2350, signal 149149/189269 (executing program) 2022/09/25 17:08:59 fetching corpus: 2400, signal 150112/190702 (executing program) 2022/09/25 17:08:59 fetching corpus: 2450, signal 151178/192206 (executing program) 2022/09/25 17:08:59 fetching corpus: 2500, signal 153034/194207 (executing program) 2022/09/25 17:08:59 fetching corpus: 2550, signal 154203/195731 (executing program) 2022/09/25 17:08:59 fetching corpus: 2600, signal 155913/197586 (executing program) 2022/09/25 17:08:59 fetching corpus: 2650, signal 156629/198916 (executing program) 2022/09/25 17:08:59 fetching corpus: 2700, signal 157344/200090 (executing program) 2022/09/25 17:09:00 fetching corpus: 2750, signal 158679/201618 (executing program) 2022/09/25 17:09:00 fetching corpus: 2800, signal 159114/202691 (executing program) 2022/09/25 17:09:00 fetching corpus: 2850, signal 160369/204170 (executing program) 2022/09/25 17:09:00 fetching corpus: 2900, signal 162230/205988 (executing program) 2022/09/25 17:09:00 fetching corpus: 2950, signal 162873/207088 (executing program) 2022/09/25 17:09:00 fetching corpus: 3000, signal 163745/208303 (executing program) 2022/09/25 17:09:00 fetching corpus: 3050, signal 164441/209458 (executing program) 2022/09/25 17:09:00 fetching corpus: 3100, signal 165248/210615 (executing program) 2022/09/25 17:09:00 fetching corpus: 3150, signal 166387/211921 (executing program) 2022/09/25 17:09:01 fetching corpus: 3200, signal 167456/213185 (executing program) 2022/09/25 17:09:01 fetching corpus: 3250, signal 168022/214180 (executing program) 2022/09/25 17:09:01 fetching corpus: 3300, signal 169047/215364 (executing program) 2022/09/25 17:09:01 fetching corpus: 3350, signal 170010/216524 (executing program) 2022/09/25 17:09:01 fetching corpus: 3400, signal 170625/217503 (executing program) 2022/09/25 17:09:01 fetching corpus: 3450, signal 171369/218487 (executing program) 2022/09/25 17:09:01 fetching corpus: 3500, signal 172545/219737 (executing program) 2022/09/25 17:09:01 fetching corpus: 3550, signal 173265/220710 (executing program) 2022/09/25 17:09:01 fetching corpus: 3600, signal 174076/221739 (executing program) 2022/09/25 17:09:02 fetching corpus: 3650, signal 175341/222995 (executing program) 2022/09/25 17:09:02 fetching corpus: 3700, signal 175894/223922 (executing program) 2022/09/25 17:09:02 fetching corpus: 3750, signal 176447/224835 (executing program) 2022/09/25 17:09:02 fetching corpus: 3800, signal 177251/225807 (executing program) 2022/09/25 17:09:02 fetching corpus: 3850, signal 178496/226965 (executing program) 2022/09/25 17:09:02 fetching corpus: 3900, signal 178871/227730 (executing program) 2022/09/25 17:09:02 fetching corpus: 3950, signal 179354/228572 (executing program) 2022/09/25 17:09:02 fetching corpus: 4000, signal 180025/229461 (executing program) 2022/09/25 17:09:03 fetching corpus: 4050, signal 180816/230368 (executing program) 2022/09/25 17:09:03 fetching corpus: 4100, signal 181657/231247 (executing program) 2022/09/25 17:09:03 fetching corpus: 4150, signal 182515/232133 (executing program) 2022/09/25 17:09:03 fetching corpus: 4200, signal 183092/232964 (executing program) 2022/09/25 17:09:03 fetching corpus: 4250, signal 183934/233822 (executing program) 2022/09/25 17:09:03 fetching corpus: 4300, signal 185060/234820 (executing program) 2022/09/25 17:09:03 fetching corpus: 4350, signal 185986/235714 (executing program) 2022/09/25 17:09:03 fetching corpus: 4400, signal 186505/236463 (executing program) 2022/09/25 17:09:04 fetching corpus: 4450, signal 187580/237393 (executing program) 2022/09/25 17:09:04 fetching corpus: 4500, signal 188042/238083 (executing program) 2022/09/25 17:09:04 fetching corpus: 4550, signal 188605/238793 (executing program) 2022/09/25 17:09:04 fetching corpus: 4600, signal 189076/239497 (executing program) 2022/09/25 17:09:04 fetching corpus: 4650, signal 189674/240206 (executing program) 2022/09/25 17:09:04 fetching corpus: 4700, signal 190845/241051 (executing program) 2022/09/25 17:09:04 fetching corpus: 4750, signal 191498/241748 (executing program) 2022/09/25 17:09:04 fetching corpus: 4800, signal 191933/242411 (executing program) 2022/09/25 17:09:04 fetching corpus: 4850, signal 192290/242972 (executing program) 2022/09/25 17:09:05 fetching corpus: 4900, signal 193257/243703 (executing program) 2022/09/25 17:09:05 fetching corpus: 4950, signal 193827/244327 (executing program) 2022/09/25 17:09:05 fetching corpus: 5000, signal 194292/244993 (executing program) 2022/09/25 17:09:05 fetching corpus: 5050, signal 195290/245741 (executing program) 2022/09/25 17:09:05 fetching corpus: 5100, signal 195718/246344 (executing program) 2022/09/25 17:09:05 fetching corpus: 5150, signal 196258/246951 (executing program) 2022/09/25 17:09:05 fetching corpus: 5200, signal 196635/247556 (executing program) 2022/09/25 17:09:05 fetching corpus: 5250, signal 197191/248128 (executing program) 2022/09/25 17:09:05 fetching corpus: 5300, signal 197384/248668 (executing program) 2022/09/25 17:09:06 fetching corpus: 5350, signal 197978/249249 (executing program) 2022/09/25 17:09:06 fetching corpus: 5400, signal 198688/249827 (executing program) 2022/09/25 17:09:06 fetching corpus: 5450, signal 199403/250422 (executing program) 2022/09/25 17:09:06 fetching corpus: 5500, signal 200154/251016 (executing program) 2022/09/25 17:09:06 fetching corpus: 5550, signal 200554/251511 (executing program) 2022/09/25 17:09:06 fetching corpus: 5600, signal 201179/252085 (executing program) 2022/09/25 17:09:06 fetching corpus: 5650, signal 201512/252589 (executing program) 2022/09/25 17:09:06 fetching corpus: 5700, signal 202278/253150 (executing program) 2022/09/25 17:09:06 fetching corpus: 5750, signal 202777/253725 (executing program) 2022/09/25 17:09:07 fetching corpus: 5800, signal 203152/254195 (executing program) 2022/09/25 17:09:07 fetching corpus: 5850, signal 203638/254682 (executing program) 2022/09/25 17:09:07 fetching corpus: 5900, signal 204074/255218 (executing program) 2022/09/25 17:09:07 fetching corpus: 5950, signal 204379/255615 (executing program) 2022/09/25 17:09:07 fetching corpus: 6000, signal 205122/256121 (executing program) 2022/09/25 17:09:07 fetching corpus: 6050, signal 205731/256625 (executing program) 2022/09/25 17:09:07 fetching corpus: 6100, signal 206054/257068 (executing program) 2022/09/25 17:09:07 fetching corpus: 6150, signal 206590/257493 (executing program) 2022/09/25 17:09:07 fetching corpus: 6200, signal 207055/257916 (executing program) 2022/09/25 17:09:08 fetching corpus: 6250, signal 207791/258322 (executing program) 2022/09/25 17:09:08 fetching corpus: 6300, signal 208358/258726 (executing program) 2022/09/25 17:09:08 fetching corpus: 6350, signal 208620/259127 (executing program) 2022/09/25 17:09:08 fetching corpus: 6400, signal 209054/259538 (executing program) 2022/09/25 17:09:08 fetching corpus: 6450, signal 209396/259594 (executing program) 2022/09/25 17:09:08 fetching corpus: 6500, signal 210076/259600 (executing program) 2022/09/25 17:09:08 fetching corpus: 6550, signal 210642/259601 (executing program) 2022/09/25 17:09:08 fetching corpus: 6600, signal 211935/259611 (executing program) 2022/09/25 17:09:08 fetching corpus: 6650, signal 212399/259777 (executing program) 2022/09/25 17:09:09 fetching corpus: 6700, signal 212953/259777 (executing program) 2022/09/25 17:09:09 fetching corpus: 6750, signal 213486/259780 (executing program) 2022/09/25 17:09:09 fetching corpus: 6800, signal 213814/259780 (executing program) 2022/09/25 17:09:09 fetching corpus: 6850, signal 214723/259789 (executing program) 2022/09/25 17:09:09 fetching corpus: 6900, signal 215289/259795 (executing program) 2022/09/25 17:09:09 fetching corpus: 6950, signal 216066/259795 (executing program) 2022/09/25 17:09:09 fetching corpus: 6988, signal 216233/259795 (executing program) 2022/09/25 17:09:09 fetching corpus: 6988, signal 216233/259795 (executing program) 2022/09/25 17:09:12 starting 8 fuzzer processes 17:09:12 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x44800) ppoll(&(0x7f0000000080)=[{r0, 0x1204}, {r0, 0x8044}, {r0, 0x100e}, {r1, 0x4000}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x8000]}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x25e7, 0x1) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvmsg$unix(r2, &(0x7f0000001600)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/247, 0xf7}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x142) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2001}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r7) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000018c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r9, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="1b3ebc9bba10ff78e78f17a54d504d"}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000891}, 0x28048840) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r3, r11, 0x2) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a40), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001c80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8002020}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a80)={0x188, r12, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x78, r13, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x16}, @NL80211_ATTR_FRAME={0x36, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac=@device_b, {0x2, 0x706}}, @vht_group_id={0x15, 0x1, {0x2, "4807e0036e84a28cd8f49288bffae8c1"}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r10, {0x4}}, './file1\x00'}) openat(r14, &(0x7f0000001e80)='./file0\x00', 0x84080, 0x221) 17:09:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', r1) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "629a342188a937408b75b3cf6525a9a7fcef13bce11cc0a866cf733cfda87d16ff9a49616ebb164edf125ad70a7cdf933870bc9ae10741d8e3006dad6ce7175e", 0x23}, 0x48, r2) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="8c9add0666ffc4ba2bc3595ac1457d6d79d9eb39809a7941e855075657aa1e00f31be7dc80e2c10dc63d334d67c7062c4b72c3639867105e03620f5328c214d527805a9f3197de39614b89a65dd5079575e1b9a85b2a93622e50494d3072d501", 0x60, r2) request_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='keyring\x00', r1) add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="517c42110de8b8f87ba6ec1753ef9b31235533227b921e2884e8d54f9fffea891344b451dc473659e10dc55a29cec2b97c82dabf7aad9348cc8959022bf81a964dcad01019600cb1ce8098a5b1bec246bee9489e2b832bb2855eb6e2970ad66765dfa1aa797381c317b9b0400ebb12ab41c8280633d24a77f5d175cd100072513d1acb7af6db8f3df3720d09eb29dac11caf6c2c35bd85882d8d0371a8f9636c3124426fa00ceb71039454bdda6e19532c17fe53adb638a8d25bc7e2b7c124feaf22920b14b9a3463fabfd690b9f41c51b140dd8aceee46e4da7c0062b1a204c012d4113", 0xe4, 0xfffffffffffffff9) r4 = request_key(&(0x7f0000000680)='blacklist\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)='\x00', r1) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, r4) add_key(&(0x7f0000000740)='trusted\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)="f0099d48678a3f2ba656e2ed9223b8c8daba3c0a6405a8c1ad1b6ca000c1fdee3dfd04f74471f440ebe769cf9dafba8e348f10efcdd75b55958dc9fdbe1f16b7923cf67c917200e13636adca2a7f2cb0a4817fe23036ee", 0x57, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x52, 0x35, 0x66, 0x34, 0x38, 0x65, 0x36, 0x64, 0x32, 0x30, 0x33, 0x37, 0x36, 0x35, 0x35, 0x62]}, &(0x7f00000008c0)={0x0, "e04cf019f2950f9bf879575e37cc3ff269e4a08b00cd5ff81b73d870a91032a601814ba8889a25ec67c2ad00aaddc4efdc4cb3b3a5337331561378a0071a993e", 0x1b}, 0x48, r1) r6 = add_key(&(0x7f0000000940)='syzkaller\x00', &(0x7f0000000980)={'syz', 0x0}, &(0x7f00000009c0)="26b0c1d17f45bf511cd8afcfce510b4a1fafd3064050d9e7d5adb75977e0fbaf054de476b80cac86b1956f7ef6d82476cca319dbcd0eb511ef1fefa645d06b4304941cb006866a111608d214af113380734720db2e0337c67a12d57c0a0e", 0x5e, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r6, 0x0) r7 = add_key(&(0x7f0000000a40)='rxrpc_s\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)="c9d5e7598ebea23b770f357f411fbcdfedc9e0cb6341bfcb25408cbc", 0x1c, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r5, 0x1) add_key(&(0x7f0000000b00)='encrypted\x00', &(0x7f0000000b40)={'syz', 0x2}, &(0x7f0000000b80)="0bd318f235fef04c636b30afdb15ee54e79c2b3e4dfc540d7a4d1c7ccb2551315df9d69e3518a97bae14babe685c08ce9972ad7218adb6bbcd06d24b718404c9b148d9766020b573d87cfb8d5649a74020577c95ff452120f4e38e84f5be8a4b22a369f69eb38a40d10dd3ad87d2d885cd1db6544614dfc4ef2b50bae370c7cf0213642729e725256d36f1e8fac2858f7b0f4cb82f15806aeb80660d3a5c68d10d81c9fe9946fe409e81b6af47172c83a8d2d6ac00707e783f654c234423ade3e2722bc49cc4186ccf0242029728c2a33f", 0xd1, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000d00)={0x1f, 0x2, 0x2}, 0x6) r8 = request_key(&(0x7f0000000dc0)='id_resolver\x00', &(0x7f0000000e00)={'syz', 0x3}, &(0x7f0000000e40)='cifs.idmap\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x2}, 0x0, 0x0, r8) 17:09:12 executing program 2: sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() [ 72.934303] audit: type=1400 audit(1664125752.452:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:09:12 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/76, 0x4c}, {&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000100)=""/83, 0x53}], 0x3, 0x7, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000001) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@ng={0x4, 0xd, "47a4a8"}, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000002c0)={0x0, 0x9}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001300)={0x0, 0x7f}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002300), 0x800, 0x0) r3 = dup2(r0, r2) fstatfs(r2, &(0x7f0000002340)=""/137) r4 = socket$unix(0x1, 0x2, 0x0) tee(r4, r1, 0x1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000002400)={0x0, 0x9, [@local, @multicast, @broadcast, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @empty, @local, @broadcast, @empty]}) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000002480)={0x8, 0x0, {0xfffffffffffffffe, 0x3, 0xfcc, 0x1, 0xfd}, 0x7fffffff}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002500), 0xe42c0, 0x0) preadv(r6, &(0x7f0000003900)=[{&(0x7f0000002540)=""/8, 0x8}, {&(0x7f0000002580)=""/215, 0xd7}, {&(0x7f0000002680)}, {&(0x7f00000026c0)=""/204, 0xcc}, {&(0x7f00000027c0)=""/7, 0x7}, {&(0x7f0000002800)}, {&(0x7f0000002840)=""/18, 0x12}, {&(0x7f0000002880)=""/10, 0xa}, {&(0x7f00000028c0)=""/40, 0x28}, {&(0x7f0000002900)=""/4096, 0x1000}], 0xa, 0x5, 0x7) 17:09:12 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080041}, 0x880) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) preadv(r1, &(0x7f0000003500)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/144, 0x90}, {&(0x7f00000012c0)=""/54, 0x36}, {&(0x7f0000001300)=""/161, 0xa1}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/188, 0xbc}, {&(0x7f0000003480)=""/94, 0x5e}], 0x9, 0x3, 0x2) stat(&(0x7f0000003680)='./file0\x00', &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000035c0)='./file0\x00', &(0x7f0000003600), 0x2084000, &(0x7f0000003740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@fscache}, {@nodevmap}, {@cache_mmap}, {@version_9p2000}], [{@obj_role={'obj_role', 0x3d, 'nl80211\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '{@@@![*:'}}, {@fowner_gt={'fowner>', r2}}, {@obj_role={'obj_role', 0x3d, 'nl80211\x00'}}]}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003880), 0x80800, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000038c0)={{r1}, "9694ed48aa262b869ec0664dedc0929237804df37c3daff1e2be3d414ac29366f30d32acac168c881ed62198b9ea1672d12af2aea36f4a1e3f18178fc4f87ba0b2066b27e8089f38d561a093b41a6cb35e083bfc55ac427e66147e17c8cd25758ab2cfc890227ca32b3fa19d9202dd1a43f4d46a3c9624ca21887b7cdf90e4d0abfa7036d18787d396f3250c5e748dcf2f38f38c920b28a6d8407ce28f6983c65903d46305bcbf98100dc6555ca654ad9ee36f2938a4f9ca84b8382c8f617c5f1644bedfa9e0df433c22d689d975f825705131e3afd3a2d1f3ddf0e746437325d549851a92e973816a925d7943052d07d10bd6d8a8f23a329ec61c5c8433f98e9d0a36604bdd8011eca4e271b65bac48646d14c51fcb1c51136859688c49eca3a955278841cbf139ea5854a0db2fc51e2b680daa6a622aee5e76ad554d8ae2bbbae85aa945b896e425a65309c5cadeb6e401015e042185dc38db23bc791d254505e3f16766b3589a470dc91b841fb48aa3f58e0b53e899530628f635a7796ff95f7a4bbd719c26fe8758ffb11eb6afe4bf816ebcc68ea6ac32aea2dca928a6fd681a3340abc23a6c54e2570c560711c203269bc0336ea58ac6cd742a42713f97a1961b94c2982b506b420bb551f6a576913ab2421a0e706c9079138c7181a11e1bd6dc0b534c92277c39eaac945e52c79c5373c7bb59e47af07dca162d28b8d228a74c4fc43b8c79569d45f3763ceda3c55a46bcc86c56d4ebc3fc82838a26368205d54b1133f060717a126792fd193eb2c0283347a2837b0c1bdbba30ab681932a89b487088fa6d70101aa8a55a1ab09f9c6a897192ee20314eac8f3c9c90754ad149ac8530a8249c9e29117c0baf5cc553d76da416a43b58844f14de1785a798d6a13a22df71b82927c0af1fbdec40245128ee2cbcba65179ee8c4aa995762ea2aa857c466c77b0ed24157f716dc0406a31688eced40a080d2f920da7b7c9b75d3ee2be3af11d1c9686a072c1f8b838b7501582be7634dd9e6beea4635c75070017183c9a1e20760b6857100fe50d0570f626f167bf36a68f91b79161724accb70b678847bf2f588b6d226bc82d556b598d084f3bd0511328ec9d455f29c04e88339f09da8b092f6c14dd5f77bb09687b3e8841eb304e43e626158ab0523ef8738dabb1cba24ee0e69941ec05db239240980433baabb98338d6c9edb9fe8b7bad5fcb667f2a4dbc513c062eae8e4f5e35f966977a181bc8df606b65b68ae58b2eddc183995508f93ad252a43a336b110a5800b9c4ccdcf2ed77c0e3a0278a6297ffa6da7c2a0e00c6aa7ad8f884f3b63eb89ad784942ff57328fba741c5be2e7f70b7d3c448787ae49ee7e3f8e05209104df42147c0317f9bf9d11809c19ebfdd73372f451e5eaa5d998dca0f61986d1dfbd38126f4e14b503932f9aa7fcb9eb8a4f0d3151e8474cbf05718027da28d26631e9e72a05b8c2fce01497fc1976edd02c931d1e0e71533d441bcbfa682d3f9ac554ff0d15410b0a4ebe57989acb6c64bf3cd1b0db811d280ff6b7fdcdc042faff96140135156bd87fc2467830dbe17158457ec72411357881e3dac943ad110192c422bdc68f9fc19643ed101e67fab8aaa89d6802f3369f5d98b375a76119da2023bbbd115caa6e6756d5acbc6959acedf09496b93edf497f226854b2184294086c0095e2d12fb8f9e44a20fd9a0dad980edd216edf9e80430bc624792135bf64af93e180df0bfd5ecc96c5369df6323e012186342c3fb96fbdce6ddd3d3d26c65f2eafb7fc898e9d4276f85803b17a36829ed9ea5de7f65a8b4576ab025c01133bfa71f2681a46e0dfecfdc350fcc1921499f8fbce202d030d34237fa5ecee29587b806be85812288a50924ad92fb01e8ff6e11575f7917b4fbca869f2daced3d6b7c41b437a39a1250edca99831f973831106f6bdcc3dfe3c441ccee573b2f54b0284d956a0ff4dd6d577cd2b314bf2306dd34fbd51ec978dbe9da7a61be33cc95ca24c405698f8089ed7652f99f3953cdddfab1fc63f8c27b488e5e173daef289b4f2fedcb4ce75bc2510c6dee3f4a705ea571a8e5ef1be4cd2f15e0faa3170fb05fdefbd5a4369e74747d2b0e11d89e45e370138d3128a16fcd764642773edb4def556304bcc8aabf471306bc37936d21ce8fc366313c2ccbc633bcef3b27afcce1d9428f76b1cfa7a05893fa677f4f8082f8a0b208c51f6ef21d5454db03a7919c10f48ebe3f84a94e0f7d7c20601da9606b11c1f0efc98069191bb8ede830ff45f5ca798ac015f6b961547c2adc0427a00b680380ab224de9057cff62e25bad16bfb9b9ad5296385d93bbb6a045126a11f62d94e51a19d03da40cc6f79ff13d82145bc79faaee265969130ada1f0e7937236a69658faf066c97a82a9989aa3d13f416f84601d39fe463c652cb1f6ef0bf6064654c2fc22405fe1e6f81046d2d253510697b3209f5eb971099a44bb477b352159a333dea141cd696062e35935b563f1a82f487fd4e2c37d0f33067d272072d35ac84df30fe7260569ac5a4940304a0be7c6016864dc8614069874904d13ac077c2d38277f321c28e525f1712300062049d10d45be5a490148692dc252dc5c950aefe7b0df1868b4ca3427f8fcc615df59f5e3365c1d96dcb96ef6f870ae9a2ddc1d415058ca1bcbe569065d775190825aee35f97201039013e91777b53a9e4e0e6bdba87bab80280a9dff8c093d5f94e3fbc706aac1a17d3bde48696d253f80bec43ef67968f4b43e2deb0d7d2957a9ea40b8b9e8cb004c9a19e1d9bb034d0c153f78245f06ec9d679481722f3c9160164b3220439f131306961b171417de386fc0109f1a69d92b2f3d66da856c4f3a9ae923cdcc1794b708a9c6b13730676065a0f1c3b86330daaaae2580321a1f4f98194dfa1810be04e95e535033a74ad86ad9745e3b662a95be48097f964af35961cf872f6ec704dd09f2afd5cf5a114ef35c5b243285cebd38bc46e2a148329ce0c76a83b55058d488437b0a15e5c25c426db8bfe2cf5955c06bd9e3b69e32c325372a4bda6e434b626d5e0e6596eb9bb2e7303ce8a3e648ddc41390818649d739e254263d5c9357fa00afca221ffe7ba3f2e86f0d4c536cfc0a51585dbc81d7196ad58e521f8e4c86ebfe2d877defd7d1e4f2dd887912c042c83f9cbb16fee8a6ea68dbba383297f76be5b8234e9f7aae67eccf242defef7270952eff355d8aa26a7ef2f4a0fb19c8d13e4e7df7a2f5d0f3d4242485921760a1346a926681c6e4c5ce3bc1fe9fa6076ca5149c282065a45b15703a780294fd09a5363286f851701e0a03bcf4d7342ff30350fadb7c4cfc95ae38613c20753fed5be58b335bb96e3bdc3006f5f2cde04f396e03142b8d652eba6a7aeb55b280d28cbb4a6ff1ba1253c62d9c78d36ffe450c26f762a5aee05d5ea97df687287153de811e7bc7357cb02cfe8721b52eb20b86766cee2b54b71193334ea6116d8c11f9ac9037ff48619729447ca4191ccbe302d1f6f7da5df46acb3e486ddb63a58d39658f18004ac617ee74de9c1936a96a3ff4d74964fd547282d4873a603d35e6f7fee572d38366757e9780d59b2bbdcae9f2542eb61c5ee160e86bf9553937b3eeab77d5a18d3689adbcef24d22c21427aff6def6297066cfa1d32ae9c073a88eed4413d8836a0e68b690f5d8b093b1810b94e00cf681180bd147d8610067186dd88bd3a16072620536a4ff5f3391ef6ae8315e2a3b16a600f84a347d0ad7c15cf6b881263b3a6a328d28b28e04f10d432b06295385c9396b1f183c70e81a807b4a261eabc077e778ccd6082c3812b1139addb2fcaba91d7e46f7455eefddb08ee37ce9f8b0c1c11955893977a99a0f72c1f82629441b62a571c03d5f9d978a5d6c96039baff952ea6a59c9bb94dc1038baf0c7ab3b321f644c718c4e4f6faccfac17b2120aeefb8a8c0211a825a4de5b11a1ee3fe87765ed47bd3e44297361f1337aee605df77246fb2f7fa35ec1535d1662957ad83723967263601f514f460ef36066cc809716f48a4557546837320310212e0a836ae9db5bf96ff4d0d89c0470ffeab9b71d28083a1b5789fe8e7afd55b80503fe6fb0a4477ffe21d53da536130e997b99887289bc18332fde80a212a6b93a878181ebc13634a9dbded48b61a75476ae6a87a9daa6ef66afb3e84bb58bf7dee37b89d1cafedf990f7f37e76f6b4d136e938f66e17fb657723cf3d1476f14bea1ce02ad68c1033f959fb7c3db2667f741cb6957c57f384d735f82e74ccce2c05e8ab5ce3c8249c23c42a91af849a1ac3a030735ef4dbf8dde396f2814357bfa675d7b082ebe77632881e7c378251521e2c602eaf93512fed011e8a38e11a3f8943fa3a4262b820d35deb695eab608e29a2639b50ae45b24f389e7f3455b68f7b6a1c8bf443cfeeb5a28c7a6b2f2684f6641ebc1d253685221b0ac863c29b2eb4b7ea533378efab1aa1d79cc65b4d2121ed7660a8b733acc20e3ea65542df104c2ebff57145ce701f4a2860e8f57b992bdf18fe9a1522b0d596e8f5697f688606c2f83927a227f506616cc5623415f983e55de8e086ffe3ecca16fa2d0a1ca774f84398f5f2bb3336249fe50c7fff03bfadc39343b9073924386adfbefe150bb7c0a05d477debba8358ee0fe3273eb8e80d5712d9b138a76fb4ff4bdb4d6fc9e58e420857be7931d7cbceafe0b901f73aa291f955db8f7ee0dc2905985704b3e65fe28a85bba73729c679b450f25143fa88d918e0e7ff53da112efef4fda7db41dcc469e027c70aa736236b69f5d0d7a01a49c524c474ea710ff0623b853e1a738dda6d9099092ac7c94119eb9b718134943f1eb2f670e9e0f6c70d7e3c74a4dea55fafd7cefd3591d7029f859b493bd855902f3e259b33b6a2cd48a1eb085c31528db6a449ac120dd320b93c696e041178a588bcd9679094ef491c9abdb466296ae0583d5876d1f140a46a6b5de3a4510d7f7c24c785fe212e2ec11f6803978bc7cc7fb6a70394e7018120fa24458fe2604b4df7b66446a5b1ed996892951cf090aa73c2c7aad9af63337642801e96a31e74a0204313f055a6f8d326e204fc142add6875661f78c8ec4866b80ed688c0ace55ee279307e6d11e4fe812f2e673c95d5cce10574232804b2ce739f187b8b7240135ecc1094ee3e38b4aec1a5774d87caccb10c3ab7628f8c27f48ce74c46d3ac7a00e1b8f62bd6438a0af5dafac52ece71817b174437dc6015b8deca9e473240a04e1d813c7e305636f54c1ab4a5f4e19462fe1450e6432d2877d8700ec0400e9adbeadede3d08ab847bd79822cc0bdbe901ac7472426c8c1f67e7eed6439fdb891f610538d03fe6f9ad3a7e3fd310f2f0b1e337a538598f17b68af13f76a4c65694e967e93bcff6ea9052aa5c42eaa972e02fab7ab812874fcd7e8c19024e898afab2bb9793c65d50705f37939ee6a77aa2db865a14e58bf55315f5b499d7ce11217c9f33b133bbf754dd0a8e5970fa3cdcce23b3d74b11c815cfe8067483b8bf7e19bce3d817408e1bd3590e09cd8aa7c1c7fdf850bcee297da0b8e029ef7120a8308b2b839b95248f0930dd9c296e3235a828d2bca59aa47c5c49c5739e47bf5980dee16566cb651350ba0c7b1bac20d815182862919bc02cd613cadeffba1658e7e88560d6b558bda5e2e38caaad9f33e51596a78e12872fed58ccb6fb2a8edf728665790979fa5bdc8cbd8ba34fa3580ca6971fe2df7c84f676569563303"}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000048c0), 0x44000, 0x0) write$tcp_congestion(r4, &(0x7f0000004900)='cubic\x00', 0x6) r5 = pidfd_open(0x0, 0x0) write(r5, &(0x7f0000004940)="12f120d81e4b573e2a6b6e36184bcd84820b8ae640388a11e52cc3228c9a77843b69b5d66bd718c664774c8251186354264b62b9a5cecfe94bee1f34114d975b4d48a6aaadcd8971ef77b8728e36c471b8d930e3a79fc1c7e7daaeae5b8439f5980050b72accd1af747e696b7b95407dbf25d235582017a818840bb661685f4a1a41bc3aac3765b596b28b4dda3f6f618253ef43bdc457ecb2efaecf8aa0666a", 0xa0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004a40)={'vlan0\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000004a80)={@loopback, @multicast2, 0x0}, &(0x7f0000004ac0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000004b80)={'syztnl2\x00', &(0x7f0000004b00)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x2f, 0x4, 0x40, @empty, @private0, 0x10, 0x8000, 0x8000, 0xf41}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000004c40)={'erspan0\x00', &(0x7f0000004bc0)={'gretap0\x00', 0x0, 0x10, 0x8, 0x4, 0x5, {{0xb, 0x4, 0x3, 0x6, 0x2c, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @multicast1, {[@rr={0x7, 0x17, 0xc5, [@private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x30}, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000004d00)={'syztnl2\x00', &(0x7f0000004c80)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0xd1, 0x9, 0x1b, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x401, 0x7}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000004d40)={0x0, @dev, @broadcast}, &(0x7f0000004d80)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000005040)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005000)={&(0x7f0000004dc0)={0x234, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x82157c1dd64075fa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x11}, 0x80) fcntl$setflags(0xffffffffffffffff, 0x2, 0xf693d4f907014c0c) 17:09:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000000)={{}, "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"}) r1 = memfd_secret(0x80000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x401}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xac6b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048846}, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r2, 0x109, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1a400000, 0x78}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff, 0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000001880)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000001500)={0x330, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb708}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x5}}}}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "d6f06a19a2fc845948e5983dfdd7a2cc5d87c3daf774c1b9c787"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "16fe73392127ff7acfaa75dece6748a4c85a5837508917f011"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff001}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc0b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe58}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x32, 0x3, "1e2a37e2701df9684e6c99fb5babb7f446c7dc7fcc753db91308b2c6a90518287d9b754067223401393aa1cdeeef"}, @TIPC_NLA_NODE_ID={0xde, 0x3, "33e8d11ba09c4932cf7bdf00b8fbd1524950f880bd26b1c832e7a7f310f48146cf4d3968761b4a783195044ca32fa9e34bad107505bce0c51726f1ce7d1ba352023f7569b145b748689d6b1d051346eafc842058399d24a236d74f3ee7fc07d8271d253808bdb9a2ecf973fd90e593d7f2dd96443d8307d5b2bbe3458003dae8090f851d7744d783cdc1bda757ac5807b7131823dd50b9a3f2bd1850c924f2bf8d6031e429d1b0bdb7f9bf828776149cdbd6edd7b8d5803a68382c837cd543f05e965d44482b06d75e0318adbc34a861daf485550a8f0a3e6967"}]}]}, 0x330}}, 0x4010) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000018c0)=0x1) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xfc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x25}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "5d8662dc97336231e7941dc060fe3035ee318efd9333d9bfae2e40a60f9a8af0efe0f779cb2b980e6d89e03221704ac3c89e6e168113c63bcdde0e"}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "07e87db73f8757ee89fd8cf73d3471fbeb160b70d6349e21e7854f4361db847fed16665fbfdf3ee253af190b00e2bcbf0844a34258f850f24ac7081729e66e1c631852b0f38ceae2ee31713ab83f10a1c75257020f287025312063c985e7e9f8415a58552ee9f8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r5 = inotify_init() ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000001ac0)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001b40), 0x404002, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001b00), r6) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x38}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x455) 17:09:12 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x7) r0 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x14) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = fsmount(r0, 0x1, 0x3) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x0, [0x3ff, 0x18dad997], 0x14b}, 0x10) r2 = dup2(r1, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="f5c4f811f5fc89d5c264e44f21d5230820d90abdc36947bbc6cc2d3d04e7ff0e71fd17df0041c54561", 0x29}, {&(0x7f00000001c0)="db86cc6f1e0386f4e7eef27faa1bf4445cc0c2f96dcd08071265488f", 0x1c}, {&(0x7f0000000200)="d20dcc8ec183be31f2b4dfcd24a8a37edd0d63fca1dbd1fa03db79178b3e0f69376a281203135fe8faef64095ce31dffc009e803272b6e9367aef3842cc71f6a5dc676b36906dd3d87c3fd1b94fc8bf82aacd5ac91d1fb5ba4e539094774b1cddf60635b4330361d9bff54916cbad8d3d462f77bad", 0x75}, {&(0x7f0000000280)="c2dee582da1e1d4278a51d8e75ff8c0fe128a21c783a73018a689f419802ef2438b37b2b5c4985fe5578115a384822bc383295a6c3537b5682954170f1eccd6aede4158d42595cde171610f79ca8b3835a29deaa4163d0f521cabe9f42faecf4e7811ff741345134a6c2868de9aa9ed7ca838c5fd4e529d4377ee5c79cc319b27a04683c89f4bc0a78819fea79656584ab1e7f643540", 0x96}, {&(0x7f0000000340)="83caa12b84aed1a026aaf557c3f4b262aafd574b11c3352eeeacc77459e596ce56e74302b0169a700339a102802229513429bfc5bc0cac98fe0c136924edd2366eaf1d54c5185d5472b649af1b009ae1a5864a5134aa7ce05b78dec5e1bf800523fb64532825bb0e4b69e312b85695cfa3fd6a3208dbc3eaea718b65c54bc2ceb7159d78246b67d635b54d13a704f660", 0x90}, {&(0x7f0000000400)="8274d8ae03895ab2aa9db798b729ca1931a087cf0075c052a14ec58cf6fc167ffdfcc18256d2509d67b40f26630bddb98e0747a494e4fb4ef93eb44a93bf16d560c658616500cc", 0x47}], 0x6, 0x6, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', r4, 0x29, 0x40, 0x5, 0x1f, 0x4, @empty, @mcast1, 0x20, 0x700, 0x400, 0xfffffffd}}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}}, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r5) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl0\x00', r4, 0x4, 0x4, 0x2, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8000, 0x80, 0x7, 0xce}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'sit0\x00', r7, 0x4, 0x8, 0x0, 0xff, 0x23, @remote, @mcast2, 0x20, 0x20, 0x3, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000c80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xec, r8, 0x322, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008854) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000cc0)=0x7e) 17:09:12 executing program 7: ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) r2 = syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="d485a5b6bc74dfd280e7f678e155bd982e76703a3472a0156a21e4b9f4d3400827e1294663027ad71eefdf61960dda3e303f23cc209354cc6cebd8a7aa0cfd4c96d25e034e67625765f72e5e3f47e183ef145c1da893d6103032b748886d9f3665b836603cab4afac5285b4870d53d1e110f8e52", 0x74, 0x4}], 0x80000, &(0x7f0000000240)={[{'+!\'{[@)\\/#+$/'}, {'*\xcf'}, {}, {}, {'-(),D$'}], [{@fsname={'fsname', 0x3d, '-*\xd5\\&\xf7:/,\'-.'}}, {@fowner_gt={'fowner>', 0xee01}}]}) poll(&(0x7f00000002c0)=[{r1, 0x2010}, {r0}, {r2, 0x2000}, {r0, 0x34}], 0x4, 0x3f) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000300)=0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x836d1000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) fcntl$setsig(r1, 0xa, 0x2a) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) renameat(r3, &(0x7f00000003c0)='./file0/file0\x00', r3, &(0x7f0000000400)='./file0/file0\x00') ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000440)={0x1, 0x1, 0x16}) r5 = creat(&(0x7f0000000480)='.\x00', 0x23) write$binfmt_misc(r5, &(0x7f00000004c0)={'syz1', "b393091063db137f9f236a8571c16d27248c925b7df90e52ba0dfcf63f3185374e6e912b59c98d0db4e053d9fe71bf31d2293293455eee92b34fd3798725f1e5e49c37669b424eda55854f20d7bc907ab4aaa0b72a25175060ecbdf465086af7aa9e6f"}, 0x67) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x84000, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18}, './file0\x00'}) renameat2(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', r2, &(0x7f0000000640)='./file0\x00', 0x4) [ 74.248963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.251655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.254035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.257064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.258853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.260117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.265483] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.307365] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.309109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.310498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.314144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.324213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.326234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.327465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.329427] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.331369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.334791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.338729] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.340111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.341891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.344630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.345988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.387814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.393749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.397857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.399116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.408445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.414669] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.415839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.424044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.447403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.450206] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.455266] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.455743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.459074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.461141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.464521] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.466645] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.468235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.470071] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.471153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.474310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.477295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.479354] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.480686] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.481034] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.491787] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.498838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.518381] Bluetooth: hci2: HCI_REQ-0x0c1a [ 76.335143] Bluetooth: hci0: command 0x0409 tx timeout [ 76.399657] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 76.400881] Bluetooth: hci1: command 0x0409 tx timeout [ 76.462629] Bluetooth: hci4: command 0x0409 tx timeout [ 76.526626] Bluetooth: hci6: command 0x0409 tx timeout [ 76.527296] Bluetooth: hci7: command 0x0409 tx timeout [ 76.527795] Bluetooth: hci3: command 0x0409 tx timeout [ 76.590641] Bluetooth: hci2: command 0x0409 tx timeout [ 78.382633] Bluetooth: hci0: command 0x041b tx timeout [ 78.447599] Bluetooth: hci1: command 0x041b tx timeout [ 78.510617] Bluetooth: hci4: command 0x041b tx timeout [ 78.574635] Bluetooth: hci3: command 0x041b tx timeout [ 78.575132] Bluetooth: hci7: command 0x041b tx timeout [ 78.575590] Bluetooth: hci6: command 0x041b tx timeout [ 78.638600] Bluetooth: hci2: command 0x041b tx timeout [ 80.431580] Bluetooth: hci0: command 0x040f tx timeout [ 80.494587] Bluetooth: hci1: command 0x040f tx timeout [ 80.559650] Bluetooth: hci4: command 0x040f tx timeout [ 80.623606] Bluetooth: hci6: command 0x040f tx timeout [ 80.624075] Bluetooth: hci7: command 0x040f tx timeout [ 80.624490] Bluetooth: hci3: command 0x040f tx timeout [ 80.687568] Bluetooth: hci2: command 0x040f tx timeout [ 81.519597] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 82.479592] Bluetooth: hci0: command 0x0419 tx timeout [ 82.542669] Bluetooth: hci1: command 0x0419 tx timeout [ 82.608002] Bluetooth: hci4: command 0x0419 tx timeout [ 82.670613] Bluetooth: hci3: command 0x0419 tx timeout [ 82.671068] Bluetooth: hci7: command 0x0419 tx timeout [ 82.671476] Bluetooth: hci6: command 0x0419 tx timeout [ 82.736205] Bluetooth: hci2: command 0x0419 tx timeout [ 86.190594] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 88.853237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.855255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.855985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.857699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.858975] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.860017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.903660] Bluetooth: hci5: HCI_REQ-0x0c1a [ 90.926769] Bluetooth: hci5: command 0x0409 tx timeout [ 92.975633] Bluetooth: hci5: command 0x041b tx timeout [ 95.022670] Bluetooth: hci5: command 0x040f tx timeout [ 97.070596] Bluetooth: hci5: command 0x0419 tx timeout 17:10:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500), 0x0, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) [ 125.339597] audit: type=1400 audit(1664125804.857:7): avc: denied { open } for pid=3716 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.341152] audit: type=1400 audit(1664125804.858:8): avc: denied { kernel } for pid=3716 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.356957] ------------[ cut here ]------------ [ 125.356980] [ 125.356983] ====================================================== [ 125.356987] WARNING: possible circular locking dependency detected [ 125.356991] 6.0.0-rc6-next-20220923 #1 Not tainted [ 125.356998] ------------------------------------------------------ [ 125.357001] syz-executor.2/3717 is trying to acquire lock: [ 125.357008] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.357047] [ 125.357047] but task is already holding lock: [ 125.357050] ffff8880402a8420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.357078] [ 125.357078] which lock already depends on the new lock. [ 125.357078] [ 125.357080] [ 125.357080] the existing dependency chain (in reverse order) is: [ 125.357083] [ 125.357083] -> #3 (&ctx->lock){....}-{2:2}: [ 125.357097] _raw_spin_lock+0x2a/0x40 [ 125.357115] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.357128] __schedule+0xedd/0x2470 [ 125.357141] schedule+0xda/0x1b0 [ 125.357153] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.357165] syscall_exit_to_user_mode+0x19/0x40 [ 125.357177] do_syscall_64+0x48/0x90 [ 125.357193] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.357205] [ 125.357205] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.357218] _raw_spin_lock_nested+0x30/0x40 [ 125.357236] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.357249] task_fork_fair+0x63/0x4d0 [ 125.357268] sched_cgroup_fork+0x3d0/0x540 [ 125.357288] copy_process+0x4183/0x6e20 [ 125.357298] kernel_clone+0xe7/0x890 [ 125.357308] user_mode_thread+0xad/0xf0 [ 125.357318] rest_init+0x24/0x250 [ 125.357329] arch_call_rest_init+0xf/0x14 [ 125.357346] start_kernel+0x4c1/0x4e6 [ 125.357361] secondary_startup_64_no_verify+0xe0/0xeb [ 125.357375] [ 125.357375] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.357388] _raw_spin_lock_irqsave+0x39/0x60 [ 125.357406] try_to_wake_up+0xab/0x1930 [ 125.357419] up+0x75/0xb0 [ 125.357432] __up_console_sem+0x6e/0x80 [ 125.357447] console_unlock+0x46a/0x590 [ 125.357463] do_con_write+0xc05/0x1d50 [ 125.357474] con_write+0x21/0x40 [ 125.357484] n_tty_write+0x4d4/0xfe0 [ 125.357497] file_tty_write.constprop.0+0x49c/0x8f0 [ 125.357510] vfs_write+0x9c3/0xd90 [ 125.357527] ksys_write+0x127/0x250 [ 125.357544] do_syscall_64+0x3b/0x90 [ 125.357560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.357572] [ 125.357572] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.357585] __lock_acquire+0x2a02/0x5e70 [ 125.357601] lock_acquire+0x1a2/0x530 [ 125.357617] _raw_spin_lock_irqsave+0x39/0x60 [ 125.357635] down_trylock+0xe/0x70 [ 125.357649] __down_trylock_console_sem+0x3b/0xd0 [ 125.357664] vprintk_emit+0x16b/0x560 [ 125.357680] vprintk+0x84/0xa0 [ 125.357695] _printk+0xba/0xf1 [ 125.357706] report_bug.cold+0x72/0xab [ 125.357721] handle_bug+0x3c/0x70 [ 125.357737] exc_invalid_op+0x14/0x50 [ 125.357753] asm_exc_invalid_op+0x16/0x20 [ 125.357764] group_sched_out.part.0+0x2c7/0x460 [ 125.357775] ctx_sched_out+0x8f1/0xc10 [ 125.357784] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.357797] __schedule+0xedd/0x2470 [ 125.357810] schedule+0xda/0x1b0 [ 125.357822] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.357833] syscall_exit_to_user_mode+0x19/0x40 [ 125.357844] do_syscall_64+0x48/0x90 [ 125.357860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.357872] [ 125.357872] other info that might help us debug this: [ 125.357872] [ 125.357875] Chain exists of: [ 125.357875] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.357875] [ 125.357889] Possible unsafe locking scenario: [ 125.357889] [ 125.357891] CPU0 CPU1 [ 125.357893] ---- ---- [ 125.357896] lock(&ctx->lock); [ 125.357901] lock(&rq->__lock); [ 125.357907] lock(&ctx->lock); [ 125.357913] lock((console_sem).lock); [ 125.357919] [ 125.357919] *** DEADLOCK *** [ 125.357919] [ 125.357921] 2 locks held by syz-executor.2/3717: [ 125.357927] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.357956] #1: ffff8880402a8420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.357983] [ 125.357983] stack backtrace: [ 125.357986] CPU: 0 PID: 3717 Comm: syz-executor.2 Not tainted 6.0.0-rc6-next-20220923 #1 [ 125.357998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.358006] Call Trace: [ 125.358010] [ 125.358014] dump_stack_lvl+0x8b/0xb3 [ 125.358031] check_noncircular+0x263/0x2e0 [ 125.358048] ? format_decode+0x26c/0xb50 [ 125.358064] ? print_circular_bug+0x450/0x450 [ 125.358080] ? enable_ptr_key_workfn+0x20/0x20 [ 125.358097] ? format_decode+0x26c/0xb50 [ 125.358113] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.358130] __lock_acquire+0x2a02/0x5e70 [ 125.358151] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.358173] lock_acquire+0x1a2/0x530 [ 125.358190] ? down_trylock+0xe/0x70 [ 125.358206] ? lock_release+0x750/0x750 [ 125.358226] ? vprintk+0x84/0xa0 [ 125.358243] _raw_spin_lock_irqsave+0x39/0x60 [ 125.358262] ? down_trylock+0xe/0x70 [ 125.358277] down_trylock+0xe/0x70 [ 125.358292] ? vprintk+0x84/0xa0 [ 125.358309] __down_trylock_console_sem+0x3b/0xd0 [ 125.358326] vprintk_emit+0x16b/0x560 [ 125.358344] vprintk+0x84/0xa0 [ 125.358361] _printk+0xba/0xf1 [ 125.358372] ? record_print_text.cold+0x16/0x16 [ 125.358387] ? report_bug.cold+0x66/0xab [ 125.358405] ? group_sched_out.part.0+0x2c7/0x460 [ 125.358416] report_bug.cold+0x72/0xab [ 125.358434] handle_bug+0x3c/0x70 [ 125.358451] exc_invalid_op+0x14/0x50 [ 125.358468] asm_exc_invalid_op+0x16/0x20 [ 125.358481] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.358494] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.358506] RSP: 0018:ffff88802061fc48 EFLAGS: 00010006 [ 125.358515] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.358523] RDX: ffff88800dc6d040 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 125.358530] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 125.358538] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff8880402a8400 [ 125.358545] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 125.358556] ? group_sched_out.part.0+0x2c7/0x460 [ 125.358569] ? group_sched_out.part.0+0x2c7/0x460 [ 125.358582] ctx_sched_out+0x8f1/0xc10 [ 125.358595] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.358610] ? lock_is_held_type+0xd7/0x130 [ 125.358623] ? __perf_cgroup_move+0x160/0x160 [ 125.358635] ? set_next_entity+0x304/0x550 [ 125.358652] ? update_curr+0x267/0x740 [ 125.358670] ? lock_is_held_type+0xd7/0x130 [ 125.358684] __schedule+0xedd/0x2470 [ 125.358700] ? io_schedule_timeout+0x150/0x150 [ 125.358716] ? rcu_read_lock_sched_held+0x3e/0x80 [ 125.358735] schedule+0xda/0x1b0 [ 125.358750] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.358762] syscall_exit_to_user_mode+0x19/0x40 [ 125.358775] do_syscall_64+0x48/0x90 [ 125.358792] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.358804] RIP: 0033:0x7f169ba06b19 [ 125.358813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.358823] RSP: 002b:00007f1698f7c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.358834] RAX: 0000000000000001 RBX: 00007f169bb19f68 RCX: 00007f169ba06b19 [ 125.358841] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f169bb19f6c [ 125.358849] RBP: 00007f169bb19f60 R08: 000000000000000e R09: 0000000000000000 [ 125.358856] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f169bb19f6c [ 125.358863] R13: 00007ffe9d12cf7f R14: 00007f1698f7c300 R15: 0000000000022000 [ 125.358876] [ 125.414382] WARNING: CPU: 0 PID: 3717 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.415021] Modules linked in: [ 125.415250] CPU: 0 PID: 3717 Comm: syz-executor.2 Not tainted 6.0.0-rc6-next-20220923 #1 [ 125.415811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.416594] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.416973] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.418232] RSP: 0018:ffff88802061fc48 EFLAGS: 00010006 [ 125.418605] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.419100] RDX: ffff88800dc6d040 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 125.419590] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 125.420089] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff8880402a8400 [ 125.420581] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 125.421073] FS: 00007f1698f7c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.421634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.422044] CR2: 0000563913853000 CR3: 00000000401ee000 CR4: 0000000000350ef0 [ 125.422538] Call Trace: [ 125.422722] [ 125.422885] ctx_sched_out+0x8f1/0xc10 [ 125.423164] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.423530] ? lock_is_held_type+0xd7/0x130 [ 125.423835] ? __perf_cgroup_move+0x160/0x160 [ 125.424155] ? set_next_entity+0x304/0x550 [ 125.424460] ? update_curr+0x267/0x740 [ 125.424758] ? lock_is_held_type+0xd7/0x130 [ 125.425087] __schedule+0xedd/0x2470 [ 125.425381] ? io_schedule_timeout+0x150/0x150 [ 125.425724] ? rcu_read_lock_sched_held+0x3e/0x80 [ 125.426088] schedule+0xda/0x1b0 [ 125.426345] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.426704] syscall_exit_to_user_mode+0x19/0x40 [ 125.427057] do_syscall_64+0x48/0x90 [ 125.427343] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.427725] RIP: 0033:0x7f169ba06b19 [ 125.428001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.429327] RSP: 002b:00007f1698f7c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.429887] RAX: 0000000000000001 RBX: 00007f169bb19f68 RCX: 00007f169ba06b19 [ 125.430400] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f169bb19f6c [ 125.430901] RBP: 00007f169bb19f60 R08: 000000000000000e R09: 0000000000000000 [ 125.431427] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f169bb19f6c [ 125.431946] R13: 00007ffe9d12cf7f R14: 00007f1698f7c300 R15: 0000000000022000 [ 125.432457] [ 125.432629] irq event stamp: 1082 [ 125.432876] hardirqs last enabled at (1081): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 125.433577] hardirqs last disabled at (1082): [] __schedule+0x1225/0x2470 [ 125.434194] softirqs last enabled at (942): [] __irq_exit_rcu+0x11b/0x180 [ 125.434816] softirqs last disabled at (719): [] __irq_exit_rcu+0x11b/0x180 [ 125.435436] ---[ end trace 0000000000000000 ]--- [ 125.693706] loop2: detected capacity change from 0 to 2048 [ 125.732277] EXT4-fs error (device loop2): __ext4_fill_super:5244: inode #2: comm syz-executor.2: iget: root inode unallocated [ 125.735135] EXT4-fs (loop2): get root inode failed [ 125.735642] EXT4-fs (loop2): mount failed [ 125.759271] loop2: detected capacity change from 0 to 2048 [ 125.774952] EXT4-fs error (device loop2): __ext4_fill_super:5244: inode #2: comm syz-executor.2: iget: root inode unallocated [ 125.776472] EXT4-fs (loop2): get root inode failed [ 125.776891] EXT4-fs (loop2): mount failed 17:10:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500), 0x0, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) [ 125.853478] loop2: detected capacity change from 0 to 2048 [ 125.873038] EXT4-fs error (device loop2): __ext4_fill_super:5244: inode #2: comm syz-executor.2: iget: root inode unallocated [ 125.874381] EXT4-fs (loop2): get root inode failed [ 125.874996] EXT4-fs (loop2): mount failed 17:10:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500), 0x0, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) [ 125.979441] loop2: detected capacity change from 0 to 2048 [ 126.018269] EXT4-fs error (device loop2): __ext4_fill_super:5244: inode #2: comm syz-executor.2: iget: root inode unallocated [ 126.019377] EXT4-fs (loop2): get root inode failed [ 126.019992] EXT4-fs (loop2): mount failed 17:10:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500), 0x0, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) [ 126.106091] loop2: detected capacity change from 0 to 2048 [ 126.129493] EXT4-fs error (device loop2): __ext4_fill_super:5244: inode #2: comm syz-executor.2: iget: root inode unallocated [ 126.130680] EXT4-fs (loop2): get root inode failed [ 126.131056] EXT4-fs (loop2): mount failed 17:10:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500), 0x0, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) [ 126.219370] loop2: detected capacity change from 0 to 2048 [ 126.260951] EXT4-fs error (device loop2): __ext4_fill_super:5244: inode #2: comm syz-executor.2: iget: root inode unallocated [ 126.262424] EXT4-fs (loop2): get root inode failed [ 126.262857] EXT4-fs (loop2): mount failed [ 130.344757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4000 comm=syz-executor.6 [ 130.396079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4004 comm=syz-executor.6 VM DIAGNOSIS: 17:10:05 Registers: info registers vcpu 0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88802061f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001 R12=0000000000000064 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1698f7c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563913853000 CR3=00000000401ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f169baed7c0 00007f169baed7c8 YMM02=0000000000000000 0000000000000000 00007f169baed7e0 00007f169baed7c0 YMM03=0000000000000000 0000000000000000 00007f169baed7c8 00007f169baed7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=fffffffffbb201d3 RBX=ffffffff85bb0a20 RCX=ffffffff816d0de0 RDX=0000000000000000 RSI=ffffffff85eceeac RDI=ffffffff85bb0a20 RBP=ffffffff85bb0a20 RSP=ffff888008a17490 R8 =ffffffff85eceeac R9 =ffffffff85ece0ca R10=ffffed1001142eb8 R11=000000000003603d R12=ffffffff85bb0a20 R13=ffffffff85bb0a20 R14=ffffffff85bb0a20 R15=dffffc0000000000 RIP=ffffffff81119c03 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd870a871f0 CR3=000000001b046000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000