Warning: Permanently added '[localhost]:15776' (ECDSA) to the list of known hosts. 2022/09/26 21:23:40 fuzzer started 2022/09/26 21:23:40 dialing manager at localhost:38881 syzkaller login: [ 37.666037] cgroup: Unknown subsys name 'net' [ 37.789348] cgroup: Unknown subsys name 'rlimit' 2022/09/26 21:23:53 syscalls: 2215 2022/09/26 21:23:53 code coverage: enabled 2022/09/26 21:23:53 comparison tracing: enabled 2022/09/26 21:23:53 extra coverage: enabled 2022/09/26 21:23:53 setuid sandbox: enabled 2022/09/26 21:23:53 namespace sandbox: enabled 2022/09/26 21:23:53 Android sandbox: enabled 2022/09/26 21:23:53 fault injection: enabled 2022/09/26 21:23:53 leak checking: enabled 2022/09/26 21:23:53 net packet injection: enabled 2022/09/26 21:23:53 net device setup: enabled 2022/09/26 21:23:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/26 21:23:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/26 21:23:53 USB emulation: enabled 2022/09/26 21:23:53 hci packet injection: enabled 2022/09/26 21:23:53 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/26 21:23:53 802.15.4 emulation: enabled 2022/09/26 21:23:54 fetching corpus: 50, signal 24339/26158 (executing program) 2022/09/26 21:23:54 fetching corpus: 100, signal 35938/39426 (executing program) 2022/09/26 21:23:54 fetching corpus: 150, signal 41600/46697 (executing program) 2022/09/26 21:23:54 fetching corpus: 200, signal 45062/51747 (executing program) 2022/09/26 21:23:54 fetching corpus: 250, signal 55983/63950 (executing program) 2022/09/26 21:23:54 fetching corpus: 300, signal 62525/71797 (executing program) 2022/09/26 21:23:54 fetching corpus: 350, signal 69261/79735 (executing program) 2022/09/26 21:23:55 fetching corpus: 400, signal 71957/83734 (executing program) 2022/09/26 21:23:55 fetching corpus: 450, signal 77369/90291 (executing program) 2022/09/26 21:23:55 fetching corpus: 500, signal 79428/93665 (executing program) 2022/09/26 21:23:55 fetching corpus: 550, signal 84778/99956 (executing program) 2022/09/26 21:23:55 fetching corpus: 600, signal 86619/102980 (executing program) 2022/09/26 21:23:55 fetching corpus: 650, signal 89208/106752 (executing program) 2022/09/26 21:23:55 fetching corpus: 700, signal 91335/110016 (executing program) 2022/09/26 21:23:55 fetching corpus: 750, signal 94968/114535 (executing program) 2022/09/26 21:23:55 fetching corpus: 800, signal 97718/118271 (executing program) 2022/09/26 21:23:56 fetching corpus: 850, signal 98674/120370 (executing program) 2022/09/26 21:23:56 fetching corpus: 900, signal 100795/123482 (executing program) 2022/09/26 21:23:56 fetching corpus: 950, signal 103813/127275 (executing program) 2022/09/26 21:23:56 fetching corpus: 1000, signal 105137/129615 (executing program) 2022/09/26 21:23:56 fetching corpus: 1050, signal 108210/133455 (executing program) 2022/09/26 21:23:56 fetching corpus: 1100, signal 109492/135716 (executing program) 2022/09/26 21:23:56 fetching corpus: 1150, signal 110842/138047 (executing program) 2022/09/26 21:23:56 fetching corpus: 1200, signal 113045/141055 (executing program) 2022/09/26 21:23:56 fetching corpus: 1250, signal 114686/143555 (executing program) 2022/09/26 21:23:57 fetching corpus: 1300, signal 115811/145622 (executing program) 2022/09/26 21:23:57 fetching corpus: 1350, signal 117836/148364 (executing program) 2022/09/26 21:23:57 fetching corpus: 1400, signal 119314/150653 (executing program) 2022/09/26 21:23:57 fetching corpus: 1450, signal 121453/153471 (executing program) 2022/09/26 21:23:57 fetching corpus: 1500, signal 122680/155528 (executing program) 2022/09/26 21:23:57 fetching corpus: 1550, signal 123648/157380 (executing program) 2022/09/26 21:23:57 fetching corpus: 1600, signal 125757/160068 (executing program) 2022/09/26 21:23:57 fetching corpus: 1650, signal 127003/162062 (executing program) 2022/09/26 21:23:58 fetching corpus: 1700, signal 127627/163584 (executing program) 2022/09/26 21:23:58 fetching corpus: 1750, signal 128995/165662 (executing program) 2022/09/26 21:23:58 fetching corpus: 1800, signal 131312/168439 (executing program) 2022/09/26 21:23:58 fetching corpus: 1850, signal 132894/170651 (executing program) 2022/09/26 21:23:58 fetching corpus: 1900, signal 134065/172496 (executing program) 2022/09/26 21:23:58 fetching corpus: 1950, signal 136229/175045 (executing program) 2022/09/26 21:23:58 fetching corpus: 2000, signal 137692/177101 (executing program) 2022/09/26 21:23:58 fetching corpus: 2050, signal 139232/179166 (executing program) 2022/09/26 21:23:59 fetching corpus: 2100, signal 140397/180950 (executing program) 2022/09/26 21:23:59 fetching corpus: 2150, signal 141860/182965 (executing program) 2022/09/26 21:23:59 fetching corpus: 2200, signal 142877/184602 (executing program) 2022/09/26 21:23:59 fetching corpus: 2250, signal 143647/186060 (executing program) 2022/09/26 21:23:59 fetching corpus: 2300, signal 144895/187838 (executing program) 2022/09/26 21:23:59 fetching corpus: 2350, signal 146335/189686 (executing program) 2022/09/26 21:23:59 fetching corpus: 2400, signal 147576/191422 (executing program) 2022/09/26 21:23:59 fetching corpus: 2450, signal 148264/192755 (executing program) 2022/09/26 21:24:00 fetching corpus: 2500, signal 150618/195177 (executing program) 2022/09/26 21:24:00 fetching corpus: 2550, signal 151813/196820 (executing program) 2022/09/26 21:24:00 fetching corpus: 2600, signal 153117/198484 (executing program) 2022/09/26 21:24:00 fetching corpus: 2650, signal 154263/200044 (executing program) 2022/09/26 21:24:00 fetching corpus: 2700, signal 154957/201310 (executing program) 2022/09/26 21:24:00 fetching corpus: 2750, signal 156313/203001 (executing program) 2022/09/26 21:24:00 fetching corpus: 2800, signal 157150/204320 (executing program) 2022/09/26 21:24:00 fetching corpus: 2850, signal 157921/205601 (executing program) 2022/09/26 21:24:00 fetching corpus: 2900, signal 158460/206740 (executing program) 2022/09/26 21:24:00 fetching corpus: 2950, signal 159412/208095 (executing program) 2022/09/26 21:24:01 fetching corpus: 3000, signal 161238/209931 (executing program) 2022/09/26 21:24:01 fetching corpus: 3050, signal 162089/211248 (executing program) 2022/09/26 21:24:01 fetching corpus: 3100, signal 162775/212446 (executing program) 2022/09/26 21:24:01 fetching corpus: 3150, signal 163570/213702 (executing program) 2022/09/26 21:24:01 fetching corpus: 3200, signal 164200/214850 (executing program) 2022/09/26 21:24:01 fetching corpus: 3250, signal 165379/216234 (executing program) 2022/09/26 21:24:01 fetching corpus: 3300, signal 166007/217349 (executing program) 2022/09/26 21:24:01 fetching corpus: 3350, signal 166396/218319 (executing program) 2022/09/26 21:24:01 fetching corpus: 3400, signal 167109/219491 (executing program) 2022/09/26 21:24:01 fetching corpus: 3450, signal 167840/220613 (executing program) 2022/09/26 21:24:02 fetching corpus: 3500, signal 169074/221951 (executing program) 2022/09/26 21:24:02 fetching corpus: 3550, signal 170040/223208 (executing program) 2022/09/26 21:24:02 fetching corpus: 3600, signal 170928/224366 (executing program) 2022/09/26 21:24:02 fetching corpus: 3650, signal 171600/225423 (executing program) 2022/09/26 21:24:02 fetching corpus: 3700, signal 172399/226556 (executing program) 2022/09/26 21:24:02 fetching corpus: 3750, signal 172908/227524 (executing program) 2022/09/26 21:24:02 fetching corpus: 3800, signal 173694/228565 (executing program) 2022/09/26 21:24:02 fetching corpus: 3850, signal 174527/229620 (executing program) 2022/09/26 21:24:03 fetching corpus: 3900, signal 175987/230968 (executing program) 2022/09/26 21:24:03 fetching corpus: 3950, signal 176639/231952 (executing program) 2022/09/26 21:24:03 fetching corpus: 4000, signal 177529/233043 (executing program) 2022/09/26 21:24:03 fetching corpus: 4050, signal 178486/234177 (executing program) 2022/09/26 21:24:03 fetching corpus: 4100, signal 179051/235072 (executing program) 2022/09/26 21:24:03 fetching corpus: 4150, signal 179635/235984 (executing program) 2022/09/26 21:24:03 fetching corpus: 4200, signal 180006/236776 (executing program) 2022/09/26 21:24:03 fetching corpus: 4250, signal 181061/237866 (executing program) 2022/09/26 21:24:04 fetching corpus: 4300, signal 181898/238801 (executing program) 2022/09/26 21:24:04 fetching corpus: 4350, signal 182643/239735 (executing program) 2022/09/26 21:24:04 fetching corpus: 4400, signal 183185/240556 (executing program) 2022/09/26 21:24:04 fetching corpus: 4450, signal 183986/241627 (executing program) 2022/09/26 21:24:04 fetching corpus: 4500, signal 184512/242409 (executing program) 2022/09/26 21:24:04 fetching corpus: 4550, signal 184920/243183 (executing program) 2022/09/26 21:24:04 fetching corpus: 4600, signal 185373/243978 (executing program) 2022/09/26 21:24:04 fetching corpus: 4650, signal 186071/244845 (executing program) 2022/09/26 21:24:04 fetching corpus: 4700, signal 186803/245694 (executing program) 2022/09/26 21:24:05 fetching corpus: 4750, signal 187810/246639 (executing program) 2022/09/26 21:24:05 fetching corpus: 4800, signal 188335/247377 (executing program) 2022/09/26 21:24:05 fetching corpus: 4850, signal 188727/248117 (executing program) 2022/09/26 21:24:05 fetching corpus: 4900, signal 189295/248948 (executing program) 2022/09/26 21:24:05 fetching corpus: 4950, signal 189768/249692 (executing program) 2022/09/26 21:24:05 fetching corpus: 5000, signal 190527/250479 (executing program) 2022/09/26 21:24:05 fetching corpus: 5050, signal 191382/251280 (executing program) 2022/09/26 21:24:05 fetching corpus: 5100, signal 192563/252173 (executing program) 2022/09/26 21:24:05 fetching corpus: 5150, signal 193674/253151 (executing program) 2022/09/26 21:24:06 fetching corpus: 5200, signal 194220/253818 (executing program) 2022/09/26 21:24:06 fetching corpus: 5250, signal 195187/254654 (executing program) 2022/09/26 21:24:06 fetching corpus: 5300, signal 195753/255320 (executing program) 2022/09/26 21:24:06 fetching corpus: 5350, signal 196260/255988 (executing program) 2022/09/26 21:24:06 fetching corpus: 5400, signal 197206/256777 (executing program) 2022/09/26 21:24:06 fetching corpus: 5450, signal 197757/257428 (executing program) 2022/09/26 21:24:06 fetching corpus: 5500, signal 198144/258033 (executing program) 2022/09/26 21:24:06 fetching corpus: 5550, signal 198857/258716 (executing program) 2022/09/26 21:24:07 fetching corpus: 5600, signal 199693/259382 (executing program) 2022/09/26 21:24:07 fetching corpus: 5650, signal 200156/259990 (executing program) 2022/09/26 21:24:07 fetching corpus: 5700, signal 200595/260561 (executing program) 2022/09/26 21:24:07 fetching corpus: 5750, signal 201112/261167 (executing program) 2022/09/26 21:24:07 fetching corpus: 5800, signal 201612/261735 (executing program) 2022/09/26 21:24:07 fetching corpus: 5850, signal 201994/262317 (executing program) 2022/09/26 21:24:07 fetching corpus: 5900, signal 202459/262968 (executing program) 2022/09/26 21:24:07 fetching corpus: 5950, signal 203319/263575 (executing program) 2022/09/26 21:24:07 fetching corpus: 6000, signal 203639/264142 (executing program) 2022/09/26 21:24:07 fetching corpus: 6050, signal 204033/264712 (executing program) 2022/09/26 21:24:08 fetching corpus: 6100, signal 204295/265293 (executing program) 2022/09/26 21:24:08 fetching corpus: 6150, signal 204768/265814 (executing program) 2022/09/26 21:24:08 fetching corpus: 6200, signal 205349/266431 (executing program) 2022/09/26 21:24:08 fetching corpus: 6250, signal 205708/266986 (executing program) 2022/09/26 21:24:08 fetching corpus: 6300, signal 206298/267492 (executing program) 2022/09/26 21:24:08 fetching corpus: 6350, signal 206820/268045 (executing program) 2022/09/26 21:24:08 fetching corpus: 6400, signal 207250/268572 (executing program) 2022/09/26 21:24:08 fetching corpus: 6450, signal 207598/269169 (executing program) 2022/09/26 21:24:08 fetching corpus: 6500, signal 208102/269676 (executing program) 2022/09/26 21:24:09 fetching corpus: 6550, signal 208669/270159 (executing program) 2022/09/26 21:24:09 fetching corpus: 6600, signal 209835/270708 (executing program) 2022/09/26 21:24:09 fetching corpus: 6650, signal 210314/271173 (executing program) 2022/09/26 21:24:09 fetching corpus: 6700, signal 210971/271636 (executing program) 2022/09/26 21:24:09 fetching corpus: 6750, signal 211409/271725 (executing program) 2022/09/26 21:24:09 fetching corpus: 6800, signal 211814/271726 (executing program) 2022/09/26 21:24:09 fetching corpus: 6850, signal 212244/271729 (executing program) 2022/09/26 21:24:09 fetching corpus: 6900, signal 212493/271729 (executing program) 2022/09/26 21:24:09 fetching corpus: 6950, signal 212953/271732 (executing program) 2022/09/26 21:24:10 fetching corpus: 7000, signal 213361/271733 (executing program) 2022/09/26 21:24:10 fetching corpus: 7050, signal 213808/271748 (executing program) 2022/09/26 21:24:10 fetching corpus: 7100, signal 214566/271750 (executing program) 2022/09/26 21:24:10 fetching corpus: 7150, signal 215065/271752 (executing program) 2022/09/26 21:24:10 fetching corpus: 7200, signal 215235/271752 (executing program) 2022/09/26 21:24:10 fetching corpus: 7250, signal 215957/271774 (executing program) 2022/09/26 21:24:10 fetching corpus: 7300, signal 216497/271775 (executing program) 2022/09/26 21:24:10 fetching corpus: 7350, signal 216890/271775 (executing program) 2022/09/26 21:24:11 fetching corpus: 7400, signal 217456/271775 (executing program) 2022/09/26 21:24:11 fetching corpus: 7412, signal 217505/271775 (executing program) 2022/09/26 21:24:11 fetching corpus: 7412, signal 217505/271775 (executing program) 2022/09/26 21:24:13 starting 8 fuzzer processes 21:24:13 executing program 0: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x6, 0x6, 0x1}) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88d1}, 0x20008880) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x224002, 0x0) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x80000, 0x102) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x30c, r3, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x15e, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @from_mac=@broadcast, {0x3, 0xb}}, @ver_80211n={0x0, 0x0, 0x2, 0x2, 0x0, 0x3}}, 0x21, 0x0, {0x0, 0x17, @random="932257fc22981db09cb10d4cdc4cc9fb4d4f0e17a6beb1"}, @val={0x1, 0x6, [{0x6c}, {0x6c}, {0x48, 0x1}, {0x6c}, {0x36, 0x1}, {0x1b, 0x1}]}, @val={0x2d, 0x1a, {0x2, 0x1, 0x0, 0x0, {0x400, 0xda8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x2}}, [{0xdd, 0x57, "1b7fc9e3f0ada9d7add9db6c7ec01cc761203f2f983838098b18d10b90fc695d9be92ba0662349aa284745d7523e6a32c0806f2ec7509a9e0606b9eee8f6494f317b1ccc648f22d5fc0b39eea7c9923f5da5e0c37f806e"}, {0xdd, 0x7b, "0e996c7d54acde58fbb8ac34dd715b19f8eaa8ca445eca9ca0d43a050c38c73f4b16fd2fb9a444115ddabcfcf68db9f592b2f9edb1276692a3d58eb3fe352b4adcaeed4567da2056fdfd151f9b149fe94acccdde87a514a776ec61e2c8089cb9fec3d9784652d008f3edfb367c9fed6ec354e80518e708c844b3ad"}, {0xdd, 0x25, "dd72d1d915b6d5cd4da4b07c77846a0a80fdf2fa759c1fa4a59b53eebeae5408bbdd97c1aa"}]}}, @NL80211_ATTR_FRAME={0x121, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xe5}, @broadcast, @broadcast, @random="e671ba547f38", {0x8, 0x8}}, @ver_80211n={0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2, 0x6, {0x0, 0x1c, @random="d9f6903909aa6961cb79a648cf8bdd9a6b7a36d4d0b856db1fdb9e49"}, @val={0x1, 0x7, [{0x12}, {0x6c}, {0x3, 0x1}, {0x30}, {0xb}, {0x5}, {0xb, 0x1}]}, @void, [{0xdd, 0xd4, "56fbd043746825a389ad43c87c3938bea13713308ec779db0fc2c003e76f4c1e991d0f96c26eacb8e65de119545ba5ee2aa50814a51c5bb117d5d488917301c2433b21218ef5617628f651c7d394d37abc45b6793a5c5a1e1cb800a1bcc9d5d355ce24514f8415a5dee54be6f33c63e47da4cfbee761fe860fb6521d927a2a14c7084434d96f761f223e3415f163638747585ecfb92870150ecb0bd0b14d98be648858206ddcae2b122f99c4227b75f1c8e303e4b9b67d008ec3e1fd18fd2e2e5e45d0098809834bc6967a601466b2d6acb8b41b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x4, 0x3, 0xfff, 0x800, 0x9]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0xb, 0x3, 0x5, 0x9, 0x401, 0x516d, 0x8000, 0x0]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000010}, 0x840) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5bd9}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) lgetxattr(&(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000840)=@known='trusted.overlay.upper\x00', &(0x7f0000000880)=""/44, 0x2c) setxattr$security_capability(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), &(0x7f0000000940)=@v3={0x3000000, [{0xff, 0x7}, {0x96, 0x10000}]}, 0x18, 0x2) fallocate(r1, 0x4a, 0xe, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0/file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x68}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7f}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x421}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r4) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x20}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1800}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044006}, 0x40) dup(r5) r7 = open$dir(&(0x7f0000000cc0)='./file0/file0\x00', 0x2, 0x48) renameat(r0, &(0x7f0000000c80)='./file0/file0\x00', r7, &(0x7f0000000d00)='./file0/file0/file0\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000a000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x0, 0x145c30894ead291b, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x8080) 21:24:13 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3, 0x8, 0xe0, 0xff, 0x0, 0x24, 0x808, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x42342, 0x2, 0x1ff, 0x3, 0x7, 0xab7, 0x2, 0x0, 0x754bb1de, 0x0, 0x1}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0xb7, 0x8, 0x2, 0x0, 0x6, 0x4, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x6d, 0x4}, 0x4410, 0x0, 0x3f, 0x5, 0x5, 0x1, 0xab3, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r0, 0xe) sync_file_range(r1, 0x3, 0x6, 0x2) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x0, 0x0, 0xff, 0x0, 0x92, 0x20000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x50000, 0x5}, 0x8028, 0x80000000, 0x20, 0x2, 0x6, 0x101, 0xd35a, 0x0, 0x7, 0x0, 0x6}, r2, 0x10, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) fgetxattr(r0, &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000280)=""/206, 0xce) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000400)={0x0, 0xa7, "b8ce5b11defd0ba1b81b4cd4b784a862a8ce018b9065e3f06bc29b9b26177288c4d40f49a6c4d6ebcc9d49c08a66b8bc529b16f37434d379862a964c8f1a99de158512053a7d341f86f9e583024ff8efe8c215f745d01075365fb3e98eadddac4836b117b78cc19bbe45ab70474bf7232bd7ee0e25d00039e5710e7e2437ee0cafd62f356be588935dd4ea5c8e689fc058c2beae32d94978023708244dc401233534088c9203a1"}) r7 = creat(&(0x7f00000004c0)='./file0\x00', 0x88) fsetxattr(r7, &(0x7f0000000500)=@random={'security.', '],(&\x8f\x00'}, &(0x7f0000000540)='trusted.overlay.impure\x00', 0x17, 0x0) lseek(r7, 0x1, 0x3) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x9, 0x5, 0x7f, 0x5e, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000580)}, 0x8, 0x8, 0x8, 0x5, 0x401, 0x3, 0x1, 0x0, 0x6, 0x0, 0x80000000}, r2, 0x8, r7, 0x2) r8 = dup2(0xffffffffffffffff, r6) r9 = perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xdd, 0x8, 0x6, 0x0, 0x0, 0x7, 0x33809, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x400, 0x1, 0x9, 0x1, 0x22491482, 0x41, 0x8, 0x0, 0x100, 0x0, 0x7f}, r2, 0xc, r8, 0xa) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0xf502, 0x0) r11 = fcntl$dupfd(r9, 0x406, r7) sendmsg$AUDIT_SET(r11, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4090c03}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x3e9, 0x4, 0x70bd25, 0x25dfdbfd, {0x10, 0x1, 0x1, r2, 0x3, 0x6, 0xd8c6, 0x5}, ["", ""]}, 0x38}}, 0x5) 21:24:13 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000004980), 0x3ff, 0x40000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000004a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000051) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000004d00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004b40)={0x174, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x160, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64afbc8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e81f984}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6694efd9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7764a55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d01d9ae}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe2d96fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x458f665d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6386f32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15acc9a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d98ff0a}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x200}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43850b58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c884f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4129ec5f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcf2f487}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x502ed282}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ef025b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x2000c000}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000004d40), 0xc4000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000004f00)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004dc0)={0xdc, 0x0, 0x1e20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000004f40)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000005040)={&(0x7f0000004f80), 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x24, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000005140)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005100)={&(0x7f00000050c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000052c0)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005280)={&(0x7f00000051c0)={0x8c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040810}, 0x10004040) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005340), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000005440)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005400)={&(0x7f0000005380)={0x74, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000090}, 0x800) fcntl$lock(r3, 0x24, &(0x7f0000005480)={0x1, 0x1, 0x9, 0x3, 0xffffffffffffffff}) sync_file_range(r0, 0x68d, 0x8, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000005580)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x22}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44011}, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x10100, 0x0) r6 = getpid() fcntl$lock(r5, 0x26, &(0x7f0000005600)={0x2, 0x1, 0x8, 0x100000000, r6}) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000057c0)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005780)={&(0x7f0000005680)={0xf0, 0x0, 0x9, 0x101, 0x0, 0x0, {0xe, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFCTH_STATUS={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4040000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000005800)={'veth1_to_bond\x00'}) 21:24:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400040d5}, 0x800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x10}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x100, 0x4, 0x4, 0x5, 0x3, 0x8, 0x1ff, 0x8001, 0x0, 0xd2f]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x400c0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000300)={0x680, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_TX_RATES={0x154, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x6, 0xb, 0x12, 0x12, 0x30, 0x2, 0x24, 0x24, 0x36, 0x3, 0x4, 0x6d, 0x6c, 0x2, 0x24, 0x6c, 0x36, 0x18, 0x6, 0xb, 0x4, 0x4, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b43, 0x3, 0x7, 0x8, 0x1, 0x9, 0x8000, 0x90]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x69, 0x16, 0x5, 0x24, 0x4, 0x0, 0x30, 0x6c, 0x0, 0x12, 0x1b, 0x3, 0xb]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x5, 0x537c, 0x7fff, 0x101, 0x2, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x4, 0x100, 0x9, 0x1000, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xba, 0x3, 0x100, 0x7fff, 0x80, 0x1, 0x400, 0x8]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x3}, {0x3, 0x9}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x8}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x4}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x3}, {0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x1}, {0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x7}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x1}, {0x4, 0x3}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x5}, {0x2, 0x4}, {0x1}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x7, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x5}, {0x5, 0x6}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0x6}, {0x3, 0x9}, {0x6}, {0x7, 0x5}, {0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x2, 0x3}, {}, {0x7, 0x5}, {0x5, 0xa}, {0x5, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x36, 0x5a, 0xb, 0x48, 0x5, 0x4, 0x6c, 0x2, 0x9, 0x30, 0x0, 0x78, 0x9, 0x36, 0x6, 0x6c, 0x4, 0x60, 0x48, 0x0, 0x18, 0x5, 0x6c, 0x1]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x1}, {}, {0x4, 0x4}, {0x6, 0xa}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x7}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0x6}, {}, {0x0, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x2, 0x9}, {0x3}, {0x0, 0x4}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x4, 0x9}, {0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x6, 0x3}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0xa}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x5, 0x48, 0x71, 0x48, 0x4, 0x1, 0x12, 0x24, 0x60, 0x16, 0xb, 0x6, 0x0, 0x8, 0x4, 0x5, 0x15, 0x24, 0x16, 0x30, 0x9]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x2}, {0x6, 0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x1}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0x7}, {}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x5}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x5}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {}, {}, {0x1, 0x5}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x334, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x6c, 0x1b, 0x30, 0x3, 0x49, 0x60, 0x30, 0x46a176ff02b50bc2, 0x30, 0x16, 0x54, 0x1b, 0x48, 0x1b, 0xb, 0xb, 0x36, 0x4, 0x3, 0x6, 0x60, 0x1b, 0x4, 0x1b, 0x6]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0xc, 0x30, 0x12, 0x12, 0x60, 0x60, 0x36, 0x1, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x3, 0x48, 0x1, 0xc, 0x36, 0x30, 0x24, 0x5, 0x5, 0x48, 0x0, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x4}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x6}, {0x5, 0x4}, {0x7, 0x9}, {0x4, 0xa}, {0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x2}, {0x1, 0x6}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {}, {0x2, 0x3}, {0x7, 0x1}, {0x7}, {0x6, 0x6}, {}, {0x7, 0xa}, {0x1}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0x7}, {0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x3}, {0x4}, {0x7, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x8}, {0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x3}, {0x7, 0x6}, {0x7, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xda7, 0xe7, 0xfffe, 0x3, 0x1, 0x5e, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x1f, 0x7ff, 0x2, 0x4, 0x400, 0x3ca]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x2f27, 0x5c73, 0x9, 0x6, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x4}, {0x0, 0x3}, {0x7}, {0x5, 0x3}, {0x3, 0x2}, {}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x5}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x7}, {0x6, 0xa}, {0x3, 0x6}, {0x1}, {0x4}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x8}, {0x7}, {0x4, 0x8}, {0x6}, {0x5, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x5}, {}, {0x7, 0x6}, {0x1, 0x2}, {0x2}, {0x2, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x4, 0x0, 0x9, 0xd44a, 0x40, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x0, 0x0, 0x81, 0x5, 0x1ff, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x89eddc9249fe6a6, 0x1, 0x3, 0x6, 0x12, 0x6c, 0x1b, 0xb, 0x16, 0xb, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7ff, 0x4, 0x2, 0x1618, 0x6, 0x35, 0x5063]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x1, 0x6, 0x8c59, 0x8, 0x101, 0x8001, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x4, 0x0, 0x0, 0x1, 0x5, 0x9, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x75, 0x2, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xb68, 0x4, 0x8, 0xffff, 0x1, 0x827, 0x8]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x1, 0xc, 0x18, 0x30]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x6d, 0x73f8, 0x0, 0x0, 0x1f, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb0, 0x7ff, 0xfff, 0x3, 0x6, 0xfff, 0x6, 0x1193]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x3ff, 0x1f, 0xfe00, 0x34, 0x2, 0x3f]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x3}, {}, {0x4, 0x7}, {0x4, 0x9}, {0x5}, {0x5, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x1}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x3, 0x7}, {0x4, 0x3}, {0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x30, 0x60, 0x1b, 0x6c, 0x18, 0x48, 0x12, 0x60]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x9}, {0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x1e}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0x9}, {0x7, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x2}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0x8}, {0x7}, {}, {0x2, 0xa}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xa8488ed280819ac0}]}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6ec1, 0x9, 0x4, 0x78, 0x3ff, 0x5, 0x6]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2, 0x6e, 0x1, 0x1, 0x0, 0x0, 0x20, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x80, 0x6, 0x4, 0x821, 0x1, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4af7, 0x6, 0xfc66, 0xfff, 0x4, 0x4, 0xb17, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2c5, 0x101, 0x1, 0x5524, 0xfff7, 0x79e1, 0x7, 0xba4a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x36, 0x60, 0x4, 0xb, 0x60, 0x2, 0x6c, 0x18, 0x16, 0x60, 0x3, 0x30, 0x24, 0x9, 0x16, 0x18, 0x3, 0x3, 0x1b, 0x48, 0x16, 0x3, 0x18, 0x24, 0x9, 0x24, 0x58, 0x36, 0x2a]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x3]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x18, 0x3, 0x60, 0x16, 0x6, 0x1, 0x30, 0x1b, 0x49, 0x4, 0xc, 0x16, 0x2, 0x4, 0x7, 0xc, 0x17, 0x1, 0x2, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x2, 0x1, 0x2, 0x3, 0x48]}]}]}]}, 0x680}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x7f]}, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xa0000210}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x100, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x20}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0xfb2b}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9f24}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x14c}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x80000000}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040045}, 0x40) r3 = signalfd4(r2, &(0x7f0000000d80)={[0x2]}, 0x8, 0xc00) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r3) fgetxattr(r3, &(0x7f0000000dc0)=@known='system.sockprotoname\x00', &(0x7f0000000e00)=""/160, 0xa0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000ec0)={0x6, 'ip_vti0\x00', {0xffffff80}, 0x2}) fgetxattr(r2, &(0x7f0000000f00)=@known='system.advise\x00', &(0x7f0000000f40)=""/228, 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x94, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x40, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5d}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xca}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4010) fgetxattr(r2, &(0x7f00000011c0)=@known='trusted.syz\x00', &(0x7f0000001200)=""/134, 0x86) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000012c0)=0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000001340)={0xffffffffd349a894, 0x8, '\x00', 0x0, &(0x7f0000001300)=[0x0]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001380)={r3, 0x7, 0x6}) [ 71.082811] audit: type=1400 audit(1664227453.976:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000001740)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f0000001400)={0x2f4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2629}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff416}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x467}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc71}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffe47a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x796d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffa60}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 21:24:14 executing program 4: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0xa6e, 0x4, 0x8, 0x10001, 0x40}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000040)=""/81) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/192) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x80000001, 0x8e41) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x3050c0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000280)=""/177) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4044001) fremovexattr(r3, &(0x7f0000000480)=@random={'osx.', '\':{!#&@.&2\x00'}) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048094}, 0x20048000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000005c0)={0x0, 0x52, [0x6, 0x40, 0x80, 0x1, 0xfffffffffffffff7, 0x8]}) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000600)=""/52) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x6, 0x1000}}, './file0\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000680)=""/242, &(0x7f0000000780)=0xf2) io_cancel(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f00000007c0)="d231167cd40ecfecae91adbe708a501eb4d4bade9a40fe6ef143ed4fb61d7656c108e49cdc7f5e13e15d4e21", 0x2c, 0x800}, &(0x7f0000000840)) pipe2(&(0x7f0000000880)={0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000900)=[r6, r0, 0xffffffffffffffff, r5, r4, r0], 0x6) 21:24:14 executing program 6: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r0 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) fcntl$notify(r0, 0x402, 0x8000000c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000001c0)={0x1, 0x8, [0xd8, 0x7, 0x5, 0x8], &(0x7f0000000180)=[0x0]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7, 0x7, 0x7ff, 0x5, {{0x8, 0x4, 0x2, 0x31, 0x20, 0x64, 0x0, 0x95, 0x29, 0x0, @broadcast, @broadcast, {[@generic={0x89, 0xc, "f7ee178e5729ec028e97"}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7ae40217}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40400c0) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', r3, 0x2f, 0x9, 0xfc, 0x9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0xf1e6, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', r3, 0x4, 0xff, 0xf8, 0x50, 0x63, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x5083, 0x7}}) recvmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000780)=""/166, 0xa6}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, &(0x7f0000001880)=""/156, 0x9c}, 0x1ff}, {{&(0x7f0000001940)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2}, 0x5}, {{&(0x7f0000002a40)=@xdp, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ac0)=""/36, 0x24}, {&(0x7f0000002b00)=""/232, 0xe8}, {&(0x7f0000002c00)=""/116, 0x74}, {&(0x7f0000002c80)=""/220, 0xdc}, {&(0x7f0000002d80)=""/219, 0xdb}, {&(0x7f0000002e80)=""/252, 0xfc}, {&(0x7f0000002f80)=""/160, 0xa0}], 0x7}, 0x7d2}], 0x3, 0x40000000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000003200)={'sit0\x00', &(0x7f0000003180)={'ip6tnl0\x00', r3, 0x4, 0x7f, 0x8, 0x3, 0x6, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x40, 0x8000, 0xffff0001, 0x80000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000032c0)={'gretap0\x00', &(0x7f0000003240)={'syztnl0\x00', r3, 0x700, 0x40, 0x9, 0x6, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0xfb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x45, 0x3, 0xa, [{@multicast1, 0x1}, {@private=0xa010101, 0xe6a1}, {@multicast1, 0x7f}, {@broadcast, 0x7f}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003900)={&(0x7f0000003300)={0x5f8, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x77}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r7}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r3}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x34004000}, 0x4004) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003980), 0x80, 0x0) write$P9_RMKNOD(r11, &(0x7f00000039c0)={0x14, 0x13, 0x2, {0x40, 0x4, 0x1}}, 0x14) sendfile(r11, 0xffffffffffffffff, &(0x7f0000003a40)=0x80000000, 0x7) 21:24:14 executing program 5: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50d}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000884) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x601e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdb6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0xaa0, 0x9, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x66, 0x0, 0x22, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0xc, 0xd5, 0x1, 0x5, [{@private=0xa010101, 0x6}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xd5, [@broadcast]}, @timestamp={0x44, 0x18, 0xa9, 0x0, 0xf, [0xfffffffd, 0x101, 0x10001, 0xc0c3, 0x4]}, @cipso={0x86, 0x38, 0x1, [{0x5, 0x5, "fcbf50"}, {0x2, 0x11, "6cfd7f91cda804101daeef0174dba4"}, {0x2, 0xf, "3f3829c0fd6cc0834b2c9ecd03"}, {0x6, 0x6, "f1eee88b"}, {0x5, 0x2}, {0x5, 0x5, "d449d0"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x27671e4aa101eb77}, 0x48090) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={r0, @rand_addr=0x64010100, @empty}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc015}, 0x40000) socketpair(0xb, 0x1, 0x6e7, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000007c0)={{0x2f, @loopback, 0x4e23, 0x0, 'rr\x00', 0x32, 0x2, 0x11}, {@remote, 0x4e21, 0x4, 0x4, 0x0, 0xe59b}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apm_bios_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000884}, 0x20010800) write$binfmt_elf32(r3, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x5, 0x2, 0x5, 0x3, 0x3, 0x6, 0xd16a, 0x22f, 0x38, 0x324, 0x7ff, 0x6, 0x20, 0x1, 0x7, 0x3f, 0x9}, [{0x7, 0x7, 0xff3f, 0x100, 0x1, 0x0, 0x7, 0x2}, {0x7, 0xfffffffb, 0x8, 0x3, 0x7, 0xfffffeff, 0x7, 0x10000}], "869d76594104ce9a07eef0b2ede3000cb52cb207923817f058d50c1a7ca1c8e161e2f4b8e36f040f53ddde44d9273a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7a7) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x54, 0x0, 0xb, 0x2, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x7, 0x1, '[\xa5\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xa, 0x1, 'wlan1\x00'}, @NFTA_COMPAT_NAME={0xa, 0x1, '\\.^!(\x00'}, @NFTA_COMPAT_NAME={0x7, 0x1, '.+\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x4000401) r6 = dup3(r1, r1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x74, r7, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5225, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="04a49ce5e52d"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="077e0b101c0cd7e2"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="18e62affea8f"}]}, 0x74}, 0x1, 0x0, 0x0, 0x2}, 0xc000) 21:24:14 executing program 7: mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000080)={[{@memory_recursiveprot}, {}, {@memory_localevents}, {@subsystem='rdma'}], [{@obj_type}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) umount2(&(0x7f0000000100)='./file0\x00', 0x4) umount2(&(0x7f0000000140)='./file0\x00', 0x2) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) r0 = geteuid() r1 = syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x540, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="68a9b758c2b2b2ae8f1d81816e47dd32ac7bff05a22325f6f81f6e19e77d4e72f2cdd7b153ed7156f9082ca2aeae3090cafa55fe47a44343f3f4fe527c640a7927b591ff708b4228eb684dfbe256a22f91b97c8696b04caccb592d88b697ee52ad67a3327822a6ff03a28bea3839efc5519b22157549f8a894a2ca0e49", 0x7d, 0x1000}], 0x60, &(0x7f0000000380)={[{'\xb4'}, {}, {'MAY_READ'}, {'-}&'}], [{@measure}, {@uid_gt={'uid>', r0}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x39}}]}) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@random={'security.', '\x00'}) r2 = syz_mount_image$tmpfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x9, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500), 0x0, 0x1}], 0x1000000, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x6b, 0x33, 0x78, 0x64, 0x65, 0x65]}}, {@huge_advise}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x6e}}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x37, 0x37, 0x36, 0x36, 0x39, 0x2f, 0x33, 0x3a, 0x33]}}}}], [{@appraise_type}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) getpeername(r3, &(0x7f0000000740)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f00000007c0)=0x80) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000800)={@initdev, @rand_addr, 0x0}, &(0x7f0000000840)=0xc) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) openat(r5, &(0x7f00000008c0)='./file0\x00', 0x40c400, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x300, 0x70bd27, 0x4, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x48080) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000a40)) r6 = accept$packet(r3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x14) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000b00)={0x2, 0x2}) mknodat$loop(r2, &(0x7f0000000b40)='./file0\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) futimesat(r5, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000c00)={{r7, r8/1000+10000}, {0x77359400}}) [ 72.272073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.274171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.277195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.280516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.283205] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.284637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.290727] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.320547] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.322914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.324724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.331666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.334070] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.335369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.357690] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.406486] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.408029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.410315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.420263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.422193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.426716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.428238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.431158] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.432512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.434955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.438314] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.443541] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.468210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.472215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.475516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.477304] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.491439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.493076] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.505369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.519568] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.520735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.522139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.523357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.524216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.535679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.537570] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.544085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.545796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.546992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.547444] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.549711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.549793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.552360] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.558246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.560918] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.566082] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.570981] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.571719] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.577009] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.577073] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.592404] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.642512] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.361510] Bluetooth: hci0: command 0x0409 tx timeout [ 74.425247] Bluetooth: hci1: command 0x0409 tx timeout [ 74.489041] Bluetooth: hci3: command 0x0409 tx timeout [ 74.489062] Bluetooth: hci2: command 0x0409 tx timeout [ 74.617017] Bluetooth: hci7: command 0x0409 tx timeout [ 74.617058] Bluetooth: hci5: command 0x0409 tx timeout [ 74.617792] Bluetooth: hci4: command 0x0409 tx timeout [ 74.680982] Bluetooth: hci6: command 0x0409 tx timeout [ 76.410168] Bluetooth: hci0: command 0x041b tx timeout [ 76.473302] Bluetooth: hci1: command 0x041b tx timeout [ 76.537165] Bluetooth: hci3: command 0x041b tx timeout [ 76.537184] Bluetooth: hci2: command 0x041b tx timeout [ 76.664964] Bluetooth: hci4: command 0x041b tx timeout [ 76.666042] Bluetooth: hci5: command 0x041b tx timeout [ 76.666524] Bluetooth: hci7: command 0x041b tx timeout [ 76.729115] Bluetooth: hci6: command 0x041b tx timeout [ 78.456959] Bluetooth: hci0: command 0x040f tx timeout [ 78.520941] Bluetooth: hci1: command 0x040f tx timeout [ 78.584982] Bluetooth: hci3: command 0x040f tx timeout [ 78.585947] Bluetooth: hci2: command 0x040f tx timeout [ 78.712958] Bluetooth: hci5: command 0x040f tx timeout [ 78.714342] Bluetooth: hci7: command 0x040f tx timeout [ 78.714659] Bluetooth: hci4: command 0x040f tx timeout [ 78.778053] Bluetooth: hci6: command 0x040f tx timeout [ 80.505075] Bluetooth: hci0: command 0x0419 tx timeout [ 80.569944] Bluetooth: hci1: command 0x0419 tx timeout [ 80.633067] Bluetooth: hci2: command 0x0419 tx timeout [ 80.633218] Bluetooth: hci3: command 0x0419 tx timeout [ 80.761033] Bluetooth: hci7: command 0x0419 tx timeout [ 80.761047] Bluetooth: hci5: command 0x0419 tx timeout [ 80.762468] Bluetooth: hci4: command 0x0419 tx timeout [ 80.824910] Bluetooth: hci6: command 0x0419 tx timeout 21:25:07 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60a30296ab6692e}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000802}, 0xfbfb420137492bc8) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) 21:25:07 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x7, 0x3f, 0xcf, 0x0, 0x12000, 0x10009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1}, 0x8000, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x6, 0x0, 0x7, 0x0, 0xadc}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5e86055208c76b659d48ec2b9476260f12789c1567866fb1bb1c937a789ee55575adc7a85afd4f3795ca060d900f96d1d928d9a777966836dc6fed05c17ca9d5df00cf408eacff4be721287e051772e0df31fcb79599e7ffb3d0f1b611500325e43144cb", @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) [ 125.009144] audit: type=1400 audit(1664227507.902:7): avc: denied { open } for pid=3684 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.011194] audit: type=1400 audit(1664227507.903:8): avc: denied { kernel } for pid=3684 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.036452] ------------[ cut here ]------------ [ 125.036472] [ 125.036475] ====================================================== [ 125.036479] WARNING: possible circular locking dependency detected [ 125.036483] 6.0.0-rc6-next-20220923 #1 Not tainted [ 125.036490] ------------------------------------------------------ [ 125.036493] syz-executor.4/3686 is trying to acquire lock: [ 125.036499] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.036540] [ 125.036540] but task is already holding lock: [ 125.036543] ffff8880175e3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.036572] [ 125.036572] which lock already depends on the new lock. [ 125.036572] [ 125.036575] [ 125.036575] the existing dependency chain (in reverse order) is: [ 125.036578] [ 125.036578] -> #3 (&ctx->lock){....}-{2:2}: [ 125.036592] _raw_spin_lock+0x2a/0x40 [ 125.036611] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.036623] __schedule+0xedd/0x2470 [ 125.036637] schedule+0xda/0x1b0 [ 125.036650] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.036661] syscall_exit_to_user_mode+0x19/0x40 [ 125.036674] do_syscall_64+0x48/0x90 [ 125.036691] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.036703] [ 125.036703] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.036716] _raw_spin_lock_nested+0x30/0x40 [ 125.036734] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.036747] task_fork_fair+0x63/0x4d0 [ 125.036764] sched_cgroup_fork+0x3d0/0x540 [ 125.036778] copy_process+0x4183/0x6e20 [ 125.036788] kernel_clone+0xe7/0x890 [ 125.036798] user_mode_thread+0xad/0xf0 [ 125.036808] rest_init+0x24/0x250 [ 125.036819] arch_call_rest_init+0xf/0x14 [ 125.036837] start_kernel+0x4c1/0x4e6 [ 125.036852] secondary_startup_64_no_verify+0xe0/0xeb [ 125.036869] [ 125.036869] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.036882] _raw_spin_lock_irqsave+0x39/0x60 [ 125.036900] try_to_wake_up+0xab/0x1930 [ 125.036913] up+0x75/0xb0 [ 125.036926] __up_console_sem+0x6e/0x80 [ 125.036942] console_unlock+0x46a/0x590 [ 125.036958] vprintk_emit+0x1bd/0x560 [ 125.036973] vprintk+0x84/0xa0 [ 125.036989] _printk+0xba/0xf1 [ 125.037001] kauditd_hold_skb.cold+0x3f/0x4e [ 125.037018] kauditd_send_queue+0x233/0x290 [ 125.037032] kauditd_thread+0x5da/0x9a0 [ 125.037046] kthread+0x2ed/0x3a0 [ 125.037061] ret_from_fork+0x22/0x30 [ 125.037073] [ 125.037073] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.037086] __lock_acquire+0x2a02/0x5e70 [ 125.037103] lock_acquire+0x1a2/0x530 [ 125.037118] _raw_spin_lock_irqsave+0x39/0x60 [ 125.037136] down_trylock+0xe/0x70 [ 125.037151] __down_trylock_console_sem+0x3b/0xd0 [ 125.037166] vprintk_emit+0x16b/0x560 [ 125.037182] vprintk+0x84/0xa0 [ 125.037198] _printk+0xba/0xf1 [ 125.037210] report_bug.cold+0x72/0xab [ 125.037228] handle_bug+0x3c/0x70 [ 125.037244] exc_invalid_op+0x14/0x50 [ 125.037260] asm_exc_invalid_op+0x16/0x20 [ 125.037271] group_sched_out.part.0+0x2c7/0x460 [ 125.037282] ctx_sched_out+0x8f1/0xc10 [ 125.037292] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.037305] __schedule+0xedd/0x2470 [ 125.037317] schedule+0xda/0x1b0 [ 125.037330] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.037341] syscall_exit_to_user_mode+0x19/0x40 [ 125.037352] do_syscall_64+0x48/0x90 [ 125.037368] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.037380] [ 125.037380] other info that might help us debug this: [ 125.037380] [ 125.037383] Chain exists of: [ 125.037383] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.037383] [ 125.037398] Possible unsafe locking scenario: [ 125.037398] [ 125.037400] CPU0 CPU1 [ 125.037402] ---- ---- [ 125.037405] lock(&ctx->lock); [ 125.037410] lock(&rq->__lock); [ 125.037417] lock(&ctx->lock); [ 125.037423] lock((console_sem).lock); [ 125.037429] [ 125.037429] *** DEADLOCK *** [ 125.037429] [ 125.037431] 2 locks held by syz-executor.4/3686: [ 125.037438] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.037466] #1: ffff8880175e3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.037493] [ 125.037493] stack backtrace: [ 125.037496] CPU: 1 PID: 3686 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 125.037509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.037517] Call Trace: [ 125.037520] [ 125.037524] dump_stack_lvl+0x8b/0xb3 [ 125.037542] check_noncircular+0x263/0x2e0 [ 125.037558] ? format_decode+0x26c/0xb50 [ 125.037574] ? print_circular_bug+0x450/0x450 [ 125.037591] ? enable_ptr_key_workfn+0x20/0x20 [ 125.037607] ? format_decode+0x26c/0xb50 [ 125.037624] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.037641] __lock_acquire+0x2a02/0x5e70 [ 125.037662] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.037684] lock_acquire+0x1a2/0x530 [ 125.037701] ? down_trylock+0xe/0x70 [ 125.037717] ? lock_release+0x750/0x750 [ 125.037737] ? vprintk+0x84/0xa0 [ 125.037755] _raw_spin_lock_irqsave+0x39/0x60 [ 125.037773] ? down_trylock+0xe/0x70 [ 125.037789] down_trylock+0xe/0x70 [ 125.037804] ? vprintk+0x84/0xa0 [ 125.037820] __down_trylock_console_sem+0x3b/0xd0 [ 125.037837] vprintk_emit+0x16b/0x560 [ 125.037855] vprintk+0x84/0xa0 [ 125.037872] _printk+0xba/0xf1 [ 125.037884] ? record_print_text.cold+0x16/0x16 [ 125.037899] ? report_bug.cold+0x66/0xab [ 125.037916] ? group_sched_out.part.0+0x2c7/0x460 [ 125.037928] report_bug.cold+0x72/0xab [ 125.037946] handle_bug+0x3c/0x70 [ 125.037962] exc_invalid_op+0x14/0x50 [ 125.037980] asm_exc_invalid_op+0x16/0x20 [ 125.037992] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.038006] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.038017] RSP: 0018:ffff88804151fc48 EFLAGS: 00010006 [ 125.038027] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.038034] RDX: ffff8880174eb580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 125.038042] RBP: ffff888041520000 R08: 0000000000000005 R09: 0000000000000001 [ 125.038049] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff8880175e3000 [ 125.038057] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 125.038068] ? group_sched_out.part.0+0x2c7/0x460 [ 125.038081] ? group_sched_out.part.0+0x2c7/0x460 [ 125.038094] ctx_sched_out+0x8f1/0xc10 [ 125.038107] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.038122] ? lock_is_held_type+0xd7/0x130 [ 125.038135] ? __perf_cgroup_move+0x160/0x160 [ 125.038147] ? set_next_entity+0x304/0x550 [ 125.038164] ? update_curr+0x267/0x740 [ 125.038182] ? lock_is_held_type+0xd7/0x130 [ 125.038196] __schedule+0xedd/0x2470 [ 125.038212] ? io_schedule_timeout+0x150/0x150 [ 125.038228] ? rcu_read_lock_sched_held+0x3e/0x80 [ 125.038248] schedule+0xda/0x1b0 [ 125.038262] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.038274] syscall_exit_to_user_mode+0x19/0x40 [ 125.038287] do_syscall_64+0x48/0x90 [ 125.038304] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.038317] RIP: 0033:0x7fa886179b19 [ 125.038325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.038336] RSP: 002b:00007fa8836ef218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.038347] RAX: 0000000000000001 RBX: 00007fa88628cf68 RCX: 00007fa886179b19 [ 125.038354] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa88628cf6c [ 125.038362] RBP: 00007fa88628cf60 R08: 000000000000000e R09: 0000000000000000 [ 125.038369] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fa88628cf6c [ 125.038376] R13: 00007ffd52bcc95f R14: 00007fa8836ef300 R15: 0000000000022000 [ 125.038388] [ 125.092527] WARNING: CPU: 1 PID: 3686 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.093204] Modules linked in: [ 125.093451] CPU: 1 PID: 3686 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 125.094040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.094866] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.095276] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.096587] RSP: 0018:ffff88804151fc48 EFLAGS: 00010006 [ 125.096975] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.097495] RDX: ffff8880174eb580 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 125.098013] RBP: ffff888041520000 R08: 0000000000000005 R09: 0000000000000001 [ 125.098531] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff8880175e3000 [ 125.099050] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 125.099581] FS: 00007fa8836ef700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 125.100168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.100598] CR2: 00007fd4e349d1f0 CR3: 000000001d6ee000 CR4: 0000000000350ee0 [ 125.101109] Call Trace: [ 125.101302] [ 125.101473] ctx_sched_out+0x8f1/0xc10 [ 125.101764] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.102151] ? lock_is_held_type+0xd7/0x130 [ 125.102473] ? __perf_cgroup_move+0x160/0x160 [ 125.102805] ? set_next_entity+0x304/0x550 [ 125.103121] ? update_curr+0x267/0x740 [ 125.103433] ? lock_is_held_type+0xd7/0x130 [ 125.103753] __schedule+0xedd/0x2470 [ 125.104034] ? io_schedule_timeout+0x150/0x150 [ 125.104384] ? rcu_read_lock_sched_held+0x3e/0x80 [ 125.104752] schedule+0xda/0x1b0 [ 125.105011] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.105377] syscall_exit_to_user_mode+0x19/0x40 [ 125.105731] do_syscall_64+0x48/0x90 [ 125.106020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.106406] RIP: 0033:0x7fa886179b19 [ 125.106682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.107998] RSP: 002b:00007fa8836ef218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.108550] RAX: 0000000000000001 RBX: 00007fa88628cf68 RCX: 00007fa886179b19 [ 125.109067] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa88628cf6c [ 125.109586] RBP: 00007fa88628cf60 R08: 000000000000000e R09: 0000000000000000 [ 125.110103] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fa88628cf6c [ 125.110624] R13: 00007ffd52bcc95f R14: 00007fa8836ef300 R15: 0000000000022000 [ 125.111152] [ 125.111339] irq event stamp: 716 [ 125.111588] hardirqs last enabled at (715): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 125.112272] hardirqs last disabled at (716): [] __schedule+0x1225/0x2470 [ 125.112876] softirqs last enabled at (570): [] __irq_exit_rcu+0x11b/0x180 [ 125.113502] softirqs last disabled at (537): [] __irq_exit_rcu+0x11b/0x180 [ 125.114121] ---[ end trace 0000000000000000 ]--- 21:25:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x7, 0x3f, 0xcf, 0x0, 0x12000, 0x10009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1}, 0x8000, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x6, 0x0, 0x7, 0x0, 0xadc}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5e86055208c76b659d48ec2b9476260f12789c1567866fb1bb1c937a789ee55575adc7a85afd4f3795ca060d900f96d1d928d9a777966836dc6fed05c17ca9d5df00cf408eacff4be721287e051772e0df31fcb79599e7ffb3d0f1b611500325e43144cb", @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) 21:25:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x7, 0x3f, 0xcf, 0x0, 0x12000, 0x10009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1}, 0x8000, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x6, 0x0, 0x7, 0x0, 0xadc}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5e86055208c76b659d48ec2b9476260f12789c1567866fb1bb1c937a789ee55575adc7a85afd4f3795ca060d900f96d1d928d9a777966836dc6fed05c17ca9d5df00cf408eacff4be721287e051772e0df31fcb79599e7ffb3d0f1b611500325e43144cb", @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) 21:25:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x7, 0x3f, 0xcf, 0x0, 0x12000, 0x10009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1}, 0x8000, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x6, 0x0, 0x7, 0x0, 0xadc}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5e86055208c76b659d48ec2b9476260f12789c1567866fb1bb1c937a789ee55575adc7a85afd4f3795ca060d900f96d1d928d9a777966836dc6fed05c17ca9d5df00cf408eacff4be721287e051772e0df31fcb79599e7ffb3d0f1b611500325e43144cb", @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) 21:25:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x7, 0x3f, 0xcf, 0x0, 0x12000, 0x10009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1}, 0x8000, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x6, 0x0, 0x7, 0x0, 0xadc}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5e86055208c76b659d48ec2b9476260f12789c1567866fb1bb1c937a789ee55575adc7a85afd4f3795ca060d900f96d1d928d9a777966836dc6fed05c17ca9d5df00cf408eacff4be721287e051772e0df31fcb79599e7ffb3d0f1b611500325e43144cb", @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) 21:25:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x7, 0x3f, 0xcf, 0x0, 0x12000, 0x10009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1}, 0x8000, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x6, 0x0, 0x7, 0x0, 0xadc}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5e86055208c76b659d48ec2b9476260f12789c1567866fb1bb1c937a789ee55575adc7a85afd4f3795ca060d900f96d1d928d9a777966836dc6fed05c17ca9d5df00cf408eacff4be721287e051772e0df31fcb79599e7ffb3d0f1b611500325e43144cb", @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) 21:25:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/protocols\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0)}, 0x68) sendfile(0xffffffffffffffff, r0, 0x0, 0xd7) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x7, 0x3f, 0xcf, 0x0, 0x12000, 0x10009, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1}, 0x8000, 0x7, 0x7, 0x7, 0x8000, 0x6, 0x6, 0x0, 0x7, 0x0, 0xadc}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="5e86055208c76b659d48ec2b9476260f12789c1567866fb1bb1c937a789ee55575adc7a85afd4f3795ca060d900f96d1d928d9a777966836dc6fed05c17ca9d5df00cf408eacff4be721287e051772e0df31fcb79599e7ffb3d0f1b611500325e43144cb", @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008002f0000000000080002001d9a84996501", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/208, 0xd0}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x3) read$hiddev(0xffffffffffffffff, &(0x7f0000002b80)=""/251, 0xfb) [ 127.758491] loop7: detected capacity change from 0 to 16 [ 127.765335] ======================================================= [ 127.765335] WARNING: The mand mount option has been deprecated and [ 127.765335] and is ignored by this kernel. Remove the mand [ 127.765335] option from the mount to silence this warning. [ 127.765335] ======================================================= [ 127.778350] tmpfs: Bad value for 'size' [ 127.779567] cgroup2: Unknown parameter 'rdma' [ 128.094596] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3980 comm=syz-executor.6 [ 128.904782] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3987 comm=syz-executor.6 [ 128.909713] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=531 sclass=netlink_xfrm_socket pid=3984 comm=syz-executor.6 VM DIAGNOSIS: 21:25:08 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84271427 RDX=ffffed100d9e6fa1 RSI=0000000000000004 RDI=ffff88806cf37d00 RBP=ffff88806cf37d00 RSP=ffff88806ce09b28 R8 =0000000000000000 R9 =ffff88806cf37d03 R10=ffffed100d9e6fa0 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e6fa0 R14=0000000000000001 R15=1ffff1100d9c1366 RIP=ffffffff842714a4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f593e882260 CR3=000000001b944000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88804151f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001 R12=0000000000000036 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa8836ef700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4e349d1f0 CR3=000000001d6ee000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fa8862607c0 00007fa8862607c8 YMM02=0000000000000000 0000000000000000 00007fa8862607e0 00007fa8862607c0 YMM03=0000000000000000 0000000000000000 00007fa8862607c8 00007fa8862607c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000