Warning: Permanently added '[localhost]:6940' (ECDSA) to the list of known hosts. 2022/09/26 23:14:12 fuzzer started 2022/09/26 23:14:12 dialing manager at localhost:38881 syzkaller login: [ 44.315786] cgroup: Unknown subsys name 'net' [ 44.413590] cgroup: Unknown subsys name 'rlimit' 2022/09/26 23:14:27 syscalls: 2215 2022/09/26 23:14:27 code coverage: enabled 2022/09/26 23:14:27 comparison tracing: enabled 2022/09/26 23:14:27 extra coverage: enabled 2022/09/26 23:14:27 setuid sandbox: enabled 2022/09/26 23:14:27 namespace sandbox: enabled 2022/09/26 23:14:27 Android sandbox: enabled 2022/09/26 23:14:27 fault injection: enabled 2022/09/26 23:14:27 leak checking: enabled 2022/09/26 23:14:27 net packet injection: enabled 2022/09/26 23:14:27 net device setup: enabled 2022/09/26 23:14:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/26 23:14:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/26 23:14:27 USB emulation: enabled 2022/09/26 23:14:27 hci packet injection: enabled 2022/09/26 23:14:27 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/26 23:14:27 802.15.4 emulation: enabled 2022/09/26 23:14:27 fetching corpus: 50, signal 21091/22960 (executing program) 2022/09/26 23:14:27 fetching corpus: 100, signal 32287/35813 (executing program) 2022/09/26 23:14:27 fetching corpus: 150, signal 40406/45517 (executing program) 2022/09/26 23:14:27 fetching corpus: 200, signal 47707/54320 (executing program) 2022/09/26 23:14:27 fetching corpus: 250, signal 53889/61910 (executing program) 2022/09/26 23:14:27 fetching corpus: 300, signal 57116/66609 (executing program) 2022/09/26 23:14:27 fetching corpus: 350, signal 61924/72745 (executing program) 2022/09/26 23:14:28 fetching corpus: 400, signal 68389/80422 (executing program) 2022/09/26 23:14:28 fetching corpus: 450, signal 71744/85061 (executing program) 2022/09/26 23:14:28 fetching corpus: 500, signal 75237/89734 (executing program) 2022/09/26 23:14:28 fetching corpus: 550, signal 77392/93146 (executing program) 2022/09/26 23:14:28 fetching corpus: 600, signal 79990/96954 (executing program) 2022/09/26 23:14:28 fetching corpus: 650, signal 82573/100654 (executing program) 2022/09/26 23:14:28 fetching corpus: 700, signal 84335/103608 (executing program) 2022/09/26 23:14:28 fetching corpus: 750, signal 86753/107163 (executing program) 2022/09/26 23:14:29 fetching corpus: 800, signal 92393/113502 (executing program) 2022/09/26 23:14:29 fetching corpus: 850, signal 94891/117039 (executing program) 2022/09/26 23:14:29 fetching corpus: 900, signal 97464/120562 (executing program) 2022/09/26 23:14:29 fetching corpus: 950, signal 99866/123903 (executing program) 2022/09/26 23:14:29 fetching corpus: 1000, signal 101979/126959 (executing program) 2022/09/26 23:14:29 fetching corpus: 1050, signal 105192/130940 (executing program) 2022/09/26 23:14:29 fetching corpus: 1100, signal 108499/134887 (executing program) 2022/09/26 23:14:29 fetching corpus: 1150, signal 109878/137286 (executing program) 2022/09/26 23:14:30 fetching corpus: 1200, signal 111203/139572 (executing program) 2022/09/26 23:14:30 fetching corpus: 1250, signal 114570/143536 (executing program) 2022/09/26 23:14:30 fetching corpus: 1300, signal 116884/146500 (executing program) 2022/09/26 23:14:30 fetching corpus: 1350, signal 118602/148971 (executing program) 2022/09/26 23:14:30 fetching corpus: 1400, signal 121764/152593 (executing program) 2022/09/26 23:14:30 fetching corpus: 1450, signal 124231/155594 (executing program) 2022/09/26 23:14:30 fetching corpus: 1500, signal 126114/158151 (executing program) 2022/09/26 23:14:30 fetching corpus: 1550, signal 128392/160997 (executing program) 2022/09/26 23:14:31 fetching corpus: 1600, signal 129654/163052 (executing program) 2022/09/26 23:14:31 fetching corpus: 1650, signal 130988/165087 (executing program) 2022/09/26 23:14:31 fetching corpus: 1700, signal 132086/166985 (executing program) 2022/09/26 23:14:31 fetching corpus: 1750, signal 133125/168783 (executing program) 2022/09/26 23:14:31 fetching corpus: 1800, signal 133760/170268 (executing program) 2022/09/26 23:14:31 fetching corpus: 1850, signal 135213/172310 (executing program) 2022/09/26 23:14:31 fetching corpus: 1900, signal 136545/174294 (executing program) 2022/09/26 23:14:31 fetching corpus: 1950, signal 137972/176283 (executing program) 2022/09/26 23:14:31 fetching corpus: 2000, signal 138714/177822 (executing program) 2022/09/26 23:14:32 fetching corpus: 2050, signal 140372/179946 (executing program) 2022/09/26 23:14:32 fetching corpus: 2100, signal 141792/181919 (executing program) 2022/09/26 23:14:32 fetching corpus: 2150, signal 142881/183632 (executing program) 2022/09/26 23:14:32 fetching corpus: 2200, signal 144107/185446 (executing program) 2022/09/26 23:14:32 fetching corpus: 2250, signal 145314/187179 (executing program) 2022/09/26 23:14:32 fetching corpus: 2300, signal 146326/188768 (executing program) 2022/09/26 23:14:32 fetching corpus: 2350, signal 147366/190324 (executing program) 2022/09/26 23:14:32 fetching corpus: 2400, signal 147876/191576 (executing program) 2022/09/26 23:14:32 fetching corpus: 2450, signal 149076/193257 (executing program) 2022/09/26 23:14:33 fetching corpus: 2500, signal 150337/194987 (executing program) 2022/09/26 23:14:33 fetching corpus: 2550, signal 151222/196435 (executing program) 2022/09/26 23:14:33 fetching corpus: 2600, signal 152092/197859 (executing program) 2022/09/26 23:14:33 fetching corpus: 2650, signal 153127/199370 (executing program) 2022/09/26 23:14:33 fetching corpus: 2700, signal 153462/200457 (executing program) 2022/09/26 23:14:33 fetching corpus: 2750, signal 154697/202076 (executing program) 2022/09/26 23:14:33 fetching corpus: 2800, signal 156279/203871 (executing program) 2022/09/26 23:14:33 fetching corpus: 2850, signal 157459/205509 (executing program) 2022/09/26 23:14:33 fetching corpus: 2900, signal 158666/207128 (executing program) 2022/09/26 23:14:34 fetching corpus: 2950, signal 159529/208435 (executing program) 2022/09/26 23:14:34 fetching corpus: 3000, signal 160132/209603 (executing program) 2022/09/26 23:14:34 fetching corpus: 3050, signal 161002/210894 (executing program) 2022/09/26 23:14:34 fetching corpus: 3100, signal 162147/212367 (executing program) 2022/09/26 23:14:34 fetching corpus: 3150, signal 163014/213619 (executing program) 2022/09/26 23:14:34 fetching corpus: 3200, signal 164387/215153 (executing program) 2022/09/26 23:14:34 fetching corpus: 3250, signal 165493/216562 (executing program) 2022/09/26 23:14:34 fetching corpus: 3300, signal 166757/217977 (executing program) 2022/09/26 23:14:35 fetching corpus: 3350, signal 167740/219202 (executing program) 2022/09/26 23:14:35 fetching corpus: 3400, signal 168660/220436 (executing program) 2022/09/26 23:14:35 fetching corpus: 3450, signal 169443/221592 (executing program) 2022/09/26 23:14:35 fetching corpus: 3500, signal 170069/222674 (executing program) 2022/09/26 23:14:35 fetching corpus: 3550, signal 171178/224000 (executing program) 2022/09/26 23:14:35 fetching corpus: 3600, signal 171735/225021 (executing program) 2022/09/26 23:14:35 fetching corpus: 3650, signal 172479/226159 (executing program) 2022/09/26 23:14:35 fetching corpus: 3700, signal 173086/227138 (executing program) 2022/09/26 23:14:35 fetching corpus: 3750, signal 173902/228246 (executing program) 2022/09/26 23:14:36 fetching corpus: 3800, signal 174796/229402 (executing program) 2022/09/26 23:14:36 fetching corpus: 3850, signal 175355/230384 (executing program) 2022/09/26 23:14:36 fetching corpus: 3900, signal 175999/231434 (executing program) 2022/09/26 23:14:36 fetching corpus: 3950, signal 176438/232357 (executing program) 2022/09/26 23:14:36 fetching corpus: 4000, signal 178118/233750 (executing program) 2022/09/26 23:14:36 fetching corpus: 4050, signal 179560/235050 (executing program) 2022/09/26 23:14:36 fetching corpus: 4100, signal 180543/236110 (executing program) 2022/09/26 23:14:37 fetching corpus: 4150, signal 181130/237025 (executing program) 2022/09/26 23:14:37 fetching corpus: 4200, signal 181445/237806 (executing program) 2022/09/26 23:14:37 fetching corpus: 4250, signal 182315/238789 (executing program) 2022/09/26 23:14:37 fetching corpus: 4300, signal 183168/239814 (executing program) 2022/09/26 23:14:37 fetching corpus: 4350, signal 184045/240756 (executing program) 2022/09/26 23:14:37 fetching corpus: 4400, signal 184453/241518 (executing program) 2022/09/26 23:14:37 fetching corpus: 4450, signal 185377/242523 (executing program) 2022/09/26 23:14:37 fetching corpus: 4500, signal 186132/243429 (executing program) 2022/09/26 23:14:37 fetching corpus: 4550, signal 186773/244324 (executing program) 2022/09/26 23:14:37 fetching corpus: 4600, signal 187341/245191 (executing program) 2022/09/26 23:14:38 fetching corpus: 4650, signal 188769/246393 (executing program) 2022/09/26 23:14:38 fetching corpus: 4700, signal 189277/247149 (executing program) 2022/09/26 23:14:38 fetching corpus: 4750, signal 189815/247915 (executing program) 2022/09/26 23:14:38 fetching corpus: 4800, signal 190367/248728 (executing program) 2022/09/26 23:14:38 fetching corpus: 4850, signal 191360/249628 (executing program) 2022/09/26 23:14:38 fetching corpus: 4900, signal 192579/250566 (executing program) 2022/09/26 23:14:38 fetching corpus: 4950, signal 193230/251377 (executing program) 2022/09/26 23:14:38 fetching corpus: 5000, signal 193541/252055 (executing program) 2022/09/26 23:14:38 fetching corpus: 5050, signal 194350/252862 (executing program) 2022/09/26 23:14:38 fetching corpus: 5100, signal 194854/253606 (executing program) 2022/09/26 23:14:39 fetching corpus: 5150, signal 195261/254270 (executing program) 2022/09/26 23:14:39 fetching corpus: 5200, signal 195867/254962 (executing program) 2022/09/26 23:14:39 fetching corpus: 5250, signal 196744/255675 (executing program) 2022/09/26 23:14:39 fetching corpus: 5300, signal 197435/256367 (executing program) 2022/09/26 23:14:39 fetching corpus: 5350, signal 198314/257167 (executing program) 2022/09/26 23:14:39 fetching corpus: 5400, signal 198582/257762 (executing program) 2022/09/26 23:14:39 fetching corpus: 5450, signal 198845/258391 (executing program) 2022/09/26 23:14:40 fetching corpus: 5500, signal 199874/259104 (executing program) 2022/09/26 23:14:40 fetching corpus: 5550, signal 200326/259706 (executing program) 2022/09/26 23:14:40 fetching corpus: 5600, signal 201045/260338 (executing program) 2022/09/26 23:14:40 fetching corpus: 5650, signal 201651/260981 (executing program) 2022/09/26 23:14:40 fetching corpus: 5700, signal 201958/261563 (executing program) 2022/09/26 23:14:40 fetching corpus: 5750, signal 202476/262155 (executing program) 2022/09/26 23:14:40 fetching corpus: 5800, signal 203048/262733 (executing program) 2022/09/26 23:14:40 fetching corpus: 5850, signal 203644/263315 (executing program) 2022/09/26 23:14:40 fetching corpus: 5900, signal 203889/263854 (executing program) 2022/09/26 23:14:41 fetching corpus: 5950, signal 204226/264402 (executing program) 2022/09/26 23:14:41 fetching corpus: 6000, signal 204882/264991 (executing program) 2022/09/26 23:14:41 fetching corpus: 6050, signal 205532/265590 (executing program) 2022/09/26 23:14:41 fetching corpus: 6100, signal 205861/266123 (executing program) 2022/09/26 23:14:41 fetching corpus: 6150, signal 206225/266671 (executing program) 2022/09/26 23:14:41 fetching corpus: 6200, signal 206542/267208 (executing program) 2022/09/26 23:14:41 fetching corpus: 6250, signal 206778/267712 (executing program) 2022/09/26 23:14:41 fetching corpus: 6300, signal 207268/268233 (executing program) 2022/09/26 23:14:41 fetching corpus: 6350, signal 207749/268758 (executing program) 2022/09/26 23:14:42 fetching corpus: 6400, signal 208220/269255 (executing program) 2022/09/26 23:14:42 fetching corpus: 6450, signal 208776/269753 (executing program) 2022/09/26 23:14:42 fetching corpus: 6500, signal 209629/270260 (executing program) 2022/09/26 23:14:42 fetching corpus: 6550, signal 210564/270767 (executing program) 2022/09/26 23:14:42 fetching corpus: 6600, signal 211096/271295 (executing program) 2022/09/26 23:14:42 fetching corpus: 6650, signal 211426/271765 (executing program) 2022/09/26 23:14:42 fetching corpus: 6700, signal 211628/272249 (executing program) 2022/09/26 23:14:42 fetching corpus: 6750, signal 211887/272530 (executing program) 2022/09/26 23:14:42 fetching corpus: 6800, signal 212280/272530 (executing program) 2022/09/26 23:14:43 fetching corpus: 6850, signal 212839/272535 (executing program) 2022/09/26 23:14:43 fetching corpus: 6900, signal 213316/272535 (executing program) 2022/09/26 23:14:43 fetching corpus: 6950, signal 213737/272537 (executing program) 2022/09/26 23:14:43 fetching corpus: 7000, signal 214176/272545 (executing program) 2022/09/26 23:14:43 fetching corpus: 7050, signal 214485/272549 (executing program) 2022/09/26 23:14:43 fetching corpus: 7100, signal 214665/272549 (executing program) 2022/09/26 23:14:43 fetching corpus: 7150, signal 215196/272551 (executing program) 2022/09/26 23:14:43 fetching corpus: 7200, signal 215599/272551 (executing program) 2022/09/26 23:14:43 fetching corpus: 7250, signal 216094/272551 (executing program) 2022/09/26 23:14:44 fetching corpus: 7300, signal 216594/272551 (executing program) 2022/09/26 23:14:44 fetching corpus: 7350, signal 217239/272564 (executing program) 2022/09/26 23:14:44 fetching corpus: 7378, signal 217545/272564 (executing program) 2022/09/26 23:14:44 fetching corpus: 7378, signal 217545/272564 (executing program) 2022/09/26 23:14:47 starting 8 fuzzer processes 23:14:47 executing program 0: r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfffffffa) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x4, 0x870, 0x20, 0x8, 0x1, 0x6}, 0xc) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0xfff, 0x10001}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000240)={0x800, 0x10000, 0x3ba7ab2d, 0x800, 0x4}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd388, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044004}, 0x20004840) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000003c0)={0x1, 0xffffffff, 0x2df, 0x4, 0x8001, 0x5d6e}) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000440)={0x5, 0x4, 0x7, 0x3, 0x79c4, 0x2}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000004c0)={0x13f4, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80dd}, @NL80211_ATTR_SCAN_SUPP_RATES={0xe0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbd, 0x3, "8c9c0f2486c42cc7241eade94df2001d7f33d9dc03064e1c6ccf3063f9462a1625b6d2f93b36bd3dc772fe85215ba25554f9395b535b73519528f908091abdb344e9d35551c2eba87a0ee06a8202c7e6259be627a825bac873396d25ddf9cad9674d2bcd8fa62746002a4bc3ba42e78c543110400a97ba701b91f7199fdf835b4090355aa71ea2779c2ac6071977897df18c7d926a66fac6823f614fa157ec15eed2f1e74865f02ed95eae137f9008dc12354d2f31b699053b"}, @NL80211_BAND_2GHZ={0x6, 0x0, "e8a9"}, @NL80211_BAND_60GHZ={0x11, 0x2, "d8bbe46cc0c6f937d7d98ee141"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12a0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xca, 0x2, "39452c6ebcbeb83b16318175378a41fd60a4bff46b746082a562c474653288b495fb8dc46975a8d656e8897b39249527367e4084ce60939eaf1309b9aa9f3188c53502b4e7f9b39c83cfccba05dce9828d33425f59c79e012db3dcad721fabde127fe11952fb7a74d39a8ffeb2b6ece9f71225b76bd7792ad3d7bf3ed46835ca4b5b45e3d09df78bdbee47bcc5ddb851eb96597fade84d00fac20f1ce2b64264b6655e27e22ad5bfa8bc18ed2b358bf6d1e8c4decb16bbde7089556f68461930a27c8de2cf6b"}, @NL80211_BAND_60GHZ={0x75, 0x2, "5bfe290880fd6407c70542bcf58b8dffc7979ffb8b2ff4056f6c0decb9503e7787a55a601120eb1d548a985eef0c59202037bc0a4a5814fb7d3ed21a04973cf2ccd9a35ab279af162d1f4e6bd184ece5682a6b0e4e5ec961d72f195ec2a2d0faa114cd14acf9357d9982321da3c6bcccf6"}, @NL80211_BAND_5GHZ={0xfa, 0x1, "8dff85eb8c9e963875e562470ef3fc511300a5f57ac6e15b3dd54594cb25c1dab2a618db6bfe7a161550f6959a8d6c75ca4cb820710481cf55ccaa77a57693214a3d3003414ff184a98bc76952497f3521e7d7eb13f8ab1eaab50c07cf76a16853bbe3a58bc86cc0953d3d5998b9b09eb97b3e9d2755d0b620f745f33e3bbbbc192f8d0164587f69bff16a0e00553e63b48af426490c8804c24f54c90370ce2832976d2c89bc1fd651b9097f2b4fbd3f340f07267e084b4858166629b6a0a25545c4722d10fb19d3603998c03afbd6d5a765e439989c44f98c9324c6b949856a975e93107c442f320065f933472183acf8938ec91f9a"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x53, 0x1, "7a8f0bd988327c93f03a3cddb75938376abfcb48d26fadefbc2881531f6a0ed2b8e10cac475692c71642f470e4b64527079a80cec2ee7b48d8aa2a961a31df3ff48e77598dfd087962d2ad23b617f0"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10000}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8}, {0x8, 0x0, 0x6}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x13f4}, 0x1, 0x0, 0x0, 0x2000000}, 0x8001) pipe(&(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f00)={&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e00)=[{&(0x7f00000019c0)="c782e30891a93d14d8baac528a25e28e49f36233c832fc3b8d107b7af0faede122a89ea77bc594ab23e95e0bdece77c18073065e7caf2b60c9081ebb16d6b7", 0x3f}, {&(0x7f0000001a00)="c3a259e02a9be90c338d1315eb3ff71042a1471cdf454d3fc919c044a31bc9f180a53d99bf33a8f5effc34096b5e756061794050a209a76855687efd7a29d12460e81387aeda49ffd127d98976f8cea2e0e1efefdf67586ee03ea68c999d462e7189fb39526f00f82c2e43dd6e47875caaa1c8fb1d787bb98e14c3e0e4250be1", 0x80}, {&(0x7f0000001a80)="70333754ada1403ef475a09650bc8ff8e230efaa11ce0b5ed2d4a8ef44237855b6bc92a57c0d61f935d9e68a668d52bbb2055a50b423afa14a65e86e7cc10205d3", 0x41}, {&(0x7f0000001b00)="0ab81dc33af7ef002ed690d7030d79162dad45e16805300caaf56973e211d2", 0x1f}, {&(0x7f0000001b40)="22a4ed2fce24c0fe0bc633348f7aee54f0ad7f4ce3d85f89aae4a56460c6e97faa5adee9ff111b604d6c2554602176729408a9f332f9399601c0088e75befa0d49a0f8ea65b8a420feea6413f01274cbab7ecbe2a4f308aceed43fd2c76c3459dab3b1954b9335acd5debe2eb7edca2c36bd9f7ed9e059b39c6103f8ceac3c6ee77ef55c9f86aae34af11ed8371e86c39cb9df96af15a108b894363bbccc110d8ea89e1faeda7e65236fc71b", 0xac}, {&(0x7f0000001c00)="3c8fcd66102905d09ed3903fa79b7b14d8f335fcfca36d7fef3d29496316f51f8469d9e2d0f43c06a027ceef4d9e1150587920802b6cf4bc3e209016d593f327115f744fd0fe34f371a6787259c42309966ec7cba3c27b75db500f5a88f6ec509f7ac1b897b7f8a1b9d07200b4e9f6f1cabda7cd", 0x74}, {&(0x7f0000001c80)="bd4a5e5dc6595ecc4a63814a901eb182f423f1f7aa3a2c1acec8fdb9ea383c255c6d5f34bd431b863a75fe438ed90c0e574b9bc37f1037d9717fa979f58d6318fa66299eff9f9bd08bf06fb06b4ceecb57d705b5095918c32058404ba8df76ea23fbfbb84049460e75552e2b21112691075021e4b052802d", 0x78}, {&(0x7f0000001d00)="a5243d0b0f761a49093740e32521798c8c23c8f0d33b6679aa1ea265b7f19b1618435edfcce5b28dc270a6000a5b527e7fce9a42d2de09ea767cb9640e214dc847482a5751e7a76822eb68c9579f651b5a05a6364db95c8090c44d294095675054eaef664ff1826a89a86204d6f214f5419b7392069eed3007ccec2d73fab198af9b9e211e85f37583775b049e19a16b080db6a1043abf4f328ff17869846826bb417f1ee05885faf50523515ac813aa65bf1a45e71bc5e042458f3f24335c1aec725dfecc0c6311cef80e8a252e622d29c5d965c3a2a54bcf026066854f364a4e9a6b5d0a2ca5442a09697b8e36b460e93edbd9af8124", 0xf7}], 0x8, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1]}}], 0x28, 0x10}, 0x20044000) r5 = syz_open_dev$vcsa(&(0x7f0000001f40), 0x1, 0x1a000) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000001fc0)={0x1, 0x28, '\x00', 0x0, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000002000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000020c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x1d}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffffb}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 23:14:47 executing program 1: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc3}) pread64(r0, &(0x7f0000000080)=""/173, 0xad, 0xfffffffffffffff9) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={'trans=unix,', {[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000002c0)='net/raw\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0xe, 0x4, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) fsetxattr$security_capability(r2, &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0x8, 0x5}, {0x6, 0x6}]}, 0x14, 0xb4878c74b9c8406b) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000500)=0x1) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000600)=""/41, 0x29}], 0x1, 0x1, 0xfff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x80, 0x40, 0x6, 0x3b1}]}) fstat(r7, &(0x7f0000000700)) lsetxattr$security_evm(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)=@v2={0x3, 0x0, 0xc, 0x0, 0x1000, "e024113d3f1d87e8d31e6b26a10596f86439333803f49dcd5656e1d4a0a6681f0405b7190ead6e77109a0f22156566449ea367560f67643c40f118c9b0c7a46bae3d93351248ca50c8657ae1e4be03a56dfcae937fe232b30e444b04f5b2662be64fe6bbbe2ad1b7dd7f5c1858542c7d63741ef0b3a753ecd5fcdb1cc919d70b24d6651d9cf8efd145f06d10f63b0f2862eca403d43fbc8f03b32a184474792f7e1a0df5e73fad48cd26bc0742cf050a0c19de68d990e4e6273a8dc181c9fb58f2c942c79e4aece6258b49a53c62743a2656ce5fbba4bcfd7ebca3ddc8c3b81f93113cb6e98d5e1d28e60d06ec189e203ffdc72ed9d59606f82b1ef91eaca9a8051e2d2bab476cf4cb8ab26a9cf4f504cad4d21564e608d0dfce63de6a6a2c7fa77845da0d5339d2d4b123e608a94f54101407e89842623ac23d3fc23eeada457d8331e2d06c8fe39268909e5f5cd63efc2e3a078a3625f1a473e0d66767ddf9d41387724c50732b4073fb4ba6bca4a9259ab6db08a2183ccaeb2069bb1749d91f537363a9c168a562a5b1064a69a1f08b1c6df85c79d730c3f06d4699668c6506f947df0887c27ad995e5a90aa2760bb53f4fcd9d25c81dd4421aad453dfd61d261ec91e9df61dc4a9bc07f1085ec1bd900e26d9ea7c5820f99124a54978cced507ee5d2f9abaf7bb01560a2961ffb81695cb3a2bc84e32ec75ff5e0e2030f1105f8b8f6a573faf63224000e10bd2f9178a7e1305009b8e11f124fef54e523804b01748b18a2f4eff3bdd6dda8a2a63120259902eb69c850c3f64d3b460c5ae0f3d58b8ff8cb1727d2604e970aa5c32b5eb76717faeea3467e25fc3376176b6630e6b7924111ef8100f9a82dcfe604132084c8b67ea1eca8222489bf10edca9aedcb3c588761a29d7d90e35cf225ce77d87a982cb0efda8977b6f62ceeed44f2e1e517f4127c99f953ed151059d0cf962b58cc7c23b3bd1bf2599db5b70cd5d5b9cfa0ef76edda59d305b730171ba61d5f0529f393ccc37d825b78a98e79011f13f1d7e658d780b737daa098663bfefba790ac39deb29beabe51a9a7fa3917ed3238ab27ad8101b58a97d422e132a3c0befc8651f4f3e67eaf0e3c1cadc64c5c25a521c5ef1e7c11a5a9760616a89788ed20fd3ec6d87ad0aa219a63092a9bd754eb8431d8cd4c56b194651eb538004abd66b318e9593aa9e9b20229619536151e31722b8eba2b5be194cfbb72c66418a3523d0602ce2fdc773ed04ec097e07ba78e25adfa1bcf27ba60950454163edbeb6c54c08eab1dc66169b4d20a967d96aae6979ef5bf190102819cfbea42dd17e6825dbb566186e13761538b9e396e00de927d91736677c45ba704097ff1af3f8127703b00faaa791bd9a168a4b4bd9b44854fb61a1e22fdd8a2c02f33ad81b2d5f387af83dbd3cfbe0c4436f12c9c5e80259134a5f650353908e243df6af46bd22f027d843f6e45e7357c37f2c74fc9ef781b145812b8802ab70f347b7f83ec5a5c7f0c42374f65b2ca5ebf7ed385e7f7d303e6da76543af60ad42082f4bc0534089e30b6cbfc13a6b7854711b4491633765d689cd45f6ccde9c022e69136aebcff61c22547ab4a7e217424a09656af1a27dd45b8f7be139a4e0c78f166d900a130810107b26c932e07abdb10aef722a166fc4d9b95d2f036a000cf87cdb1dc5e11fe828d98f587270eb5131355a90dfe9e24aedd45f287dadf9f1371925c8e959758fc33600e99e8d56624f74a9c9d0acd7ff7aca3881819ff26a38e732c8615dcb20095e4a79aa4cecfaf0c88a063a7fde7aa1c1dd537bcc32c9e17c0b2b7a75c91b4e85312528ed6ce9950b540ae2b830e896b6e89315b9e65835398d4aedf197baee11b804aeba3609dbd8c9ea7de3242d7d3c2fe77405352b4fb7dcf3d88a40cd2996651028cafb2de699ad1ee3ddf204bc1b87176bb8ada7689b584f812c9c8525c73430e7b09f67de922ed5c43eeb540e0a15940e3f4378acd382f33d01756942e33d8584524a115a39d4e2dfc257269de54092e279326510320e9a499648fd596c64fbca238d96264bde2c00dd04d8d4ca8e4e72be6ca27e9777e5c503ba4277cfd2269c6bb2e5fab521df40ccb3543080287c90a7de9ca3b261678095f9e0e92ca69f981dec1313a0c09d76cad7ba7bfaee5ba1c41bab9e1e9a086f5f5b94e0ba2ff1ca9005ebac775d1915a24ee052b50276e0982d03e9b0fe4c1d59bce0f8405e7950b0cf71a38013419342ecf85cd140958edabc2a43b3f4f749b65e1c6b3b792ac83849a53e187cc4f5329e8b2d8f9ab9a1b7ee382395df6b41d405ca47b200e58ac27b2dd3dd98f74702dee106514f37db57a4e71fd6d0f47b8c2eaf78830070c1b32b3b66e53202716d40e311a726ede632955340a5f9272268a662925ca67bfd5bcea38154c472d2ae6dd1cb9e6231d96725bcff39b5cafcf7fa272c4e7e36318900b6abe302698743d715d1f2b10bcb7d3341fc67462bf349ddc3d056495b5d0a648fa692258c7def59d29a465ba90a9829e48fefbe867f96b3ff930b5361cc8d154de0f9ae79f251aa496840e2ad9fc3823c04d23f46728a321217529fa00437fa7c789279cff8f55837aa31c2df19431a0858d649749f5e63f657a74aebe27bd4adf2cdb92e772830ffde498ef4f7fa012a214a44f739be4eec115eb5c2a60da1844477a0c12471bc9b813045159f711bb066602786e8dfbdccf3be55fef112607fbfe8c04ed89fbaabeca76b7576f7df7af243d90b8cb13a697a76b74eb7e25f7beceec3dc05156c627e1a741133ab02363fd9a4459e6f33929900cf4ae179cf044f2e0e7a08e74c083142e38d757402ad8a2ed73f6afdad19f80f78365d168e8d7ad14a25ed4a6f7ba810e92cd48f7074c2b52d6e23c6edb33efe4126cd982f4f306e1cbe63836f88ca2259c51f382f93e458de747cac9421183b677f1851a97cf225b1801325df629340ce2f47e2d39d2fd9faf965f1d5426351d05bfc05562da91973c03f7719def04502ecaffe2673cb8cd5298ed2bc11b90d3a5985fde6aea27e63599a889fa0a113d5955ad4118b3442c3bd1be052b4dcdfaa96c56fe3bf307aa2bac9d4d8199d3354e4d8ad3ca432b3e00a0536bb25e766d233adbf9c1d936f08cf3d2a3d68f914305906a61a8311cb5905b10be0b3147e00ffd4aed8d513d8d1eb477c5039e4e937aaa18660eedb202289073697c48c32b3a441a1af6992bd3048adaae0bec11efc5e69f369cf3374f96d8d94ad02d84f8ce687a332f2c98628ff1d9098b852a12f1b8ef3542f88e53818b65daa9cd649588a4f20efdb77e6c166b754c26613ca4632fc4c93a5e43851a4c9f1e9afb9dc9b2c3aac727a30556578e9bec36f88befadaf325eae61d679ff356f376ace944a7ce79c54b076c7906c87a381b25519cbbd91c073aea80e2c5d5e4cd9bb7f241b3d9cd5551891dad12bbb37317fde59fbec3d9df783c9579ef42192ccb2fc1e81f375fad5b2f71ece257323536996e755bca2eafeabe67d867428d8b174ec7aed6d666a72a5efab18c7e766da761e35a949f71ef5e3f363b5eb9cb044944f839e729bd020520d69c6ffb29c1e2846cf7a7299b201ca1ac6cc8bdfae8145a34796db340c96f55bdf750ff82faf62b1c4c60bf9289d972cb6ecbc66e512231b921eb11955df7a35e976040000266dcdebad6cefe51ce79094e262b63646ebb758c01a4498bd90e772f5d3fef386c91c0a20970bbab2134305dc3883ed672026dcae4c87323741a5439260276c67b41cf4309c607a95830604bee83740f593460b81cd42bc5842c103262d8fac3302ef7c171fbbca0f3806218a777ad88b57a4eb6fabac9300d2155093a2eb9320abb75c3d5ce35862126bc47157029ef47efa7a8cfe0c8145e8c3cca3102ca2d2bb9619c4431ab77325ea1bd6fa75ec92284408df0590f54ae8fb9d8f5278ea31ee7784d1dc0d7f9a638d4b7a67431e4e7c9ea3f2a54e8383db011b53b05e837500e6e64d273595b4c802017fc010a62ad0baa1c4c346d6a5eed4a9c5a1243bf8a061bf1cc8d98f54bd2c48121687697c6f20e915f1770aebb61373a96d3d6432230da72ea6a98b35b0d82709cebd39c3b44e14c899013ee9debba585de118d78fc4a39de672bbc753fd008c52dc5f2162528a28cd58e7f685cf1621b2a5d737756dffa7eb1920bf6b696462d72bcae372ea0b92edaba72e1b23d5c890903670f83e394991eee0b4162b88f5fc90222fdef4001c924f93808e8ea0c20f90a94515988c6282ece802ffdf6e029f15cf66e41dfa15761286fc01500cb379231b76c60823fe51c93987914409a81b0e5359d2dfcf97847d6e32281724b60ed8aa677e553f46095804d3f6a48878f7c990ff8617bc453b391b84ba4632ad95726fb2c491653ebcbd24cca99428a95625178d038340031a898f9d16226f337c4a29581c33e9b5bafb378c5067cdfff791bcea9e57a947252b3307081904d3701ee5c9c85791410b1b1aed606959851fcb323b0948e58faf7bd0b26bb19461cd52dec5fd400c60f6cbaab66f8e1e3d4c160946f2ebfa004c35a4facde398c1a1c6643675328d1403a856c8624b809951ce67a87265091e11041255ce6b64aef773579d71ae3709e399f8ecb0eeda8e45849f03797551a836aeb16c2e0f11d0db9ad9ff94dcde6b1033b3797c6468b42b26abd1f015be1eb91af946a8e64e43d7d4405e1547a3a566ba038f58e45f392738c8f15726fe0e26d16d625f336fb97ac2f6bcb9e7b40176e6b04ee35c04a255f43c9236041f5597cb11d35b626d1ed1e4c836747cd15ec3f18235d6ead915a8ad2f10220772140aa333753c611c0805dfc80cf80dbc7bbb7f867f87293000d47b8193d47373dd76798678daaa06b398638bbd422439b11c47701b852f32b5c944eaa5b80bd26b78677a6517a6c9b411235a2c76cc5de46be4e8ff074f5334ad74629f7b567f17a51696f4b31da4dd7a6aa5f66c1603ef91cccc6552cff8b78a5794b9effbd60562cb907ebcc70f8c331dbb1470781d3dc1576d1dd69372e8fca57e4ceaa06ecc17b761ce9c522df8446197a310295e500d99ce107131dc4ad4f9041f53156436f4f93b921df9a76ec9d07ddd8ae48881fa0ed36c41ce350fcf4928dbdab3fc2a13fde2b29eef107dc5716a029a5a03711fd152a218650b882c253d9b16441356db3224ab4dfaa1e7ee5215ad66614d7b6c0e762a1ac4d914d196df4e23b552f7b5d60441c6bad7c673442d452439b12f9a9b462f0d03545cd9b0f08f418327543babe5873df463ae00f39d07d8a1c18d67b0f3cacde4a6c045cd0df883201483109eebf0180b22c453923e2bf70d988a32bf03f75d0ca2c3a9ada6ae3f51a5b36a617f3716e731c50a691d91fafc5ccdd10c81000dda055ca23d64ae006a79697266513a006e5413af61dbf47f77b471746e7fc41a1dec7ec7ac090a09194770541fef9d7bd6dfd4bd2b9675cd8b1f47d0ede6ec80f787edf368d3f653dc8cbf2fac7b027c539f10a9a949bdb7b81f0c5dc7775f1607a33ba471425b185978bd8b1917fa8966a8e25d6d8352e3bae97910dfc17c90ac33c820b6446dd3646f734dd971d65d897e53d6c8529836d8b7c8de6624e79dca5c2dbbafd6634a448f49fbac6ea1927b212540a1e7640b12e1eb46bee0bb71170a0b5c2f04bf0e4bb5cc309a262f2be9edaba00ed906053f9ccf03971e731a490cf73fd525129e6beb0f04b838dea163c03b2734"}, 0x1009, 0x2) 23:14:47 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) tee(0xffffffffffffffff, r0, 0xe50, 0xd) write$eventfd(r0, &(0x7f0000000040)=0x4, 0x8) r1 = eventfd2(0xffffffff, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x3ff, 0x0, {0xfffffffffffffffc, 0x1, 0x4, 0x0, 0x10000}, 0x1}) r2 = dup2(r0, r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x3f, 0x10000}) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x9, 0x6, 0x8}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x9, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) r7 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6, 0x24402) copy_file_range(r6, &(0x7f0000000280)=0x8c6f, r7, 0x0, 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {r2}}, './file0\x00'}) openat(r8, &(0x7f0000000340)='./file0\x00', 0x38e05, 0x9) r9 = syz_open_dev$vcsn(&(0x7f0000000380), 0xfffffffffffffffb, 0x4100) write(r9, &(0x7f00000003c0)="9c140548e9f3c0b32b2e8b743a681db32364db020e677e3b698fc42107846445c69dbe72467e40208df8329501c8aa7bbb7134b458ef56b82e06c82593afe71bbac7feb5f6b3c51e7cb3c9824dab426b75b753b45624ede13e8ffa2e3a4205c6196f6312b50225973a081b996d6bf6806b1a03d65e2c49141f35e86a18fa4e3af006eed1c05f049b8b60a03425bb4dbc1cccc040d117480167a5dc390525bfe0aa78fefca043ebc1f9f7f55dc5df9c62db19a78803899f6e55c180dcf5558437a2e6b094cfcc44befa88087b9631b0161bfa37ef3d983fd1af5db71acb2b4d11176ac286f2701af44b9b", 0xea) stat(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)) signalfd4(r8, &(0x7f0000000580)={[0x101]}, 0x8, 0x0) 23:14:47 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x260000) ioctl$TIOCSIG(r0, 0x40045436, 0x28) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x34000, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x8, 0x7, 0x6, 0x81, 0x7, 0xff}, {0x7f, 0x3f, 0x6, 0x7, 0x1, 0x100000000}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000380)=0x4) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000007c0)={0x1e9, 0x12, &(0x7f00000003c0)="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"}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, 0x0, 0x230, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x2d}}}}, [@NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ee}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ec}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7cc, 0xde81, 0x8639, 0x0, 0x3ff, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3f, 0x3, 0x400000, 0x2, 0xffffffff, 0x9]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x60800}, 0x10) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000d80)={0x1, 0x1, 0x12, 0x1e, 0xfb, &(0x7f0000000980)}) r4 = openat2(r3, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x80000, 0x99, 0xa}, 0x18) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000e40)=""/15) recvmmsg$unix(r2, &(0x7f0000002c80)=[{{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000000f00)=""/251, 0xfb}, {&(0x7f0000001000)=""/1, 0x1}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x3, &(0x7f0000002080)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002280)=""/96, 0x60}, {&(0x7f0000002300)=""/112, 0x70}], 0x2, &(0x7f00000023c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002400), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002480)=""/196, 0xc4}, {&(0x7f0000002580)=""/4, 0x4}, {&(0x7f00000025c0)=""/182, 0xb6}, {&(0x7f0000002680)=""/50, 0x32}, {&(0x7f00000026c0)=""/151, 0x97}, {&(0x7f0000002780)=""/239, 0xef}, {&(0x7f0000002880)=""/109, 0x6d}, {&(0x7f0000002900)=""/234, 0xea}, {&(0x7f0000002a00)=""/210, 0xd2}], 0x9, &(0x7f0000002bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x3, 0x0, &(0x7f0000002d40)) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000002d80)={0xff, 0x7e, 0x7, 0x2, 0x712}) ioctl$KDGKBSENT(r8, 0x4b48, &(0x7f0000002dc0)={0x1, "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"}) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000003000)={0x6, 0x6, 0x7}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20042001}, 0x4048040) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000003180)=r9) 23:14:47 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x5, 0x5}) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x3, 0x1, 0x7, 0x7, 0x25, "f33a7a941a3b5d8e3a05dffea8e9e07d52d5f24615330fec4e84b0935a86ecf4afaf6e86a0"}, 0x2e, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f0000000140)=@in6, &(0x7f00000001c0)=0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x800000, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, '[*-#'}}, {@nodevmap}, {@nodevmap}, {@access_user}, {@msize={'msize', 0x3d, 0x81}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}], [{@obj_type={'obj_type', 0x3d, 'security.evm\x00'}}]}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-('}}, {@uid_lt={'uid<', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'access=user'}}, {@measure}]}}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000540)='[*-#', &(0x7f0000000580)='./file0/file0\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='(}%+\'{\x00', 0x0, r1) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000600)={'macvlan0\x00', @ifru_flags}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) getpeername$unix(r3, &(0x7f0000000680), &(0x7f0000000700)=0x6e) r4 = accept4$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000007c0)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000009c0)='./file0/file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)={0x0, 0xfb, 0x63, 0x3, 0x5, "87defd16984bfec6a272fa89e8a033af", "03f8e51dfcaa0f6f3f0050d8554cda26a5ab530fe8c24d89ba6e5756e99657fc1c916983d73d1043e3e422a0a92e6b51870d7cc073b89d44ab9ba4b0ce0331048950375c51823b9d3adbb56d5f0c"}, 0x63, 0x2) accept4(r5, &(0x7f0000000ac0)=@isdn, &(0x7f0000000b40)=0x80, 0x100800) r6 = accept4$packet(r3, 0x0, &(0x7f0000000b80), 0x1800) sendto(r6, &(0x7f0000000bc0)="4aadfa0f4cdcfeaf634735e1deb201ae158a83cd2c2001a11dfb6564895880ec4b885a600d648a3ea112ecda5c1db6324535dcfeb434fea8119a422a3ebb4dd882b5229be9485927ec1b278b0030949a3a36117c0554b1a8a2ec24c9e05739309f42c80a12cef72a3d030c20afc5acf3b5226c824b012c33bef2fca53a7ec017fac2b27150fdbee8363453ab578ae8f88b42321a3a1c4a7afd8baa73e91d55a50da625ffa9a0b42d4b2046dcf63de5c8d43c52daee", 0xb5, 0x4, &(0x7f0000000c80)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80) [ 78.473335] audit: type=1400 audit(1664234087.271:6): avc: denied { execmem } for pid=289 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:14:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x412, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c840}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x24004004) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x210140, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x200, 0x9, 0x6, 0x9, 0x40, 0x1, 0xfbff, 0xfff8, 0x101, 0x6, 0x2, 0x8, 0x4, 0xfff, 0x1, 0x2]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="50eb8727513f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40844}, 0x4000) clock_gettime(0x0, &(0x7f00000095c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000009380)=[{{&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000900)=""/15, 0xf}], 0x2, &(0x7f0000000980)=""/203, 0xcb}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/190, 0xbe}, {&(0x7f0000001b40)=""/237, 0xed}, {&(0x7f0000001c40)=""/172, 0xac}], 0x4, &(0x7f0000001d40)=""/137, 0x89}, 0x2}, {{&(0x7f0000001e00)=@isdn, 0x80, &(0x7f0000003300)=[{&(0x7f0000001e80)=""/109, 0x6d}, {&(0x7f0000001f00)=""/164, 0xa4}, {&(0x7f0000001fc0)=""/241, 0xf1}, {&(0x7f00000020c0)=""/240, 0xf0}, {&(0x7f00000021c0)=""/92, 0x5c}, {&(0x7f0000002240)=""/138, 0x8a}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x7}, 0x1}, {{&(0x7f0000003380)=@phonet, 0x80, &(0x7f0000005640)=[{&(0x7f0000003400)=""/254, 0xfe}, {&(0x7f0000003500)=""/163, 0xa3}, {&(0x7f00000035c0)=""/66, 0x42}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x5, &(0x7f00000056c0)=""/164, 0xa4}, 0x3}, {{&(0x7f0000005780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005800)=""/67, 0x43}, {&(0x7f0000005880)=""/95, 0x5f}, {&(0x7f0000005900)=""/96, 0x60}, {&(0x7f0000005980)=""/121, 0x79}, {&(0x7f0000005a00)=""/97, 0x61}, {&(0x7f0000005a80)=""/53, 0x35}], 0x6}, 0x5}, {{&(0x7f0000005b40)=@ax25={{0x3, @netrom}, [@rose, @rose, @bcast, @bcast, @null, @rose, @bcast, @netrom]}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000005bc0)=""/83, 0x53}, {&(0x7f0000005c40)=""/127, 0x7f}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/109, 0x6d}, {&(0x7f0000006d40)=""/235, 0xeb}, {&(0x7f0000006e40)}], 0x6, &(0x7f0000006f00)=""/254, 0xfe}, 0x8}, {{0x0, 0x0, &(0x7f0000008000)=[{&(0x7f0000007000)=""/4096, 0x1000}], 0x1, &(0x7f0000008040)=""/8, 0x8}, 0xa13}, {{0x0, 0x0, &(0x7f0000009080)=[{&(0x7f0000008080)=""/4096, 0x1000}], 0x1, &(0x7f00000090c0)=""/88, 0x58}}, {{&(0x7f0000009140)=@tipc=@id, 0x80, &(0x7f0000009340)=[{&(0x7f00000091c0)}, {&(0x7f0000009200)=""/121, 0x79}, {&(0x7f0000009280)=""/187, 0xbb}], 0x3}}], 0x9, 0x2, &(0x7f0000009600)={r6, r7+10000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000009640)={{0x1, 0x1, 0x18, r5, {0x75, 0x6}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000009740)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000009700)={&(0x7f0000009680)={0x7c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r9}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000009880)={&(0x7f0000009780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000009840)={&(0x7f00000097c0)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000009980)={&(0x7f00000098c0)={0x10, 0x0, 0x0, 0x80408000}, 0xc, &(0x7f0000009940)={&(0x7f0000009900)={0x1c, 0x0, 0x400, 0x7, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x28000) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000009b40)={&(0x7f00000099c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000009b00)={&(0x7f0000009a80)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x20000090) 23:14:47 executing program 6: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/180, &(0x7f00000000c0)=0xb4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x24, 0x11}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8cb1f57524e5f5acf2aa7e2eba"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b6040af8d0"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21b18f018126feb0c15f6a800e"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x4008824) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x8, 0x9, 0x20}}}, [""]}, 0x30}}, 0x40011) write$P9_RWALK(r1, &(0x7f0000000540)={0x23, 0x6f, 0x1, {0x2, [{0x0, 0x2, 0x2}, {0x4, 0x4, 0x5}]}}, 0x23) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000580)={0x0, 'veth0_to_team\x00', {}, 0x6}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000005c0)={0x29, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x20, 0xbc, "74f4bbe0ffe30b354179dffc1e47ef53e56155444617cc269534617a5540bc98b5d4212aa4a902987250cd78fceb36b202e5267c5bd3aaee4ef3f4113e0028fff3bb74e50fc2fee021081993708ba2acb2381abe0124ba5753f665dc8cf5bdb82be8e103a7bc44af2e23dfc7ab0d1c9401b321141733d832ce23c829f1e34acc08ffcc95a6ec0832573b668c1e0ecd8e8d1cea49d7a0abf66264d63c50ea31f1e9e49b38bd95b2d8c820ee888ef11ac419f414fdb60b738890bfb767"}, @generic={0x0, 0x3d, "41b56122ca5f8406328cd3cded9730f81bb40066e20a3ec95f5a2f3d9fe6abf8f5658547313b359e56d0cf68577573b457d431b45790f0a02f5a8e4b90"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x120) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000780)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000007c0), 0x5e801, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x64}}, 0x40) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000006, 0x1010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000940)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000a00)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r9, 0x80, &(0x7f0000000980)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x0, 0x0, 0x1, {0x0, r10}}, 0xff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20040085) 23:14:47 executing program 7: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') read(r0, &(0x7f00000000c0)=""/4, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(r2, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x80103, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x9, 0x6, 0x6, 0x0, 0x4, 0x10080, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffeffff, 0x0, @perf_config_ext={0x3, 0x1f}, 0x20, 0x3ff, 0xfffffffc, 0x9, 0xfffffffffffffc00, 0x1, 0x6, 0x0, 0x7ff, 0x0, 0x7}, 0x0, 0x7, r3, 0x1) setsockopt$inet_tcp_buf(r3, 0x6, 0x3, &(0x7f0000000200)="9ea85ec2a18515f28a23b4d73d0bc6d89df195a5c2c39ff2d09497178eca9fc24e49fcec475eefb764e866b187eb616be3d1e422c87a99a88b0ea15699a5101d4b3c31e55a1c85beb6f4866c78a829e9441550606368a2269d3a9cd3c47f2e129e025aaf5d2e9986ae8bd72c70554f2a84f77f5461764f8a2883b16a48586a28e553cc4a62ce7b674a0999fb40ae9a2470b54bf6c1c9b85054e80759ac227bbd106405b692801ffd0b39d310f75b503741583016c4de7d323331242cbd87e8a5bfbfaa9fa0", 0xc5) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x8, 0x40100) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000340)) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x154, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3}, @val={0x8}, @val={0xc, 0x99, {0x400, 0x13}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6d0}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7b105eb9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x42}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "5a64c1dc7f640012476e0988a426e8b96629e2f04e4f4dac0b3b56682339d285779a2520201d472cee72ef949e1e89efcb8babd8f1f974baeed3f601a4a95cc4f17e8f4e18a7eb79e683004ded900042a29c476f03870bb475188ae0c44943a06b5d99a89bceed3b2559a6e80836f76f5fba7aea22914567e5244b189b4bd9ac3a7baf3cf4230deb259365ae15321c12ec41c0426db6bd6db0f347adb8c3388becf823158499ec78c97a926f3784bf6f980dde8190fd9f9cad599957fb41a84b514cb6cd0912de15e8ecbdeabe23831679398e6ace30d27c971e5920e2f77c1771197ad8cc0e44c7"}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000005c0)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000006c0)={0x0, 0x7ff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001740)={0xa, &(0x7f00000016c0)=[{0x3, 0x0, 0x7, 0x20}, {0x5, 0xc1, 0x2, 0xfff}, {0x90, 0x7f, 0x0, 0xfffffffe}, {0x0, 0x7, 0x2, 0x4}, {0x9, 0x5, 0x31, 0x9}, {0x6, 0xf7, 0x81, 0x311}, {0x98, 0x0, 0x6, 0x6a}, {0x7, 0x1, 0x7, 0xf8}, {0x3ff, 0x80, 0x3, 0x1}, {0x2, 0x1, 0x7f, 0x4}]}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x8f) ftruncate(r1, 0x4) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001780)) write$binfmt_misc(r0, &(0x7f00000017c0)={'syz1', "7ac83cd0d9f69d3566fbbf5a6ba9a285d2959c9dd3369873d601f3ef9247838879a29a4ecb7995cef5ffc130b2502ef41827e526896f10a52b64a47b19de7bed7d88acf78251a84454df151bbc2c5eab852681c52829cf2579f79e62e1d0e005ee863bb051d80440062081573e28c2ec7f87f4803a63765ba54e83be41d244a496bb8dd507ec8b807105d50ad194b73b563181fc"}, 0x98) [ 79.821926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.824030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.825666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.827309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.828626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.830203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.832672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.835491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.836768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.851506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.852171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.853550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.854891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.855890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.856540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.857626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.858418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.859120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.860049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.860632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.863454] Bluetooth: hci0: HCI_REQ-0x0c1a [ 79.864422] Bluetooth: hci2: HCI_REQ-0x0c1a [ 79.878910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.880938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.882297] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.883824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.884002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.884467] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.886553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.887838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.887970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.888355] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.890312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.891139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.891737] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.892702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.894886] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.902091] Bluetooth: hci3: HCI_REQ-0x0c1a [ 79.910483] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.911556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.914662] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.915534] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 79.916702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.918038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.918068] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.922319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.922985] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 79.923574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.924534] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.927223] Bluetooth: hci7: HCI_REQ-0x0c1a [ 79.930536] Bluetooth: hci4: HCI_REQ-0x0c1a [ 79.934567] Bluetooth: hci6: HCI_REQ-0x0c1a [ 79.952699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.954975] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.956924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.974527] Bluetooth: hci5: HCI_REQ-0x0c1a [ 81.884999] Bluetooth: hci2: command 0x0409 tx timeout [ 81.885019] Bluetooth: hci0: command 0x0409 tx timeout [ 81.948863] Bluetooth: hci6: command 0x0409 tx timeout [ 81.948875] Bluetooth: hci4: command 0x0409 tx timeout [ 81.949051] Bluetooth: hci7: command 0x0409 tx timeout [ 81.950042] Bluetooth: hci1: command 0x0409 tx timeout [ 81.950228] Bluetooth: hci3: command 0x0409 tx timeout [ 82.013085] Bluetooth: hci5: command 0x0409 tx timeout [ 83.933453] Bluetooth: hci2: command 0x041b tx timeout [ 83.933579] Bluetooth: hci0: command 0x041b tx timeout [ 83.996934] Bluetooth: hci7: command 0x041b tx timeout [ 83.997697] Bluetooth: hci3: command 0x041b tx timeout [ 83.998919] Bluetooth: hci1: command 0x041b tx timeout [ 83.999761] Bluetooth: hci4: command 0x041b tx timeout [ 84.000524] Bluetooth: hci6: command 0x041b tx timeout [ 84.060823] Bluetooth: hci5: command 0x041b tx timeout [ 85.980809] Bluetooth: hci0: command 0x040f tx timeout [ 85.981277] Bluetooth: hci2: command 0x040f tx timeout [ 86.045382] Bluetooth: hci6: command 0x040f tx timeout [ 86.046064] Bluetooth: hci4: command 0x040f tx timeout [ 86.046469] Bluetooth: hci1: command 0x040f tx timeout [ 86.046907] Bluetooth: hci3: command 0x040f tx timeout [ 86.047307] Bluetooth: hci7: command 0x040f tx timeout [ 86.108797] Bluetooth: hci5: command 0x040f tx timeout [ 88.028831] Bluetooth: hci2: command 0x0419 tx timeout [ 88.029302] Bluetooth: hci0: command 0x0419 tx timeout [ 88.092813] Bluetooth: hci7: command 0x0419 tx timeout [ 88.093292] Bluetooth: hci3: command 0x0419 tx timeout [ 88.093688] Bluetooth: hci1: command 0x0419 tx timeout [ 88.094132] Bluetooth: hci4: command 0x0419 tx timeout [ 88.094528] Bluetooth: hci6: command 0x0419 tx timeout [ 88.156782] Bluetooth: hci5: command 0x0419 tx timeout 23:15:43 executing program 4: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x40, 0x4, 0x1}, 0x7}}, 0x18) symlinkat(&(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00') 23:15:43 executing program 4: openat$hpet(0xffffffffffffff9c, &(0x7f0000003400), 0x101000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) fallocate(r0, 0x0, 0x1, 0xfffffffffffffbff) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x15}) 23:15:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x0, 0x8}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) ioctl$TCSETA(r0, 0x5406, 0x0) 23:15:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000a40), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) 23:15:43 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x26245505}) sync() sync() 23:15:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x5f, 0x1, 0x0, 0x0, "", [@generic="aa910bd64865fb4b8e"]}, 0x1c}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6cf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0xf8}}, 0x1) 23:15:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='net/ip_tables_matches\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x5, {0x10, 0x6, 0x3, 0x400, 0x1}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000040)) finit_module(r1, &(0x7f0000000080)='\x00', 0x0) read$eventfd(r0, &(0x7f0000001a40), 0x8) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x82, 0x15) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) fspick(r3, &(0x7f0000000100)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000000)=0x755, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f0000000040)) listen(r4, 0x7) 23:15:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x11}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) epoll_create(0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 135.511229] audit: type=1400 audit(1664234144.309:7): avc: denied { open } for pid=3834 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.512891] audit: type=1400 audit(1664234144.309:8): avc: denied { kernel } for pid=3834 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.529262] ------------[ cut here ]------------ [ 135.529286] [ 135.529290] ====================================================== [ 135.529294] WARNING: possible circular locking dependency detected [ 135.529298] 6.0.0-rc6-next-20220923 #1 Not tainted [ 135.529304] ------------------------------------------------------ [ 135.529308] syz-executor.4/3835 is trying to acquire lock: [ 135.529315] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 135.529354] [ 135.529354] but task is already holding lock: [ 135.529357] ffff88800f5f0420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.529386] [ 135.529386] which lock already depends on the new lock. [ 135.529386] [ 135.529390] [ 135.529390] the existing dependency chain (in reverse order) is: [ 135.529393] [ 135.529393] -> #3 (&ctx->lock){....}-{2:2}: [ 135.529407] _raw_spin_lock+0x2a/0x40 [ 135.529426] __perf_event_task_sched_out+0x53b/0x18d0 [ 135.529439] __schedule+0xedd/0x2470 [ 135.529452] schedule+0xda/0x1b0 [ 135.529465] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.529477] syscall_exit_to_user_mode+0x19/0x40 [ 135.529489] do_syscall_64+0x48/0x90 [ 135.529506] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.529518] [ 135.529518] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 135.529532] _raw_spin_lock_nested+0x30/0x40 [ 135.529550] raw_spin_rq_lock_nested+0x1e/0x30 [ 135.529563] task_fork_fair+0x63/0x4d0 [ 135.529579] sched_cgroup_fork+0x3d0/0x540 [ 135.529593] copy_process+0x4183/0x6e20 [ 135.529604] kernel_clone+0xe7/0x890 [ 135.529613] user_mode_thread+0xad/0xf0 [ 135.529624] rest_init+0x24/0x250 [ 135.529634] arch_call_rest_init+0xf/0x14 [ 135.529652] start_kernel+0x4c1/0x4e6 [ 135.529667] secondary_startup_64_no_verify+0xe0/0xeb [ 135.529681] [ 135.529681] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 135.529695] _raw_spin_lock_irqsave+0x39/0x60 [ 135.529716] try_to_wake_up+0xab/0x1930 [ 135.529729] up+0x75/0xb0 [ 135.529743] __up_console_sem+0x6e/0x80 [ 135.529759] console_unlock+0x46a/0x590 [ 135.529774] do_con_write+0xc05/0x1d50 [ 135.529786] con_write+0x21/0x40 [ 135.529796] n_tty_write+0x4d4/0xfe0 [ 135.529810] file_tty_write.constprop.0+0x49c/0x8f0 [ 135.529822] vfs_write+0x9c3/0xd90 [ 135.529840] ksys_write+0x127/0x250 [ 135.529857] do_syscall_64+0x3b/0x90 [ 135.529873] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.529885] [ 135.529885] -> #0 ((console_sem).lock){....}-{2:2}: [ 135.529898] __lock_acquire+0x2a02/0x5e70 [ 135.529915] lock_acquire+0x1a2/0x530 [ 135.529930] _raw_spin_lock_irqsave+0x39/0x60 [ 135.529948] down_trylock+0xe/0x70 [ 135.529963] __down_trylock_console_sem+0x3b/0xd0 [ 135.529978] vprintk_emit+0x16b/0x560 [ 135.529994] vprintk+0x84/0xa0 [ 135.530010] _printk+0xba/0xf1 [ 135.530021] report_bug.cold+0x72/0xab [ 135.530037] handle_bug+0x3c/0x70 [ 135.530053] exc_invalid_op+0x14/0x50 [ 135.530069] asm_exc_invalid_op+0x16/0x20 [ 135.530080] group_sched_out.part.0+0x2c7/0x460 [ 135.530091] ctx_sched_out+0x8f1/0xc10 [ 135.530101] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.530113] __schedule+0xedd/0x2470 [ 135.530126] schedule+0xda/0x1b0 [ 135.530139] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.530150] syscall_exit_to_user_mode+0x19/0x40 [ 135.530162] do_syscall_64+0x48/0x90 [ 135.530177] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.530189] [ 135.530189] other info that might help us debug this: [ 135.530189] [ 135.530192] Chain exists of: [ 135.530192] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 135.530192] [ 135.530207] Possible unsafe locking scenario: [ 135.530207] [ 135.530209] CPU0 CPU1 [ 135.530212] ---- ---- [ 135.530214] lock(&ctx->lock); [ 135.530220] lock(&rq->__lock); [ 135.530226] lock(&ctx->lock); [ 135.530232] lock((console_sem).lock); [ 135.530238] [ 135.530238] *** DEADLOCK *** [ 135.530238] [ 135.530240] 2 locks held by syz-executor.4/3835: [ 135.530247] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 135.530275] #1: ffff88800f5f0420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.530305] [ 135.530305] stack backtrace: [ 135.530308] CPU: 0 PID: 3835 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 135.530323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.530331] Call Trace: [ 135.530335] [ 135.530339] dump_stack_lvl+0x8b/0xb3 [ 135.530357] check_noncircular+0x263/0x2e0 [ 135.530373] ? format_decode+0x26c/0xb50 [ 135.530389] ? print_circular_bug+0x450/0x450 [ 135.530406] ? enable_ptr_key_workfn+0x20/0x20 [ 135.530422] ? format_decode+0x26c/0xb50 [ 135.530439] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 135.530456] __lock_acquire+0x2a02/0x5e70 [ 135.530477] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 135.530499] lock_acquire+0x1a2/0x530 [ 135.530515] ? down_trylock+0xe/0x70 [ 135.530532] ? lock_release+0x750/0x750 [ 135.530552] ? vprintk+0x84/0xa0 [ 135.530569] _raw_spin_lock_irqsave+0x39/0x60 [ 135.530588] ? down_trylock+0xe/0x70 [ 135.530603] down_trylock+0xe/0x70 [ 135.530618] ? vprintk+0x84/0xa0 [ 135.530635] __down_trylock_console_sem+0x3b/0xd0 [ 135.530652] vprintk_emit+0x16b/0x560 [ 135.530670] vprintk+0x84/0xa0 [ 135.530687] _printk+0xba/0xf1 [ 135.530698] ? record_print_text.cold+0x16/0x16 [ 135.530714] ? report_bug.cold+0x66/0xab [ 135.530731] ? group_sched_out.part.0+0x2c7/0x460 [ 135.530742] report_bug.cold+0x72/0xab [ 135.530760] handle_bug+0x3c/0x70 [ 135.530777] exc_invalid_op+0x14/0x50 [ 135.530794] asm_exc_invalid_op+0x16/0x20 [ 135.530806] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.530820] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.530831] RSP: 0018:ffff8880415dfc48 EFLAGS: 00010006 [ 135.530840] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.530848] RDX: ffff888015e88000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 135.530856] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 135.530863] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800f5f0400 [ 135.530871] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 135.530882] ? group_sched_out.part.0+0x2c7/0x460 [ 135.530895] ? group_sched_out.part.0+0x2c7/0x460 [ 135.530908] ctx_sched_out+0x8f1/0xc10 [ 135.530921] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.530936] ? lock_is_held_type+0xd7/0x130 [ 135.530949] ? __perf_cgroup_move+0x160/0x160 [ 135.530961] ? set_next_entity+0x304/0x550 [ 135.530978] ? update_curr+0x267/0x740 [ 135.530996] ? lock_is_held_type+0xd7/0x130 [ 135.531010] __schedule+0xedd/0x2470 [ 135.531026] ? io_schedule_timeout+0x150/0x150 [ 135.531042] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.531062] schedule+0xda/0x1b0 [ 135.531076] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.531088] syscall_exit_to_user_mode+0x19/0x40 [ 135.531101] do_syscall_64+0x48/0x90 [ 135.531118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.531131] RIP: 0033:0x7f8ab478cb19 [ 135.531139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.531150] RSP: 002b:00007f8ab1d02218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.531161] RAX: 0000000000000001 RBX: 00007f8ab489ff68 RCX: 00007f8ab478cb19 [ 135.531168] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ab489ff6c [ 135.531175] RBP: 00007f8ab489ff60 R08: 000000000000000e R09: 0000000000000000 [ 135.531183] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8ab489ff6c [ 135.531190] R13: 00007ffd9b57bb5f R14: 00007f8ab1d02300 R15: 0000000000022000 [ 135.531202] [ 135.587980] WARNING: CPU: 0 PID: 3835 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 135.588658] Modules linked in: [ 135.588905] CPU: 0 PID: 3835 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220923 #1 [ 135.589495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.590336] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.590731] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.592088] RSP: 0018:ffff8880415dfc48 EFLAGS: 00010006 [ 135.592489] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.593018] RDX: ffff888015e88000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 135.593556] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 135.594086] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800f5f0400 [ 135.594613] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 135.595149] FS: 00007f8ab1d02700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 135.595754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.596192] CR2: 00005586e598d080 CR3: 0000000040740000 CR4: 0000000000350ef0 [ 135.596726] Call Trace: [ 135.596922] [ 135.597098] ctx_sched_out+0x8f1/0xc10 [ 135.597392] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.597786] ? lock_is_held_type+0xd7/0x130 [ 135.598112] ? __perf_cgroup_move+0x160/0x160 [ 135.598443] ? set_next_entity+0x304/0x550 [ 135.598770] ? update_curr+0x267/0x740 [ 135.599078] ? lock_is_held_type+0xd7/0x130 [ 135.599397] __schedule+0xedd/0x2470 [ 135.599686] ? io_schedule_timeout+0x150/0x150 [ 135.600033] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.600404] schedule+0xda/0x1b0 [ 135.600670] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.601038] syscall_exit_to_user_mode+0x19/0x40 [ 135.601395] do_syscall_64+0x48/0x90 [ 135.601687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.602079] RIP: 0033:0x7f8ab478cb19 [ 135.602355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.603711] RSP: 002b:00007f8ab1d02218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.604290] RAX: 0000000000000001 RBX: 00007f8ab489ff68 RCX: 00007f8ab478cb19 [ 135.604815] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ab489ff6c [ 135.605339] RBP: 00007f8ab489ff60 R08: 000000000000000e R09: 0000000000000000 [ 135.605873] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f8ab489ff6c [ 135.606393] R13: 00007ffd9b57bb5f R14: 00007f8ab1d02300 R15: 0000000000022000 [ 135.606936] [ 135.607114] irq event stamp: 1844 [ 135.607368] hardirqs last enabled at (1843): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 135.608062] hardirqs last disabled at (1844): [] __schedule+0x1225/0x2470 [ 135.608679] softirqs last enabled at (1708): [] __irq_exit_rcu+0x11b/0x180 [ 135.609319] softirqs last disabled at (1377): [] __irq_exit_rcu+0x11b/0x180 [ 135.609955] ---[ end trace 0000000000000000 ]--- [ 137.330314] audit: type=1400 audit(1664234146.128:9): avc: denied { map } for pid=3987 comm="syz-executor.6" path="pipe:[14433]" dev="pipefs" ino=14433 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 137.334338] audit: type=1400 audit(1664234146.128:10): avc: denied { execute } for pid=3987 comm="syz-executor.6" path="pipe:[14433]" dev="pipefs" ino=14433 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 VM DIAGNOSIS: 23:15:44 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff8880415df698 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000005 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8ab1d02700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005586e598d080 CR3=0000000040740000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f8ab48737c0 00007f8ab48737c8 YMM02=0000000000000000 0000000000000000 00007f8ab48737e0 00007f8ab48737c0 YMM03=0000000000000000 0000000000000000 00007f8ab48737c8 00007f8ab48737c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffff11003c9ce7b RDX=dffffc0000000000 RSI=ffffffff8163655f RDI=ffff8880100448e0 RBP=ffff88801e4e73d8 RSP=ffff88801e4e7300 R8 =ffffffff852c46c0 R9 =ffffffff85ece412 R10=ffffed1003c9ce7d R11=ffff88801e4e73c0 R12=ffff88801e4e73c1 R13=ffff88801e4e73e0 R14=ffff88801e4e7380 R15=ffffffff8163655e RIP=ffffffff8111a3b2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcd491b9620 CR3=000000001a84c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000