Warning: Permanently added '[localhost]:27407' (ECDSA) to the list of known hosts. 2022/09/28 17:42:55 fuzzer started 2022/09/28 17:42:56 dialing manager at localhost:35827 syzkaller login: [ 36.836536] cgroup: Unknown subsys name 'net' [ 36.934998] cgroup: Unknown subsys name 'rlimit' 2022/09/28 17:43:09 syscalls: 2215 2022/09/28 17:43:09 code coverage: enabled 2022/09/28 17:43:09 comparison tracing: enabled 2022/09/28 17:43:09 extra coverage: enabled 2022/09/28 17:43:09 setuid sandbox: enabled 2022/09/28 17:43:09 namespace sandbox: enabled 2022/09/28 17:43:09 Android sandbox: enabled 2022/09/28 17:43:09 fault injection: enabled 2022/09/28 17:43:09 leak checking: enabled 2022/09/28 17:43:09 net packet injection: enabled 2022/09/28 17:43:09 net device setup: enabled 2022/09/28 17:43:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 17:43:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 17:43:09 USB emulation: enabled 2022/09/28 17:43:09 hci packet injection: enabled 2022/09/28 17:43:09 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 17:43:09 802.15.4 emulation: enabled 2022/09/28 17:43:09 fetching corpus: 50, signal 20644/22463 (executing program) 2022/09/28 17:43:09 fetching corpus: 100, signal 33640/37030 (executing program) 2022/09/28 17:43:09 fetching corpus: 150, signal 41191/46061 (executing program) 2022/09/28 17:43:09 fetching corpus: 200, signal 46672/52996 (executing program) 2022/09/28 17:43:09 fetching corpus: 250, signal 57279/64754 (executing program) 2022/09/28 17:43:09 fetching corpus: 300, signal 62548/71272 (executing program) 2022/09/28 17:43:09 fetching corpus: 350, signal 67276/77146 (executing program) 2022/09/28 17:43:10 fetching corpus: 400, signal 72491/83410 (executing program) 2022/09/28 17:43:10 fetching corpus: 450, signal 75506/87554 (executing program) 2022/09/28 17:43:10 fetching corpus: 500, signal 80250/93224 (executing program) 2022/09/28 17:43:10 fetching corpus: 550, signal 83272/97264 (executing program) 2022/09/28 17:43:10 fetching corpus: 600, signal 87563/102371 (executing program) 2022/09/28 17:43:10 fetching corpus: 650, signal 90554/106239 (executing program) 2022/09/28 17:43:10 fetching corpus: 700, signal 94801/111221 (executing program) 2022/09/28 17:43:10 fetching corpus: 750, signal 98498/115592 (executing program) 2022/09/28 17:43:11 fetching corpus: 800, signal 100581/118495 (executing program) 2022/09/28 17:43:11 fetching corpus: 850, signal 104422/122914 (executing program) 2022/09/28 17:43:11 fetching corpus: 900, signal 106999/126167 (executing program) 2022/09/28 17:43:11 fetching corpus: 950, signal 108481/128475 (executing program) 2022/09/28 17:43:11 fetching corpus: 1000, signal 109654/130500 (executing program) 2022/09/28 17:43:11 fetching corpus: 1050, signal 112087/133557 (executing program) 2022/09/28 17:43:11 fetching corpus: 1100, signal 114185/136301 (executing program) 2022/09/28 17:43:11 fetching corpus: 1150, signal 116279/138955 (executing program) 2022/09/28 17:43:12 fetching corpus: 1200, signal 117836/141217 (executing program) 2022/09/28 17:43:12 fetching corpus: 1250, signal 119625/143575 (executing program) 2022/09/28 17:43:12 fetching corpus: 1300, signal 120973/145529 (executing program) 2022/09/28 17:43:12 fetching corpus: 1350, signal 123131/148091 (executing program) 2022/09/28 17:43:12 fetching corpus: 1400, signal 124214/149830 (executing program) 2022/09/28 17:43:12 fetching corpus: 1450, signal 125478/151651 (executing program) 2022/09/28 17:43:12 fetching corpus: 1500, signal 127098/153720 (executing program) 2022/09/28 17:43:12 fetching corpus: 1550, signal 128261/155454 (executing program) 2022/09/28 17:43:12 fetching corpus: 1600, signal 129292/157115 (executing program) 2022/09/28 17:43:13 fetching corpus: 1650, signal 131600/159578 (executing program) 2022/09/28 17:43:13 fetching corpus: 1700, signal 133984/162078 (executing program) 2022/09/28 17:43:13 fetching corpus: 1750, signal 134900/163557 (executing program) 2022/09/28 17:43:13 fetching corpus: 1800, signal 135866/164964 (executing program) 2022/09/28 17:43:13 fetching corpus: 1850, signal 137132/166617 (executing program) 2022/09/28 17:43:13 fetching corpus: 1900, signal 138755/168531 (executing program) 2022/09/28 17:43:13 fetching corpus: 1950, signal 140294/170344 (executing program) 2022/09/28 17:43:13 fetching corpus: 2000, signal 141188/171817 (executing program) 2022/09/28 17:43:13 fetching corpus: 2050, signal 142475/173429 (executing program) 2022/09/28 17:43:14 fetching corpus: 2100, signal 143565/174903 (executing program) 2022/09/28 17:43:14 fetching corpus: 2150, signal 145867/177061 (executing program) 2022/09/28 17:43:14 fetching corpus: 2200, signal 147114/178489 (executing program) 2022/09/28 17:43:14 fetching corpus: 2250, signal 148636/180123 (executing program) 2022/09/28 17:43:14 fetching corpus: 2300, signal 149817/181540 (executing program) 2022/09/28 17:43:14 fetching corpus: 2350, signal 151320/183161 (executing program) 2022/09/28 17:43:14 fetching corpus: 2400, signal 151871/184163 (executing program) 2022/09/28 17:43:14 fetching corpus: 2450, signal 152455/185188 (executing program) 2022/09/28 17:43:15 fetching corpus: 2500, signal 155298/187472 (executing program) 2022/09/28 17:43:15 fetching corpus: 2550, signal 155903/188458 (executing program) 2022/09/28 17:43:15 fetching corpus: 2600, signal 156722/189550 (executing program) 2022/09/28 17:43:15 fetching corpus: 2650, signal 157977/190870 (executing program) 2022/09/28 17:43:15 fetching corpus: 2700, signal 158812/191930 (executing program) 2022/09/28 17:43:15 fetching corpus: 2750, signal 160133/193295 (executing program) 2022/09/28 17:43:15 fetching corpus: 2800, signal 161280/194524 (executing program) 2022/09/28 17:43:15 fetching corpus: 2850, signal 162434/195712 (executing program) 2022/09/28 17:43:16 fetching corpus: 2900, signal 163260/196732 (executing program) 2022/09/28 17:43:16 fetching corpus: 2950, signal 164807/198081 (executing program) 2022/09/28 17:43:16 fetching corpus: 3000, signal 165386/198937 (executing program) 2022/09/28 17:43:16 fetching corpus: 3050, signal 167298/200385 (executing program) 2022/09/28 17:43:16 fetching corpus: 3100, signal 168107/201283 (executing program) 2022/09/28 17:43:16 fetching corpus: 3150, signal 169079/202257 (executing program) 2022/09/28 17:43:16 fetching corpus: 3200, signal 169534/202964 (executing program) 2022/09/28 17:43:16 fetching corpus: 3250, signal 170580/203910 (executing program) 2022/09/28 17:43:16 fetching corpus: 3300, signal 171283/204731 (executing program) 2022/09/28 17:43:17 fetching corpus: 3350, signal 171811/205453 (executing program) 2022/09/28 17:43:17 fetching corpus: 3400, signal 172751/206344 (executing program) 2022/09/28 17:43:17 fetching corpus: 3450, signal 173590/207168 (executing program) 2022/09/28 17:43:17 fetching corpus: 3500, signal 174481/208007 (executing program) 2022/09/28 17:43:17 fetching corpus: 3550, signal 175014/208678 (executing program) 2022/09/28 17:43:17 fetching corpus: 3600, signal 175767/209404 (executing program) 2022/09/28 17:43:17 fetching corpus: 3650, signal 176254/210082 (executing program) 2022/09/28 17:43:17 fetching corpus: 3700, signal 177141/210896 (executing program) 2022/09/28 17:43:17 fetching corpus: 3750, signal 178045/211662 (executing program) 2022/09/28 17:43:18 fetching corpus: 3800, signal 178807/212356 (executing program) 2022/09/28 17:43:18 fetching corpus: 3850, signal 179420/212962 (executing program) 2022/09/28 17:43:18 fetching corpus: 3900, signal 179866/213547 (executing program) 2022/09/28 17:43:18 fetching corpus: 3950, signal 181171/214346 (executing program) 2022/09/28 17:43:18 fetching corpus: 4000, signal 181565/214836 (executing program) 2022/09/28 17:43:18 fetching corpus: 4050, signal 183048/215698 (executing program) 2022/09/28 17:43:18 fetching corpus: 4100, signal 183843/216357 (executing program) 2022/09/28 17:43:19 fetching corpus: 4150, signal 184430/216917 (executing program) 2022/09/28 17:43:19 fetching corpus: 4200, signal 185503/217602 (executing program) 2022/09/28 17:43:19 fetching corpus: 4250, signal 185979/218112 (executing program) 2022/09/28 17:43:19 fetching corpus: 4300, signal 186639/218657 (executing program) 2022/09/28 17:43:19 fetching corpus: 4350, signal 187396/219187 (executing program) 2022/09/28 17:43:19 fetching corpus: 4400, signal 187937/219646 (executing program) 2022/09/28 17:43:19 fetching corpus: 4450, signal 188775/220186 (executing program) 2022/09/28 17:43:19 fetching corpus: 4500, signal 189512/220656 (executing program) 2022/09/28 17:43:20 fetching corpus: 4550, signal 189978/221085 (executing program) 2022/09/28 17:43:20 fetching corpus: 4600, signal 190723/221559 (executing program) 2022/09/28 17:43:20 fetching corpus: 4650, signal 191069/221942 (executing program) 2022/09/28 17:43:20 fetching corpus: 4700, signal 191666/222344 (executing program) 2022/09/28 17:43:20 fetching corpus: 4750, signal 192528/222839 (executing program) 2022/09/28 17:43:20 fetching corpus: 4800, signal 193071/223257 (executing program) 2022/09/28 17:43:20 fetching corpus: 4850, signal 193633/223670 (executing program) 2022/09/28 17:43:20 fetching corpus: 4900, signal 194546/224119 (executing program) 2022/09/28 17:43:20 fetching corpus: 4950, signal 194989/224477 (executing program) 2022/09/28 17:43:21 fetching corpus: 5000, signal 195837/224872 (executing program) 2022/09/28 17:43:21 fetching corpus: 5050, signal 196319/225244 (executing program) 2022/09/28 17:43:21 fetching corpus: 5100, signal 197212/225585 (executing program) 2022/09/28 17:43:21 fetching corpus: 5150, signal 198218/225930 (executing program) 2022/09/28 17:43:21 fetching corpus: 5200, signal 198993/226502 (executing program) 2022/09/28 17:43:21 fetching corpus: 5250, signal 199432/226896 (executing program) 2022/09/28 17:43:21 fetching corpus: 5300, signal 200357/227208 (executing program) 2022/09/28 17:43:21 fetching corpus: 5350, signal 201154/227521 (executing program) 2022/09/28 17:43:22 fetching corpus: 5400, signal 201734/227783 (executing program) 2022/09/28 17:43:22 fetching corpus: 5450, signal 202108/228043 (executing program) 2022/09/28 17:43:22 fetching corpus: 5500, signal 202779/228283 (executing program) 2022/09/28 17:43:22 fetching corpus: 5550, signal 203188/228540 (executing program) 2022/09/28 17:43:22 fetching corpus: 5600, signal 203828/228786 (executing program) 2022/09/28 17:43:22 fetching corpus: 5650, signal 204616/229023 (executing program) 2022/09/28 17:43:22 fetching corpus: 5700, signal 205160/229037 (executing program) 2022/09/28 17:43:22 fetching corpus: 5750, signal 205635/229039 (executing program) 2022/09/28 17:43:23 fetching corpus: 5800, signal 206176/229064 (executing program) 2022/09/28 17:43:23 fetching corpus: 5850, signal 206776/229090 (executing program) 2022/09/28 17:43:23 fetching corpus: 5900, signal 207080/229090 (executing program) 2022/09/28 17:43:23 fetching corpus: 5950, signal 207315/229092 (executing program) 2022/09/28 17:43:23 fetching corpus: 6000, signal 207783/229094 (executing program) 2022/09/28 17:43:23 fetching corpus: 6050, signal 208287/229097 (executing program) 2022/09/28 17:43:23 fetching corpus: 6100, signal 208884/229106 (executing program) 2022/09/28 17:43:23 fetching corpus: 6150, signal 209335/229106 (executing program) 2022/09/28 17:43:23 fetching corpus: 6200, signal 209658/229106 (executing program) 2022/09/28 17:43:23 fetching corpus: 6250, signal 210113/229150 (executing program) 2022/09/28 17:43:24 fetching corpus: 6295, signal 210432/229153 (executing program) 2022/09/28 17:43:24 fetching corpus: 6295, signal 210432/229153 (executing program) 2022/09/28 17:43:26 starting 8 fuzzer processes 17:43:26 executing program 0: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7, 0x2}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x218002, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0xad, 0x7, 0x200}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xd8f7f7eb5fd95d81}, 0x1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x101602, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000240)={0x2, 0x2, 0x19}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xfffffffc, 0x7f}}, './file0\x00'}) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000002c0)={0x1, 0x59, "dcb807391e752b48bcaeef8087e361dab54a4c5fad4bdf144fca8aa4a765a66aca6b3621a60c987d11cf811347a9f2bf82c7d3d3c4e3283458fdcefb1ec13d8ed594d95b3275c48974f5eae24b68f5396ddef04eced59c28f4"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) dup2(r4, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x1ff, 0x80}) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f00000003c0)={0x0, 0x8120, @start={0x0, 0x1, "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", "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"}, [0x9, 0xfff, 0x6, 0x9, 0x7, 0x5, 0xffffffffffffffe1, 0x9, 0x5, 0x6, 0x7, 0x7, 0xfff, 0x9, 0x20, 0x3f, 0x1, 0x1f, 0x1ff, 0x8, 0x8, 0x52, 0x6, 0x3, 0x80, 0x7fffffff, 0x4, 0x7ba5a6e0, 0x7, 0x200, 0x3f, 0x6463, 0x1, 0x3, 0x8, 0x7fff, 0x10001, 0x800, 0x26df, 0x1, 0x80000000, 0xfffffffffffffffb, 0x5, 0xf3, 0x5, 0x8, 0x8001, 0x7fff, 0x4, 0xeb53, 0x8, 0xff, 0x8, 0x6, 0x2, 0x4, 0x6, 0x3, 0x6, 0x18000000, 0xf4, 0x1, 0xff, 0x4000000000000000]}) r8 = accept4$bt_l2cap(r3, &(0x7f0000000e00), &(0x7f0000000e40)=0xe, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000e80)={'wg1\x00'}) fallocate(0xffffffffffffffff, 0x24, 0x3ff, 0x80) 17:43:26 executing program 1: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)) r0 = add_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="c045a4085172dd730d93c68d10bd50257c4dd5e76f3deb9b108c3b3714f57aa71ef70d741d230ec7e6b1112b632fd42377db1951dd7f025fbdd337e2f99a52c80159f3bd1da33f5c40247e8affcfc9f885bb6c1b5a324fe14822cb20ed9985a988c380c96b4efeaec3d5ef93e70aeecbaf94282801e820712ee104ee3f28aae018d0c89e9075179dcf9009c1c148d120d3c928225ef30de38c3039c61aac8582d5e9a9aa787e0a124d27f004321b64cac940c81e663a1b612abbeabf50d0195a26fa65ccdd6b838289248e30", 0xcc, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="d5d0d2cc0f2ce8122666985b8c8733812b11a4b0c1835dee8b", 0x19, r0) r2 = add_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="98386ca6dc24", 0x6, r1) write(0xffffffffffffffff, &(0x7f0000000340)="cbdb782d673f0aaacdd4ec547ae3e04b4cbad569922e3c126c183a864e40448dc3264b4d0d629f35f4d72187f24ad19bee", 0x31) r3 = add_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)="6904fef59288da86a03c145a0b10418cbec866c9ad18e715e4cf3bd5430f8e54625bba54ac526d85c69150b807e85b56c0f0859099", 0x35, r1) keyctl$read(0xb, r3, &(0x7f0000000440)=""/4096, 0x1000) mq_timedsend(0xffffffffffffffff, &(0x7f0000001440)="c7b33e543334c59ed04177d78b1b12ae8d3069ca247da48140320679a7ec111be93c86655aa39c420da18de37ef7f0c8cdb527f6dcbb450c48f0b46e39a6525cff83f309e9c223fc0fa40d6f24fd1300698f153cf506051d0cf53e18f21f12341546648697057a5f7e6dbba05c637720c135beda8d20452891c85c34584b378cdcb4eb24b3db17013532a6e332207b5b8339cd7257ea047af938fc702c616a11dafc9333a8a02f171c66609cf9c2e8c9d0d536f5826f6b1c", 0xb8, 0x6, &(0x7f0000001500)={0x77359400}) r4 = add_key$fscrypt_provisioning(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x2}, &(0x7f0000001600)={0x2, 0x0, @auto=[0x31, 0x3d, 0x3f, 0x18, 0x1c, 0x24, 0x1f, 0xc1, 0x2d]}, 0x11, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000001540)='dns_resolver\x00', &(0x7f0000001640)=@chain={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, r1, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000001680), &(0x7f00000016c0)={'fscrypt:', @desc3}, &(0x7f0000001700)={0x0, "2deadb54a1984dfffc21dabdf640e4462ec8ec0d0ee190b0884cb216f59058c6c3319e4084c97ec16b2ea4c2ef13543af1ae149e45de02c3b696ef021315b80e", 0x2b}, 0x48, r1) request_key(&(0x7f0000001780)='cifs.idmap\x00', &(0x7f00000017c0)={'syz', 0x2}, &(0x7f0000001800)='syz', r3) add_key$keyring(&(0x7f0000001840), &(0x7f0000001880)={'syz', 0x2}, 0x0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000018c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000001900)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000001940)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) r7 = creat(&(0x7f0000001980)='./file0\x00', 0x48) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240420d0) 17:43:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004014}, 0x24004090) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x48}}, 0x4000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8002) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r7, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r4) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4840}, 0x4006000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x3404}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x48001) 17:43:26 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)=':\'(&\x00', &(0x7f0000000100)=',*\x00', &(0x7f0000000140)='%$$-\x00', &(0x7f0000000180)='[\x00', &(0x7f00000001c0)='X#!-}[\xbb\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\xed:-{*(.\x00'], &(0x7f0000000400)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x81\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00'], 0x100) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1d8, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x309}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x1000}}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xea, 0xbe, "92baca714379ab8a68b03b04e8d0e943eb5f268ad6cfc78589f1ee363d609ca35b17b9e26398c60cd635b967f3db66f8fc29cccab9d70c7702fc08eca6812265b49096b30f9965575f62d2f59c857b9ba07e27538c0107d9f81cc99fd2a6ae31bfd35f6fe84edd3a9392153260806df5017c6c1454ea77848ac550e119a4e2db794425fce34fb84373b6c301889b9d4782d6877eaecb4a945a881d0a5b0a21f63cd5917445465b9c6449c328382ecb5dd912a66b516cb23e4ef61941f818dcb4ba41057b8d6266f429b8cbc8fe0a2b0ea9238ef8576bc227e4c182b281b1c05db4f4fc7d7bde"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5f3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa1, 0xbe, "eb656c1cde84c297959b612352b5f95245bc2675496f62e1e3dd2cad1033bb0933c9e4f34192885bd572a5625382f943ef40820360d5f87d7e4db2e658d93378abd8e61ec93755a222c6682c2a3e19d250a14fde16449bbdafe32bd9d5a7ec90c18f7cb42edc557d67bdad6fe2873382801aac28d130e0ed834146a508f3c18ecd8ec228099c6fbe174a841dd2613906b68b27c92557854d688b75f16e"}]}, 0x1d8}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r3, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80014) r5 = io_uring_setup(0x77ac, &(0x7f0000000900)={0x0, 0x422f, 0x0, 0x0, 0x193, 0x0, r2}) write$binfmt_aout(r5, &(0x7f0000000980)={{0x108, 0x3f, 0x3, 0x3b7, 0x2c0, 0x8, 0x33a, 0xff}, "7816d6f49ce9b8fafa4343adf49a42b0334252bebdab08246fa9e7f0c7fdbe82512ca6f178e38755428491ba0d7974dd1b6ed6e516c9549a8626c34824bc7ca803698ad2463bdcec45a760c34f8d880d84feb150af5c100f6141f5ca08b1b3549b09a6eb7c0a8452b6b43be689241f5208d1c5636e366460f69bd575d832a5357362ce332a4c6a62b9cabc3a081a3712084eaec6755aea517cd4d55607aad922ed82d0b93b15289da370950ca75ad7788c4d2de54416e86f3da1205dee01d64a650217a1c6643df3975b4b9e78a2489528332c98b046049bcbc56010b9daec0376404925aad2106aaf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa09) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002800)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000027c0)={&(0x7f00000013c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001440)=""/225, 0xe1}, {&(0x7f0000001540)=""/27, 0x1b}, {&(0x7f0000001580)=""/12, 0xc}, {&(0x7f00000015c0)=""/96, 0x60}, {&(0x7f0000001640)=""/140, 0x8c}, {&(0x7f0000001700)=""/37, 0x25}], 0x6, &(0x7f00000017c0)=""/4096, 0x1000}, 0x0, 0x1}, 0x5f51) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000002840)={0x0, r5, 0x3, 0x5, 0x2, 0x4}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000002ac0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a80)={&(0x7f0000002900)={0x150, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5f}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xa5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xbf4}, {0x6, 0x11, 0xe2ce}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8040}, 0x80) ioctl$FIOCLEX(r2, 0x5451) r7 = syz_open_dev$mouse(&(0x7f0000002b00), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000002c00)={'syztnl2\x00', &(0x7f0000002b80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xff, 0x3, 0x4, @loopback, @remote, 0x0, 0x8000, 0x2, 0x1f}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002c40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002d00)={'syztnl1\x00', &(0x7f0000002c80)={'syztnl2\x00', 0x0, 0x7, 0x80, 0xffffffff, 0xbf94, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x67, 0x0, 0x9, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x10, 0xeb, 0x0, 0x6, [0xa, 0x9, 0x400]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000002ec0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d40)={0x114, 0x0, 0x201, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004880}, 0x5) 17:43:26 executing program 3: fchown(0xffffffffffffffff, 0xee00, 0xee00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x40, 0x1}, 0x8001}}, 0x18) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0xc008800) write$P9_RSETATTR(r0, &(0x7f0000000180)={0x7, 0x1b, 0x1}, 0x7) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x2}, 0x7) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x8, 0x2) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = getpgrp(0xffffffffffffffff) r5 = memfd_secret(0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x1, 0xde, 0x6, 0x0, 0x1ff, 0x200, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0xb06034a28da2700, @perf_config_ext={0xda000000000, 0x2}, 0x4010, 0xb78, 0x5, 0x5, 0x1, 0x4, 0x8, 0x0, 0x1f, 0x0, 0x7}, r4, 0x3, r5, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000300)={0x7ff, 0x0, 'client1\x00', 0x6, "1a1607350a94f4e0", "41a3e0da4f42b729dc7d266c90feaf601b7576ddbfdf14a1e425eeea3f751825", 0x1, 0x9}) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e8, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x81, @local, 0xee32}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1a8b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x132}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa5}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb321}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4c005}, 0x8d5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r7, {0xfffffffffffff001}}, './file0\x00'}) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x40, 0x77, 0x6, 0x4, 0x0, 0x3ff, 0x22021, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x85, 0x5}, 0x12410, 0x100000001, 0x2, 0x4, 0x24, 0xfffffff7, 0x5, 0x0, 0x7b, 0x0, 0x8}, 0xffffffffffffffff, 0xc, r8, 0x4) 17:43:26 executing program 4: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0xfe522b9e2e02823f, 0x1, 0xe0, 0x80, 0x30, @dev={0xfe, 0x80, '\x00', 0xc}, @remote, 0x0, 0x20, 0x80000001, 0x6}}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x22) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x4000, 0x28) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40001) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000002c0)=0x8001) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsetxattr$security_evm(r1, &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "2db26ecc4a6b4f0de72e5f4afb3c11e9"}, 0x11, 0x2) r5 = open_tree(r4, &(0x7f0000000400)='./file0\x00', 0x8100) write$P9_RSETATTR(r5, &(0x7f0000000440)={0x7, 0x1b, 0x2}, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f00000004c0)={0x4, 0xfffffffe, 0x800, 0x0, 0x80000000}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) vmsplice(r9, &(0x7f0000000940)=[{&(0x7f00000005c0)="21b04fb1f7136578f51c65e00e7df0afcebbcf55e17fcb1f089288f9ef1e08294e2823267a2a20759d5e09143798150546a4efb4a41f2f392a199bf0535b77560b1934321b4b8970dcb8894f82c1e2fd741d1470190c7ae860f7d5fa27", 0x5d}, {&(0x7f0000000640)="65f90973bceef437e82852bb9e43e678be0786b3bdfb397b069a673adb7633691e64b6aba8ea1d5c252db6916de5fd7b1fbe270e186e92d84fa66d37f8f77e9c634e53b08cfb9c13883cebce491f3bbf1d0bf135da1c12d0597057ca3b8418e0b772ea444b61a0a1803d36b83b8e92c3", 0x70}, {&(0x7f00000006c0)="03a8ebb848", 0x5}, {&(0x7f0000000700)="d40ca6461f93947efd55fb57b0f798bf5b4924f354813bda270a48d7aa19d61ddc2198c533dc0b71829dab46863173474f4e57aade04de08ab813cc791a762d93aa1ed21df7e57f099ff776556287805b94260673a749d317367221e5f35735dc2bc31fe93b8579348d33f3d0e0c40d43ac7088183", 0x75}, {&(0x7f0000000780)="8af96c62596936e4d554feab88c65b095eeeb6c881881ee4ecaf3bdd394772efd71386d17a17e375cdcad4b4f504475abef727bc20ea8350038b06e2902dab9764231bd289e4d53d1a9361be4d6cc7a6a0ee76e0559c2491d713b2869912d735ac9c6428ea3bcf3a5539aef541", 0x6d}, {&(0x7f0000000800)="345717d281e53c0dd599b3fb7f0d6ae0b78fb7b1ae88af9d81b4789f7cde6cca03c884b80a314ff8bfd2718fb257cd81f7e2c4e616a60d4c130a25fdb638bd8ddb9d51ae7277e80a3c87c451643ba51f9d93381982065ffc7c62c703fa3542", 0x5f}, {&(0x7f0000000880)="797d3a9fa1da33e29457b69950e8652ded194a14", 0x14}, {&(0x7f00000008c0)="6015dfcd43c3bddd14ce240b197b06a8b1d974d38fb5806f3bccc1837be5ff5fdc6765a3331683649d5ee55776ce17f35344ad7a4395b0ebdeb9d6d1131118d40bb7652b616a996a0134fb6ed821f8ad65e0d9fa99f3fbffde2760e6398573a35f035ceda962deb2afac8cae41", 0x6d}], 0x8, 0x0) dup(r8) 17:43:26 executing program 5: getcwd(&(0x7f0000000000)=""/61, 0x3d) getcwd(&(0x7f0000000040)=""/155, 0x9b) getcwd(&(0x7f0000000100)=""/5, 0x5) getcwd(&(0x7f0000000140)=""/72, 0x48) getcwd(&(0x7f00000001c0)=""/244, 0xf4) getcwd(&(0x7f00000002c0)=""/237, 0xed) getcwd(&(0x7f00000003c0)=""/154, 0x9a) getcwd(&(0x7f0000000480)=""/7, 0x7) getcwd(&(0x7f00000004c0)=""/4096, 0x1000) getcwd(&(0x7f00000014c0)=""/31, 0x1f) getcwd(&(0x7f0000001500)=""/213, 0xd5) getcwd(&(0x7f0000001600)=""/90, 0x5a) getcwd(&(0x7f0000001680)=""/66, 0x42) getcwd(&(0x7f0000001700)=""/190, 0xbe) getcwd(&(0x7f00000017c0)=""/152, 0x98) getcwd(&(0x7f0000001880)=""/15, 0xf) getcwd(&(0x7f00000018c0)=""/48, 0x30) getcwd(&(0x7f0000001900)=""/172, 0xac) getcwd(&(0x7f00000019c0)=""/201, 0xc9) getcwd(&(0x7f0000001ac0)=""/21, 0x15) 17:43:26 executing program 6: syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4000001) r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x10000044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r4) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20048881) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000005c0)={0x12ac, 0x7, 0xa, 0x300, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0x125c, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_TARGET_NAME={0xe, 0x1, 'NLBL_MGMT\x00'}]}}, @masq={{0x9}, @void}]}, {0x4c, 0x1, 0x0, 0x1, [@objref={{0xb}, @void}, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}]}}, @target={{0xb}, @void}]}, {0x112c, 0x1, 0x0, 0x1, [@cmp={{0x8}, @val={0x1120, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10fc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "57c74a92491948de2c5f1a47eab982596ad5c843996c0f0a038cd120b93fbd9642ee9f99792398a1b4b32771dece8ed740f8a895083a47cd84a04f9efee5b757281619746295b9abb1a50c38566f4a474e577921249bd9cd534a0bfbdf4c6dacf8d1e8e688628f5555b25644188bc3aded59602854601ee3baab91ac391e2b2f39f531d8a32d43bfa18a29b5f6b6c60525abad724ec10f61cbdc5d7d5fbcd109c60def927ae40796b9d0021e4debcf654eafc9ef4d1ebe394e5ea7ab584c442d09ba1e25a8f906dd854cae2399a2b7b3c254934ecc82905f1c69cd81422620bf11cd07c72ca8821dd998b228d96910493ee36692d3c2d932ef3921c522019cd894ce3d9832549fbcbfda95977a1a50b7359fe723881c888ef9df15ab1b6facd91e525ab03df5a7b8542a2e88e0270a6f9ce0958ee9bf7153d0aa15aea7aa7354159eee4990fcbf6b89e7237aca1684be3044134a161bf28e5d6a2f05cb4f4e835d88b272b161d59df25fca4454f69fba09e2c580d5309ec4808862671ee7e5664abe465c5b31deba9a4e9f398e1aa1360ce8e30c9871b2f2abec28c53ed8c9a7f1014f665234bb012cff0c3941e4ec7e4c033416104e69ec6c1e8b1c8053b961737451cc324a9e44ca643cd82fc6eacb2670bb82b59937070fce4c706e51e9f604613837bb1cdbaa443f82d772de8e7e6612eea14db5799ebd165b43f7945b630878408da02353dd455f61718b18a54500ed868dced1d221e0d8ff78ad204d3bbd9b56d22d3ffeeacacbbfc459176142c07ee171c2f9a4f0e3286d27c05de45600fd909e157b3d846ffabe0b9a90f76baaadc2dbf0e4b6423db5c4b9755559db867ad65c645efa1eee78b119be4da9b95826cb4cdfc16bd82ac4808383118ce1a9a97b3ea36ed25377a7fa4136adbe265ef2544f96a2ff625beaec9d1e4671c94d255c46a2521c6498b7247f34881f17fe6b2373022b010f4c37fbec85af90e45035e9bd799fa3bf9fc363a3a84400a7bbd39da62d512d58ef5b1075f65af623c058495eb0f958d8913884422734570ea2b2d486f9cb7da786a1bde29444e8558c55a56985544c326ebf35a92fc7f9aa12d2688dac5f5ca13bec0bb9becf46ae001e132f86d5ae586d8efc981b64d4108f50e92354bd9e1b54984d02eb79d67310c7460e1945167e8895504791d0a62339668f6461efae2cbd91c0e10d37698c3ae846f5308fa0761cd34d3ed3c60c8f7b6e9e5e79ecedf4fe0323cd896a27c70bb3d708418679bf03584c60ab8e8129c23e3864fe15c2a2fe8d56a1eca902d3c44c3ce44c560e884a7e64b7b3a304a10e6170726294e07acec7bcf0ce820c7d9fb1ddd5d5d7c8f46e167c4fe2256a9ac616b5bfed17632448022a818b8daa4a66022ff8d70b0cc8a78f949f909891030ca465e2d062ec04c4bafec21af0dc4910f11826bab4cca9a793dbfec680c33558c06cb5b8ef41b950fadcb5fce8296d1e649e9ad74aa3260678c43a80a89b6d1fbca0c8c8bedcbd26baff6bea045ad872c788a5402f68e25ad770c0e079f83d86fe6993c492e3d494e4d848dbec34af9b7af42f87b4ccf38c1e024bfab27d6979c07515c602b1814e1c4cfa5f2101ca2ad240cc9e77d7b8bfbdc87de4eaade746ec249a02e6775de8717f0cbd8fe4812653dc4de03b99319dbd98f132e315ac8187272cc802994b3d0e38da0c0d7f8b1ce4bdd5d15cb3cff27fe17a3e783c64a46bfdbd9640aff3b8ee9aff616e0713434255582ebf6adbcc4243602f49b4083dba51c69ad66e67b2932cb3e50162df2968eb0734ecc684bbe93a324b3a08dab433651a52bcc318e1a27f60ae5665136a427de5545caee07db39d85fafd90e441bb0accec05a3938216eebb9577cc5cc5691a50c221966df6aafc26a04213fd8a474d8170bdd7ef8418b90404c8cf85932b68efe811c45294ca8e0710d59647810307a08ee35608e097d8c11b41617d878ceffcea745a1f0f4bb5675f3332911a14f594893c922c500dbfb3f7bb5ebdaf8cfb3edf186500f239b810dd64b21ee8b6b73e3d8f6856c35d9fa5289b6f4f95c87c58bc6978b51f8b4d0ca0199cfaf9bb4337c2be50b1d3164c6ae5654047177b743f431000b34c044f458ee398c9517ba6536df162696922e32f0a311d7854799e9d1ca85eb8e6174ae056eaa3704099db4d9c1566944c77d908b558b8a88b92083af11bb0312f5df2618518f02c2a1f026bfcb880f7e2a8352813a448f6e771b4e2d7f8ce4a2217b67e53267ad8002a4bebb3ae255a28f46d17177c8b23eea36d08353c677e825f177f85c7fd2845ffe020de29ca154c707f8af03943b5ac209edfea320a5c80a5d2596ab6af81392855b8bac63281d90fb6a06cba0ca558a3b936c4f21fed03c0cda02df0f8e4bc181fc0d0c3ecfae4cb8294fd11144e98dce53ef20983f475c5a89958a505e9100add435a6deac7d26b86ad2ea1e3c7cc3987e1ae9976106f9b933155924d86343b157625ba6de924cc110dd57265bf1c2ec9878f0723ff260114161220de9e007ca6679fb5f49cc71ef157edd675c054fe6facaa4fe459142ef21881f1bc5c14884f9f7ba10e6820ca5d54d08c2b346e7f78312a67934c3926086572c7ad85b038374eb9466080dd4fca9c7fb506a340ec3280d77933e1446227b9512056405654bdbfc4f955492102c0c5d6eadb686bc3e4347c8d0a48c9eaf67a88811e8471b7ec8be48dc68c736e6067d0361375ea547918d95134292cd53656e37fb797eca6242af49be1a405bcc4d269fc758b0f240707d1951680c472d39269945996529f7c74224811638c4d87c3dbba238d75ff07c7b8b58cfa1288d2e5e16032fedbc2ce101e41c5c61d2f4e8becb44ffc123079f48f8bba6022dcdcee7288904d75d46c0616f85de65cc5a73cb2826f73667dd562d1186b1427152a917089d06e7b9835316bfa01b76f6199d77ec138d3d789c893af7c555a6d700feb3869567db015d2e6238cd0fc6f1d5513968f4002ff4fd554f718fe4698282f21862325463d1c39cf953e0e80581e6bdd110ac9e2d25f8eafda742b85a7136345ddc71705876e2ee1ecfc84edf0ff13091ed07705f52599c484b3d8e8a429ecb38e4a0e149f363f2cc7ffab5d1d99ed4dd36fa3a53b59ae5a675b1a63041c3b4a996724ba8bef44e6319cab62f144fdc4ccac4a05b7f17f67a72da591085ea6f17a8a3b5cb6cbb8c18eeb36650ac9283f9fed068ba295f892023e2ec987ebcf7b7be4980b1532f04ab87c859f2ca570da0086d628295b125f0f99ecd2ac055fffe2b76b7f7e44c02fd0bce03e7fadc2583354509ca8027ae3cae10b70530392ef6acb476d0fec00ee4d1d6579267e7de55d9d2873ac799d62ed468bf7fe83336733752e407fa5b6750aecb4c664897f1cf7fbe37a45acc8e31e7a9722ae4b36edcece66dd6b22fe0a51e9dc4c4f046834d209fb8585ff9f58498049bd13f96485d1cc56273d2d74530ae434b6386ec56c6994ee4f00d2b617a6fae0f0c045533f6d29aff9faf8197253bca53b66c4e1113474cf907d6f24c1733be4744de8be8645ea31bbbca37c64f56dba180069c576278dff26b12fe39212c214623b40200cbe5785f231c6c0ec2ee4e234854cbd3978f070a72f1c39c2e0cefd49120037da6e5a1d29c8a6d035a821fd792033c83aba0545e17f850b79e55cb6f3c65293a3b966532c5f7613992490a829a0a18e7ea3b9c75a9d89e19079087e8856036def6deeeb9e471880b35a4a2ce8bca5c0e5eaa3e994bd5408878e7600dcdb8f1bf0a6c7695e137ade34de203207834722b4ae07a23e6733b5ae86a6434abc5ff0a09d2986ab9b58e6c2e51a7db9db680cfb1511ce567713816b6b092accde678f4c8f8fdb2c6b39a14c56b47a390e2b226549370c825989a8f4e67f414c4fc909bfd84c7a56feac5111bef828d47460f1dd56bdf026e056680117cd565e42ed1c53c136a19f5df05bab91be1f32fc288df37b61fdc04ce02127484848e650c19657a09cabfb9774026b5e8b31ef8e10c40387b95fd41b470d77624db305d7c62443c4f562fbac37479a641bc2c1bcef913391bff2f5c2570916d7535a2f15701d09633bc5dc8c8dd4990dfea8aa2dc6de6e76441615f95a77904d471dd8ed1ba5a29d552367d97e84d8436eb4808a9de84f44f76412618d5ea815ea90850b16368c80f575b22b672103cbec1f6ac939444e3dc69c322538bad30971117b3c0ed03f7143514dfc2d898c581fcf8f565e848747730920d8341dc0c7eed629844519f133af1477a55793fadec3cb9151b7fedcc8d4d1ff569e049b9107b53ccdd8e6c2a9ade52d5454a972e54b838ecc085986e8b085a171140801a572aedf775067fb1c2b5bf7b9665375e3ed84aeaa32d3cbcc6f2d296bbc3676a743007ed74c960aeeb8741c7797ac02e51c65b36e9c3d4cd1c31c132a90c9595c797efd01dcfb508a16b224bc824438faba87df7cd2a995fad4e3f5f9c64fb4680a48baab65a14dc8936ddfbbc9901fb14ac03d0cb6555fa8e237a2ece5f86935fa617ad21e41a2b59823c38874268339be1331279994da46484f123c0cf89a0b4a74766e3629b13c2964e44ba5ec141e3559ce21fdf3bae35ad80fa204b5170259fcaa1e724f2a4eb1d11c9ab668fce0f9f55a71a7f9c7f9d5ed7baa5a051aa0210d87f042579b064f7f6d573d61eab50fc191a4dad4fcd478035c41d6c0157b101762f65c54e915c3dcf1db13605eb620abbd0b99b5b13229adb480615a39f4253ad378b4f2ac1746c62bd5bdcdf46ed01874dfc92aedc7dedf5573e099c3cf3b7aa8a18bf0fe8272627a04863b5b187cab7b268fcf76b287d6fe04dda98c8042a1d8a1122a4932a5d07b6afc31ae4099fad6cb7069280628678827c940f26d654f970330f91a550adde4da337f5c85f7bb1e6a6451d262a78de61b918afed793ee28a144a3f8150b25dca010a60599b4f5a23c4ca5a0f5533e5d3fc335395c3c0e47e9c79f911006c1b18d26ddf986b6d9874806c19422b3c332aaf95f7ee6717f0070a8337abd6e8718e3cb5dd106c08cd7c134909562a282a4a612116a5cc78bfe9f751a453f25c6ff8aca6219344b9f6ec17ae39b5c1ee3b526f8d4274c8c4a3002248be86047a0520c135b38fdbfb68c8a7691ba80e9461dc9da585ffc240ce64dc68bd39bac0c33a91d537e0e53ca47b0fa11d8ae0814d48e0c88e1cdc75b22cb8e8beca20d7f906457538d7a05f04c0a74def6b95fcf3c37a073d8f14017d223627a58e07a45df20d3cb260ed218be34417dcadd721e0874a48ddbd604f5bcfb65b4dce914cc4a685fc984b85e736afb4ada9ecdf9011ea2efc50e10e26fa008dd996e346333fa27cfe3e7831c791afe3f26487347a9ae96858f12f4e831aca589a8772c46774ca7d07c993df9a2a69a05827ac20d80c325db66691b7a36fa0eebe5cdbec687ce4a92272f9fb695acfb9330fd9f183568043fe2657331f5bde010a5324d2e3b7e6c8ef4b42042e6bbd7fcec84be4ec34bad112dfc5a0b47a6cee111970a00569d5a2ac40e6ebdb5b1c021c25f4c9e084e096a32ce8e26b6c1a304e4269b8af9efe8ee6a3e02798467bc803fbd154fc2fff1bf9147b3b4d86901fc20f53c7f8aa4f90594e1a80ab4f79b4d4f4236bfcfb9c0b9969b62897ab94a253f003d40ec228eb000a657817f1b4ccadc6663c012d02712eb4ac75936147d25940d439d746b1bd39d05a80ab93a1071069f969cec5a"}, @NFTA_DATA_VALUE={0xd7, 0x1, "b47d4bf8597c53512b83e216e2150aaf079c10f65c0a1fba2c92dd31cf532d2b2244eb3dfd9786e7e920d4cce1001e101d7347b38bda21fc24c6917fcb836baefd7f739b24400360cac38ee139691c4cb83dc4a1a4c7e51061e577cb0dda26a04256630b76a9f24667a7170be234bce7e208db5f76743a8da5fcb06b9420d6fabb5526da660285129e93196c84671a2d95773c86a041457f3f1fe8bc16b6ca4ca9868c4769a005b6a2ce134df88e07694062df92b7a1de839d547e52659006b5f002bd2721eaee43f379d61338a5ef2cd02bb4"}, @NFTA_DATA_VALUE={0x19, 0x1, "7b2e1692ce6db3a34aaad7b77e74e35076287b9f66"}]}]}}]}, {0x4}, {0x78, 0x1, 0x0, 0x1, [@quota={{0xa}, @void}, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}]}}, @dup={{0x8}, @void}, @limit={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}]}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r3) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0xbc, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xbc}}, 0x4004014) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b00), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x80, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xa0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000041}, 0x8800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 66.885502] audit: type=1400 audit(1664387006.354:6): avc: denied { execmem } for pid=282 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 68.124168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.127197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.128566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.132581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.135289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.136872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.144140] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.174661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.190039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.192863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.194433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.195269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.195985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.196680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.197473] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.199039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.200748] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.201376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.202351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.203727] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.204901] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.205651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.206598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.208610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.209324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.210292] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.215492] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.218694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.219038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.225846] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.226702] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.228334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.229420] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.231553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.236760] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.237735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.239324] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.240775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.242847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.244125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.246365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.248977] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.249957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.252262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.254920] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.256000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.256321] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.264651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.266027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.266191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.269061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.271963] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.272968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.274141] Bluetooth: hci3: HCI_REQ-0x0c1a [ 68.282739] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.284278] Bluetooth: hci4: HCI_REQ-0x0c1a [ 70.197873] Bluetooth: hci0: command 0x0409 tx timeout [ 70.261861] Bluetooth: hci1: command 0x0409 tx timeout [ 70.262617] Bluetooth: hci2: command 0x0409 tx timeout [ 70.262687] Bluetooth: hci5: command 0x0409 tx timeout [ 70.263313] Bluetooth: hci6: command 0x0409 tx timeout [ 70.325536] Bluetooth: hci7: command 0x0409 tx timeout [ 70.325783] Bluetooth: hci4: command 0x0409 tx timeout [ 70.326323] Bluetooth: hci3: command 0x0409 tx timeout [ 72.245546] Bluetooth: hci0: command 0x041b tx timeout [ 72.309514] Bluetooth: hci6: command 0x041b tx timeout [ 72.310983] Bluetooth: hci5: command 0x041b tx timeout [ 72.311016] Bluetooth: hci2: command 0x041b tx timeout [ 72.311392] Bluetooth: hci1: command 0x041b tx timeout [ 72.373488] Bluetooth: hci3: command 0x041b tx timeout [ 72.374591] Bluetooth: hci4: command 0x041b tx timeout [ 72.374610] Bluetooth: hci7: command 0x041b tx timeout [ 74.293538] Bluetooth: hci0: command 0x040f tx timeout [ 74.357498] Bluetooth: hci1: command 0x040f tx timeout [ 74.357935] Bluetooth: hci6: command 0x040f tx timeout [ 74.358548] Bluetooth: hci2: command 0x040f tx timeout [ 74.358954] Bluetooth: hci5: command 0x040f tx timeout [ 74.421499] Bluetooth: hci4: command 0x040f tx timeout [ 74.421933] Bluetooth: hci3: command 0x040f tx timeout [ 74.422589] Bluetooth: hci7: command 0x040f tx timeout [ 76.342617] Bluetooth: hci0: command 0x0419 tx timeout [ 76.405627] Bluetooth: hci5: command 0x0419 tx timeout [ 76.406392] Bluetooth: hci2: command 0x0419 tx timeout [ 76.407145] Bluetooth: hci6: command 0x0419 tx timeout [ 76.407863] Bluetooth: hci1: command 0x0419 tx timeout [ 76.470567] Bluetooth: hci7: command 0x0419 tx timeout [ 76.471303] Bluetooth: hci3: command 0x0419 tx timeout [ 76.472046] Bluetooth: hci4: command 0x0419 tx timeout 17:44:17 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:dpkg_lock_t:s0\x00', 0x21) r1 = syz_io_uring_complete(0x0) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:auth_cache_t:s0\x00', 0x22) write$selinux_attr(r0, 0x0, 0x0) 17:44:17 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x41) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) close(r1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r3}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r3, 0xffffffffffffffff, r2, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) r5 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)=ANY=[@ANYBLOB]) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x40, 0xfffffffffffffff8}) [ 118.586313] audit: type=1400 audit(1664387058.055:7): avc: denied { open } for pid=3883 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.588811] audit: type=1400 audit(1664387058.055:8): avc: denied { kernel } for pid=3883 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.608342] ------------[ cut here ]------------ [ 118.608362] [ 118.608365] ====================================================== [ 118.608369] WARNING: possible circular locking dependency detected [ 118.608374] 6.0.0-rc7-next-20220927 #1 Not tainted [ 118.608380] ------------------------------------------------------ [ 118.608384] syz-executor.1/3885 is trying to acquire lock: [ 118.608390] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 118.608434] [ 118.608434] but task is already holding lock: [ 118.608438] ffff88800d7a0020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.608471] [ 118.608471] which lock already depends on the new lock. [ 118.608471] [ 118.608474] [ 118.608474] the existing dependency chain (in reverse order) is: [ 118.608477] [ 118.608477] -> #3 (&ctx->lock){....}-{2:2}: [ 118.608491] _raw_spin_lock+0x2a/0x40 [ 118.608504] __perf_event_task_sched_out+0x53b/0x18d0 [ 118.608517] __schedule+0xedd/0x2470 [ 118.608532] schedule+0xda/0x1b0 [ 118.608548] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.608560] syscall_exit_to_user_mode+0x19/0x40 [ 118.608575] do_syscall_64+0x48/0x90 [ 118.608585] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.608600] [ 118.608600] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 118.608613] _raw_spin_lock_nested+0x30/0x40 [ 118.608625] raw_spin_rq_lock_nested+0x1e/0x30 [ 118.608639] task_fork_fair+0x63/0x4d0 [ 118.608656] sched_cgroup_fork+0x3d0/0x540 [ 118.608670] copy_process+0x4183/0x6e20 [ 118.608681] kernel_clone+0xe7/0x890 [ 118.608690] user_mode_thread+0xad/0xf0 [ 118.608700] rest_init+0x24/0x250 [ 118.608714] arch_call_rest_init+0xf/0x14 [ 118.608728] start_kernel+0x4c6/0x4eb [ 118.608740] secondary_startup_64_no_verify+0xe0/0xeb [ 118.608754] [ 118.608754] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 118.608767] _raw_spin_lock_irqsave+0x39/0x60 [ 118.608780] try_to_wake_up+0xab/0x1930 [ 118.608793] up+0x75/0xb0 [ 118.608808] __up_console_sem+0x6e/0x80 [ 118.608824] console_unlock+0x46a/0x590 [ 118.608840] vt_ioctl+0x2822/0x2ca0 [ 118.608854] tty_ioctl+0x785/0x16b0 [ 118.608867] __x64_sys_ioctl+0x19a/0x210 [ 118.608883] do_syscall_64+0x3b/0x90 [ 118.608893] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.608907] [ 118.608907] -> #0 ((console_sem).lock){....}-{2:2}: [ 118.608921] __lock_acquire+0x2a02/0x5e70 [ 118.608937] lock_acquire+0x1a2/0x530 [ 118.608953] _raw_spin_lock_irqsave+0x39/0x60 [ 118.608965] down_trylock+0xe/0x70 [ 118.608981] __down_trylock_console_sem+0x3b/0xd0 [ 118.608997] vprintk_emit+0x16b/0x560 [ 118.609014] vprintk+0x84/0xa0 [ 118.609029] _printk+0xba/0xf1 [ 118.609042] report_bug.cold+0x72/0xab [ 118.609053] handle_bug+0x3c/0x70 [ 118.609062] exc_invalid_op+0x14/0x50 [ 118.609073] asm_exc_invalid_op+0x16/0x20 [ 118.609086] group_sched_out.part.0+0x2c7/0x460 [ 118.609097] ctx_sched_out+0x8f1/0xc10 [ 118.609107] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.609120] __schedule+0xedd/0x2470 [ 118.609135] schedule+0xda/0x1b0 [ 118.609150] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.609160] syscall_exit_to_user_mode+0x19/0x40 [ 118.609174] do_syscall_64+0x48/0x90 [ 118.609184] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.609198] [ 118.609198] other info that might help us debug this: [ 118.609198] [ 118.609201] Chain exists of: [ 118.609201] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 118.609201] [ 118.609216] Possible unsafe locking scenario: [ 118.609216] [ 118.609218] CPU0 CPU1 [ 118.609221] ---- ---- [ 118.609223] lock(&ctx->lock); [ 118.609229] lock(&rq->__lock); [ 118.609236] lock(&ctx->lock); [ 118.609242] lock((console_sem).lock); [ 118.609247] [ 118.609247] *** DEADLOCK *** [ 118.609247] [ 118.609249] 2 locks held by syz-executor.1/3885: [ 118.609256] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 118.609287] #1: ffff88800d7a0020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.609315] [ 118.609315] stack backtrace: [ 118.609318] CPU: 1 PID: 3885 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220927 #1 [ 118.609331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.609339] Call Trace: [ 118.609342] [ 118.609346] dump_stack_lvl+0x8b/0xb3 [ 118.609358] check_noncircular+0x263/0x2e0 [ 118.609374] ? format_decode+0x26c/0xb50 [ 118.609393] ? print_circular_bug+0x450/0x450 [ 118.609410] ? enable_ptr_key_workfn+0x20/0x20 [ 118.609428] ? format_decode+0x26c/0xb50 [ 118.609447] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 118.609465] __lock_acquire+0x2a02/0x5e70 [ 118.609487] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 118.609509] lock_acquire+0x1a2/0x530 [ 118.609525] ? down_trylock+0xe/0x70 [ 118.609544] ? lock_release+0x750/0x750 [ 118.609565] ? vprintk+0x84/0xa0 [ 118.609582] _raw_spin_lock_irqsave+0x39/0x60 [ 118.609595] ? down_trylock+0xe/0x70 [ 118.609613] down_trylock+0xe/0x70 [ 118.609630] ? vprintk+0x84/0xa0 [ 118.609646] __down_trylock_console_sem+0x3b/0xd0 [ 118.609664] vprintk_emit+0x16b/0x560 [ 118.609683] vprintk+0x84/0xa0 [ 118.609700] _printk+0xba/0xf1 [ 118.609713] ? record_print_text.cold+0x16/0x16 [ 118.609730] ? report_bug.cold+0x66/0xab [ 118.609742] ? group_sched_out.part.0+0x2c7/0x460 [ 118.609754] report_bug.cold+0x72/0xab [ 118.609766] handle_bug+0x3c/0x70 [ 118.609777] exc_invalid_op+0x14/0x50 [ 118.609788] asm_exc_invalid_op+0x16/0x20 [ 118.609803] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.609817] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.609828] RSP: 0018:ffff8880410d7c48 EFLAGS: 00010006 [ 118.609838] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.609845] RDX: ffff88801d869ac0 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 118.609853] RBP: ffff8880410d8000 R08: 0000000000000005 R09: 0000000000000001 [ 118.609860] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d7a0000 [ 118.609868] R13: ffff88806cf3d140 R14: ffffffff8547d0e0 R15: 0000000000000002 [ 118.609880] ? group_sched_out.part.0+0x2c7/0x460 [ 118.609893] ? group_sched_out.part.0+0x2c7/0x460 [ 118.609907] ctx_sched_out+0x8f1/0xc10 [ 118.609920] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.609936] ? lock_is_held_type+0xd7/0x130 [ 118.609951] ? __perf_cgroup_move+0x160/0x160 [ 118.609963] ? set_next_entity+0x304/0x550 [ 118.609981] ? update_curr+0x267/0x740 [ 118.609999] ? lock_is_held_type+0xd7/0x130 [ 118.610014] __schedule+0xedd/0x2470 [ 118.610033] ? io_schedule_timeout+0x150/0x150 [ 118.610051] ? __x64_sys_futex_time32+0x480/0x480 [ 118.610067] schedule+0xda/0x1b0 [ 118.610083] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.610095] syscall_exit_to_user_mode+0x19/0x40 [ 118.610110] do_syscall_64+0x48/0x90 [ 118.610122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.610136] RIP: 0033:0x7f7d6ae72b19 [ 118.610145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.610156] RSP: 002b:00007f7d683e8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.610166] RAX: 0000000000000001 RBX: 00007f7d6af85f68 RCX: 00007f7d6ae72b19 [ 118.610174] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d6af85f6c [ 118.610181] RBP: 00007f7d6af85f60 R08: 000000000000000e R09: 0000000000000000 [ 118.610188] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7d6af85f6c [ 118.610196] R13: 00007ffc4620ea3f R14: 00007f7d683e8300 R15: 0000000000022000 [ 118.610209] [ 118.662199] WARNING: CPU: 1 PID: 3885 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 118.662884] Modules linked in: [ 118.663124] CPU: 1 PID: 3885 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220927 #1 [ 118.663705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.664512] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.664906] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.666214] RSP: 0018:ffff8880410d7c48 EFLAGS: 00010006 [ 118.666605] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.667128] RDX: ffff88801d869ac0 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 118.667656] RBP: ffff8880410d8000 R08: 0000000000000005 R09: 0000000000000001 [ 118.668168] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800d7a0000 [ 118.668685] R13: ffff88806cf3d140 R14: ffffffff8547d0e0 R15: 0000000000000002 [ 118.669206] FS: 00007f7d683e8700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 118.669788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.670211] CR2: 00007f1ed81918e0 CR3: 0000000040df8000 CR4: 0000000000350ee0 [ 118.670737] Call Trace: [ 118.670933] [ 118.671105] ctx_sched_out+0x8f1/0xc10 [ 118.671396] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.671776] ? lock_is_held_type+0xd7/0x130 [ 118.672096] ? __perf_cgroup_move+0x160/0x160 [ 118.672436] ? set_next_entity+0x304/0x550 [ 118.672750] ? update_curr+0x267/0x740 [ 118.673043] ? lock_is_held_type+0xd7/0x130 [ 118.673368] __schedule+0xedd/0x2470 [ 118.673648] ? io_schedule_timeout+0x150/0x150 [ 118.673993] ? __x64_sys_futex_time32+0x480/0x480 [ 118.674347] schedule+0xda/0x1b0 [ 118.674612] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.674989] syscall_exit_to_user_mode+0x19/0x40 [ 118.675345] do_syscall_64+0x48/0x90 [ 118.675625] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.676001] RIP: 0033:0x7f7d6ae72b19 [ 118.676278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.677587] RSP: 002b:00007f7d683e8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.678135] RAX: 0000000000000001 RBX: 00007f7d6af85f68 RCX: 00007f7d6ae72b19 [ 118.678656] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d6af85f6c [ 118.679174] RBP: 00007f7d6af85f60 R08: 000000000000000e R09: 0000000000000000 [ 118.679684] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7d6af85f6c [ 118.680203] R13: 00007ffc4620ea3f R14: 00007f7d683e8300 R15: 0000000000022000 [ 118.680728] [ 118.680908] irq event stamp: 650 [ 118.681154] hardirqs last enabled at (649): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 118.681825] hardirqs last disabled at (650): [] __schedule+0x1225/0x2470 [ 118.682434] softirqs last enabled at (398): [] __irq_exit_rcu+0x11b/0x180 [ 118.683054] softirqs last disabled at (319): [] __irq_exit_rcu+0x11b/0x180 [ 118.683670] ---[ end trace 0000000000000000 ]--- 17:44:18 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000200000, 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), 0xffffffffffffffff) syz_io_uring_setup(0x2cbf, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x2, 0x2c3, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000001dc0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syncfs(r1) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000140)) syncfs(r2) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) read(r2, &(0x7f00000001c0)=""/229, 0xe5) 17:44:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000980)={0x0, 'ipvlan1\x00', {0x1}, 0x3}) r1 = perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x9c, 0x0, 0x6, 0x0, 0x1, 0x16400, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000340)}, 0x50, 0x1e1, 0x7, 0x1, 0x1fb9b0b1, 0x768, 0xff, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/116, 0x74}, {&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f00000006c0)=""/163, 0xa3}], 0x4, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x40002040) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000940)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000080)={0xc8, 0x2d, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic="39dd1294df000c94dad141af6b6388ee293fc224b4f6d03d04f8bb288563a8e998a258c35113aab50c821cf74f36a9823d763071dc5dff23700237a099e4b9c7fce1762c5c108598836c82c463b5dcd3d2efc7cbcbf85c51f7f1273287544e7b689255037c99a2fbb2d0f6ac9a8601609fe67d0a550172249cefb2b48d0211a1b4facc6571e42a972ad5b35a106d0b0d72890125915b8662815041d6cce1a3d5e55ce5a718d474c7d8044bccd986107ee2933fc32385"]}, 0xc8}, {&(0x7f00000009c0)={0x1cc, 0x24, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x4, 0x53}, @generic="ca6cd732198c6ace1a91acaeaf648426bbd57daaf1c972fd1094637d380d26e249870c09eb03e42ba6ca9c1b6b4bdbe7af163a9ddd3d41eae47c6ca39e68e05bf4061ae079cef47fa6ef5973bd5426572ddd70a4d3919e880cb7abcb5f55947176731735b6879283ddcf6e71b0f5f2a3323fcb59", @nested={0x37, 0x1d, 0x0, 0x1, [@generic="403769cc2c28e9d5c052d08e0c88b48f6923345b4fbb285e9df20c8eccc401fa27a9c0a420b96ec77e40e2", @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@empty}]}, @generic="ee466f7927adce67b758a7f450bfad8e29b198d32fdbbbae06ec3948c0040c047dee78f3bc1c4fe996", @generic="74364d701f436ab6f909dc8628c8200b2f19389ec46caed8da30940b2cc9443c109e65b501000000000000d366f5a2ea1f99db154dff70da1e2167fc92f04e91e8776613bd2c88f2dccd569b010f766098e47c916485db6d330f4d0899f3270160a40db36a20f5a9e00f1e63e795adb76aea1fd29d1109686d95dd7fc326ce57f39fb5237879dd967be5aef4e63de9f90fd4b8dcb663178e53d11a1acdb10cdea20dce38650cc5ed59481191b86f40709d05d7ae0a25f573913dcc60f0634e72bd89cc7573ef37bcacd9fb18513becc1534f981e3d41d278b71f36a54b58c05998fc"]}, 0x1cc}, {&(0x7f0000000480)={0xa8, 0x11, 0x300, 0x70bd29, 0x25dfdbff, "", [@generic="16aa7a116acb52292af85e0dd84822ef3916507f0a3c260e462a60318b5d3ab31e6265dd4236c02695aaadf4c9fcadfb8e705d6d7be791aa6921234cd5f469c8a8e98a0e2cc8c12a3b4319e4ea2870e9c75e3d0bebeb16a38dcbbc78f03f329dc974cf600cf8dc2dc2ad3fa2448b1d", @typed={0x8, 0x2f, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x4d, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0x30, 0x0, 0x0, @u32=0xfffefffe}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x6}]}, 0xa8}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r3, r2}}}], 0x20, 0x4004480}, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c0000ee01000000000000fb030000000c0004"], 0x2c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) [ 119.074826] blktrace: Concurrent blktraces are not allowed on sg0 [ 119.148513] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:18 executing program 3: fchown(0xffffffffffffffff, 0xee00, 0xee00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x40, 0x1}, 0x8001}}, 0x18) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0xc008800) write$P9_RSETATTR(r0, &(0x7f0000000180)={0x7, 0x1b, 0x1}, 0x7) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x2}, 0x7) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x8, 0x2) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = getpgrp(0xffffffffffffffff) r5 = memfd_secret(0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x1, 0xde, 0x6, 0x0, 0x1ff, 0x200, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0xb06034a28da2700, @perf_config_ext={0xda000000000, 0x2}, 0x4010, 0xb78, 0x5, 0x5, 0x1, 0x4, 0x8, 0x0, 0x1f, 0x0, 0x7}, r4, 0x3, r5, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000300)={0x7ff, 0x0, 'client1\x00', 0x6, "1a1607350a94f4e0", "41a3e0da4f42b729dc7d266c90feaf601b7576ddbfdf14a1e425eeea3f751825", 0x1, 0x9}) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e8, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x81, @local, 0xee32}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1a8b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x132}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa5}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb321}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4c005}, 0x8d5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r7, {0xfffffffffffff001}}, './file0\x00'}) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x40, 0x77, 0x6, 0x4, 0x0, 0x3ff, 0x22021, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x85, 0x5}, 0x12410, 0x100000001, 0x2, 0x4, 0x24, 0xfffffff7, 0x5, 0x0, 0x7b, 0x0, 0x8}, 0xffffffffffffffff, 0xc, r8, 0x4) [ 119.213772] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 17:44:18 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x41) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) close(r1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r3}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r3, 0xffffffffffffffff, r2, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) r5 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)=ANY=[@ANYBLOB]) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x40, 0xfffffffffffffff8}) 17:44:18 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000200000, 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), 0xffffffffffffffff) syz_io_uring_setup(0x2cbf, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x2, 0x2c3, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000001dc0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syncfs(r1) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000140)) syncfs(r2) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) read(r2, &(0x7f00000001c0)=""/229, 0xe5) 17:44:18 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x41) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0)="25f603b7fa9fa3548414f40992c1cf45f19705c7eee437fda4265b7eb2e7bb1ca4ec9b16e7d8334d052aeb04b0d5037a01019288274bf0cb88e4b0d450527f3e3100845f824bd7c768b941db8d3d5f400ea29894fe6bc6553b229e9e616dbeb1b077c3ff25d19fa7ce2453d6417761", 0x6f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) close(r1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0xff, 0x0, r3}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x180, 0x7, 0x0, 0x0, 0x8001}, r3, 0xffffffffffffffff, r2, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) r5 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)=ANY=[@ANYBLOB]) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x40, 0xfffffffffffffff8}) [ 119.384901] blktrace: Concurrent blktraces are not allowed on sg0 [ 119.482692] blktrace: Concurrent blktraces are not allowed on sg0 [ 122.500428] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.501928] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.505422] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.508077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.509330] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.511612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.515580] Bluetooth: hci7: HCI_REQ-0x0c1a [ 124.533483] Bluetooth: hci7: command 0x0409 tx timeout [ 126.581533] Bluetooth: hci7: command 0x041b tx timeout VM DIAGNOSIS: 17:44:18 Registers: info registers vcpu 0 RAX=1ffff11008204484 RBX=0000000000000018 RCX=dffffc0000000000 RDX=ffff88801b9d8000 RSI=ffffffff840e0dce RDI=ffff888041022420 RBP=ffff888041022408 RSP=ffff8880189279b0 R8 =0000000000000000 R9 =0000000000000003 R10=000000000000000f R11=0000000000000001 R12=00007ff9fb60dfff R13=000000000000000f R14=00007ff9fb63b000 R15=0000000000000003 RIP=ffffffff840e0de8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff9fb102540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff9fb2ed620 CR3=0000000008bee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ff00ffffffffffff 0000000000000000 YMM01=0000000000000000 0000000000000000 0100010001000000 ffffffffffffffff YMM02=0000000000000000 0000000000000000 0500050005000000 455441564952505f YMM03=0000000000000000 0000000000000000 0000000000000000 000000564952505f YMM04=0000000000000000 0000000000000000 0003000500050005 0005000000455441 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff8880410d7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7d683e8700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1ed81918e0 CR3=0000000040df8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f7d6af597c0 00007f7d6af597c8 YMM02=0000000000000000 0000000000000000 00007f7d6af597e0 00007f7d6af597c0 YMM03=0000000000000000 0000000000000000 00007f7d6af597c8 00007f7d6af597c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000