Warning: Permanently added '[localhost]:8158' (ECDSA) to the list of known hosts. 2022/09/29 13:50:07 fuzzer started 2022/09/29 13:50:08 dialing manager at localhost:45751 syzkaller login: [ 35.451700] cgroup: Unknown subsys name 'net' [ 35.545264] cgroup: Unknown subsys name 'rlimit' 2022/09/29 13:50:21 syscalls: 2215 2022/09/29 13:50:21 code coverage: enabled 2022/09/29 13:50:21 comparison tracing: enabled 2022/09/29 13:50:21 extra coverage: enabled 2022/09/29 13:50:21 setuid sandbox: enabled 2022/09/29 13:50:21 namespace sandbox: enabled 2022/09/29 13:50:21 Android sandbox: enabled 2022/09/29 13:50:21 fault injection: enabled 2022/09/29 13:50:21 leak checking: enabled 2022/09/29 13:50:21 net packet injection: enabled 2022/09/29 13:50:21 net device setup: enabled 2022/09/29 13:50:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/29 13:50:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/29 13:50:21 USB emulation: enabled 2022/09/29 13:50:21 hci packet injection: enabled 2022/09/29 13:50:21 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220928) 2022/09/29 13:50:21 802.15.4 emulation: enabled 2022/09/29 13:50:21 fetching corpus: 50, signal 32091/33796 (executing program) 2022/09/29 13:50:21 fetching corpus: 100, signal 37309/40615 (executing program) 2022/09/29 13:50:22 fetching corpus: 150, signal 48353/53010 (executing program) 2022/09/29 13:50:22 fetching corpus: 200, signal 54148/60130 (executing program) 2022/09/29 13:50:22 fetching corpus: 250, signal 58144/65403 (executing program) 2022/09/29 13:50:22 fetching corpus: 300, signal 63412/71839 (executing program) 2022/09/29 13:50:22 fetching corpus: 350, signal 68081/77633 (executing program) 2022/09/29 13:50:22 fetching corpus: 400, signal 73557/84047 (executing program) 2022/09/29 13:50:22 fetching corpus: 450, signal 77976/89458 (executing program) 2022/09/29 13:50:22 fetching corpus: 500, signal 82720/95004 (executing program) 2022/09/29 13:50:23 fetching corpus: 550, signal 86446/99599 (executing program) 2022/09/29 13:50:23 fetching corpus: 600, signal 88304/102477 (executing program) 2022/09/29 13:50:23 fetching corpus: 650, signal 90659/105725 (executing program) 2022/09/29 13:50:23 fetching corpus: 700, signal 93405/109256 (executing program) 2022/09/29 13:50:23 fetching corpus: 750, signal 95178/111892 (executing program) 2022/09/29 13:50:23 fetching corpus: 800, signal 97452/114991 (executing program) 2022/09/29 13:50:23 fetching corpus: 850, signal 99145/117544 (executing program) 2022/09/29 13:50:23 fetching corpus: 900, signal 101442/120533 (executing program) 2022/09/29 13:50:23 fetching corpus: 950, signal 103399/123154 (executing program) 2022/09/29 13:50:24 fetching corpus: 1000, signal 104653/125208 (executing program) 2022/09/29 13:50:24 fetching corpus: 1050, signal 105843/127199 (executing program) 2022/09/29 13:50:24 fetching corpus: 1100, signal 107242/129300 (executing program) 2022/09/29 13:50:24 fetching corpus: 1150, signal 109481/132059 (executing program) 2022/09/29 13:50:24 fetching corpus: 1200, signal 111646/134812 (executing program) 2022/09/29 13:50:24 fetching corpus: 1250, signal 112736/136597 (executing program) 2022/09/29 13:50:24 fetching corpus: 1300, signal 114293/138718 (executing program) 2022/09/29 13:50:24 fetching corpus: 1350, signal 115915/140915 (executing program) 2022/09/29 13:50:24 fetching corpus: 1400, signal 117259/142821 (executing program) 2022/09/29 13:50:25 fetching corpus: 1450, signal 118263/144488 (executing program) 2022/09/29 13:50:25 fetching corpus: 1500, signal 120317/146866 (executing program) 2022/09/29 13:50:25 fetching corpus: 1550, signal 122617/149361 (executing program) 2022/09/29 13:50:25 fetching corpus: 1600, signal 123477/150823 (executing program) 2022/09/29 13:50:25 fetching corpus: 1650, signal 125240/152909 (executing program) 2022/09/29 13:50:25 fetching corpus: 1700, signal 126519/154606 (executing program) 2022/09/29 13:50:25 fetching corpus: 1750, signal 128090/156483 (executing program) 2022/09/29 13:50:25 fetching corpus: 1800, signal 129565/158290 (executing program) 2022/09/29 13:50:25 fetching corpus: 1850, signal 130297/159538 (executing program) 2022/09/29 13:50:26 fetching corpus: 1900, signal 131695/161211 (executing program) 2022/09/29 13:50:26 fetching corpus: 1950, signal 133008/162824 (executing program) 2022/09/29 13:50:26 fetching corpus: 2000, signal 134326/164416 (executing program) 2022/09/29 13:50:26 fetching corpus: 2050, signal 135951/166167 (executing program) 2022/09/29 13:50:26 fetching corpus: 2100, signal 136723/167360 (executing program) 2022/09/29 13:50:26 fetching corpus: 2150, signal 137592/168627 (executing program) 2022/09/29 13:50:26 fetching corpus: 2200, signal 138611/169970 (executing program) 2022/09/29 13:50:26 fetching corpus: 2250, signal 139889/171446 (executing program) 2022/09/29 13:50:26 fetching corpus: 2300, signal 141020/172828 (executing program) 2022/09/29 13:50:27 fetching corpus: 2350, signal 142046/174107 (executing program) 2022/09/29 13:50:27 fetching corpus: 2400, signal 142685/175137 (executing program) 2022/09/29 13:50:27 fetching corpus: 2450, signal 144234/176616 (executing program) 2022/09/29 13:50:27 fetching corpus: 2500, signal 146242/178433 (executing program) 2022/09/29 13:50:27 fetching corpus: 2550, signal 146989/179459 (executing program) 2022/09/29 13:50:27 fetching corpus: 2600, signal 147777/180491 (executing program) 2022/09/29 13:50:27 fetching corpus: 2650, signal 148218/181370 (executing program) 2022/09/29 13:50:27 fetching corpus: 2700, signal 148906/182344 (executing program) 2022/09/29 13:50:27 fetching corpus: 2750, signal 150180/183588 (executing program) 2022/09/29 13:50:28 fetching corpus: 2800, signal 150885/184488 (executing program) 2022/09/29 13:50:28 fetching corpus: 2850, signal 151878/185576 (executing program) 2022/09/29 13:50:28 fetching corpus: 2900, signal 152365/186348 (executing program) 2022/09/29 13:50:28 fetching corpus: 2950, signal 153465/187460 (executing program) 2022/09/29 13:50:28 fetching corpus: 3000, signal 154083/188312 (executing program) 2022/09/29 13:50:28 fetching corpus: 3050, signal 154898/189275 (executing program) 2022/09/29 13:50:28 fetching corpus: 3100, signal 155712/190170 (executing program) 2022/09/29 13:50:28 fetching corpus: 3150, signal 156356/191003 (executing program) 2022/09/29 13:50:28 fetching corpus: 3200, signal 157750/192091 (executing program) 2022/09/29 13:50:28 fetching corpus: 3250, signal 158988/193127 (executing program) 2022/09/29 13:50:29 fetching corpus: 3300, signal 160229/194135 (executing program) 2022/09/29 13:50:29 fetching corpus: 3350, signal 160548/194765 (executing program) 2022/09/29 13:50:29 fetching corpus: 3400, signal 161199/195543 (executing program) 2022/09/29 13:50:29 fetching corpus: 3450, signal 162282/196444 (executing program) 2022/09/29 13:50:29 fetching corpus: 3500, signal 163093/197216 (executing program) 2022/09/29 13:50:29 fetching corpus: 3550, signal 163785/197961 (executing program) 2022/09/29 13:50:29 fetching corpus: 3600, signal 165090/198848 (executing program) 2022/09/29 13:50:29 fetching corpus: 3650, signal 165653/199535 (executing program) 2022/09/29 13:50:30 fetching corpus: 3700, signal 166071/200101 (executing program) 2022/09/29 13:50:30 fetching corpus: 3750, signal 166852/200820 (executing program) 2022/09/29 13:50:30 fetching corpus: 3800, signal 167350/201405 (executing program) 2022/09/29 13:50:30 fetching corpus: 3850, signal 168601/202161 (executing program) 2022/09/29 13:50:30 fetching corpus: 3900, signal 169150/202737 (executing program) 2022/09/29 13:50:30 fetching corpus: 3950, signal 169834/203335 (executing program) 2022/09/29 13:50:30 fetching corpus: 4000, signal 171034/204068 (executing program) 2022/09/29 13:50:30 fetching corpus: 4050, signal 171901/204672 (executing program) 2022/09/29 13:50:30 fetching corpus: 4100, signal 172910/205317 (executing program) 2022/09/29 13:50:30 fetching corpus: 4150, signal 173787/205941 (executing program) 2022/09/29 13:50:31 fetching corpus: 4200, signal 174210/206433 (executing program) 2022/09/29 13:50:31 fetching corpus: 4250, signal 175413/207080 (executing program) 2022/09/29 13:50:31 fetching corpus: 4300, signal 176479/207667 (executing program) 2022/09/29 13:50:31 fetching corpus: 4350, signal 176993/208187 (executing program) 2022/09/29 13:50:31 fetching corpus: 4400, signal 177873/208732 (executing program) 2022/09/29 13:50:31 fetching corpus: 4450, signal 178558/209192 (executing program) 2022/09/29 13:50:31 fetching corpus: 4500, signal 179685/209715 (executing program) 2022/09/29 13:50:31 fetching corpus: 4550, signal 180639/210171 (executing program) 2022/09/29 13:50:32 fetching corpus: 4600, signal 181550/210617 (executing program) 2022/09/29 13:50:32 fetching corpus: 4650, signal 183200/211125 (executing program) 2022/09/29 13:50:32 fetching corpus: 4700, signal 183572/211468 (executing program) 2022/09/29 13:50:32 fetching corpus: 4750, signal 185124/211937 (executing program) 2022/09/29 13:50:32 fetching corpus: 4800, signal 186538/212375 (executing program) 2022/09/29 13:50:32 fetching corpus: 4850, signal 187115/212706 (executing program) 2022/09/29 13:50:32 fetching corpus: 4900, signal 187573/213012 (executing program) 2022/09/29 13:50:33 fetching corpus: 4950, signal 189954/213437 (executing program) 2022/09/29 13:50:33 fetching corpus: 5000, signal 190380/213730 (executing program) 2022/09/29 13:50:33 fetching corpus: 5050, signal 190748/213994 (executing program) 2022/09/29 13:50:33 fetching corpus: 5100, signal 191359/214258 (executing program) 2022/09/29 13:50:33 fetching corpus: 5150, signal 192113/214505 (executing program) 2022/09/29 13:50:33 fetching corpus: 5200, signal 192771/214724 (executing program) 2022/09/29 13:50:33 fetching corpus: 5250, signal 193320/214954 (executing program) 2022/09/29 13:50:33 fetching corpus: 5300, signal 194155/215164 (executing program) 2022/09/29 13:50:33 fetching corpus: 5350, signal 194637/215289 (executing program) 2022/09/29 13:50:34 fetching corpus: 5400, signal 195707/215301 (executing program) 2022/09/29 13:50:34 fetching corpus: 5450, signal 196677/215308 (executing program) 2022/09/29 13:50:34 fetching corpus: 5500, signal 197198/215312 (executing program) 2022/09/29 13:50:34 fetching corpus: 5550, signal 197724/215312 (executing program) 2022/09/29 13:50:34 fetching corpus: 5600, signal 198273/215312 (executing program) 2022/09/29 13:50:34 fetching corpus: 5650, signal 198724/215363 (executing program) 2022/09/29 13:50:34 fetching corpus: 5700, signal 199279/215363 (executing program) 2022/09/29 13:50:34 fetching corpus: 5740, signal 199572/215363 (executing program) 2022/09/29 13:50:34 fetching corpus: 5741, signal 199574/215363 (executing program) 2022/09/29 13:50:34 fetching corpus: 5741, signal 199574/215363 (executing program) 2022/09/29 13:50:37 starting 8 fuzzer processes 13:50:37 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80800) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}, {0x2, 0x6, r2}], {}, [{0x8, 0x3}, {0x8, 0x2, r4}, {0x8, 0x6, 0xee01}], {0x10, 0x6}, {0x20, 0x3}}, 0x4c, 0x2) r5 = accept$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) r6 = dup3(r0, r0, 0x80000) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000900), 0x9, 0x101100) r9 = socket$nl_route(0x10, 0x3, 0x0) clone3(&(0x7f0000000ac0)={0x20219000, &(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0), {0x1e}, &(0x7f0000000a00)=""/23, 0x17, &(0x7f0000000a40)=""/58, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) sendmmsg$unix(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000005c0)="34bfa03539a5698a5ec577f59a769118e4712d218fc8edfb81be6a170908b9323876760dae27f25446a8dcb6064760fe6dc27bdaf5d6434595d94f8b887626b3043e50f12be6d8360bf8a2c59897a6788d19b5f948be10df0aad5eca1bceddf6b6deb76c12d2c79c6ff2448357d9e2a00f200473aec1cb7fcd3e2ae709d2ebb27f2129553a9afa31506e6ee81ee227e8228482e603ff4e5331d2cab05966673f824fe6583502644b20fd5240cea697426c24e4d4410a2f432e5ee6dd792dd9185d0c4502df58db09509ee34737ee6d1a9cddcad6e042d46409dc782a4815e249f5cf42d66d7ab3ad41bf45d37d55d1c9dc0c7a45705df8d6", 0xf8}, {&(0x7f00000006c0)="466fb1303514cbd49dd7aa4a62f9d84603d27a1e9c88b7aa73", 0x19}, {&(0x7f0000000700)="6e6bd5230a98398c34acae8f6460aacffb87a2a81b97649043c643457fb34162b14f806b84d6d2da6df31a9d83b4b7f87ef9e830e42cd31dda66bafd3ae47799", 0x40}, {&(0x7f0000000740)="c672e5640f505bfcc07d47ea75caad2c5b93ecad5996792e5dfdd2f357f9319625e7043c3e1291d6fa1503638a9adb384c607b6dfd72943e9d9d0069228423c7ddd1e2f1d8c4277de8474efda50885e2ec46fee7f6253def95ac2fac8fe0b682951c0fa36dd3ee5459df98d851bb82e65c2d48d6e14f2d", 0x77}, {&(0x7f00000007c0)="7e611360c9636e490237afb2d361ed6f086fd537985f9f4bafbef9eb8795b5b9bd9fafb04252dc640b51609c5f2b62d14b45d87f1b904149a507cf5f556e5dd348cfeda181cb37cb4929284aeae2d163b2ef104c22191ae5e877a969f4afa426315dd203f99f2aad4da1e80bfb8bdb82e3a8c938dda7f87f6020aa885182b7f5c2e5c034f85d8e60df68cc529a07ef37df4e02f847416c61e9767df3c1891d4f4635e5f688", 0xa5}], 0x5, &(0x7f0000000b40)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r6, r7, r0]}}, @rights={{0x20, 0x1, 0x1, [r8, r0, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r2, r3}}}], 0x70, 0x44000}}], 0x1, 0x20000000) mkdirat(r6, &(0x7f0000000c00)='./file0\x00', 0x80) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r8, 0x80047210, &(0x7f0000000c40)) r11 = socket$unix(0x1, 0x5, 0x0) sendmsg$sock(r11, &(0x7f0000001280)={&(0x7f0000000c80)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x6, 0x7, "a5d6536fef4c8876971f0d9223fe08d22ec6728f65a7e5c5a207a40ff0a9f47c87bbaf1e15401d5969a5433872da78d9c5629e5abe1b7b288bdc117799b56d", 0x10}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000d00)="0a2a3404d552ed07ca6b2bfe3257460c49d3fda61c9f0df53fe563fdb62bac092e7e04ee464f1e9e96ef146048e9f6a90edfa83c3c6bd0191e974b02a25144b0a14e787681201a23987c2d360aed3a2fb59158cd4d15af41ef9e3f84a1a2aeaf15a6696917251524c1227bbeed79c7e6f322f4b64734eef044b150964c669fa47ff963bbcaef7a471c91b75b9ad9b640926f00f0ab2db2f9685e8daeca85440aab8a0249ef37dba82c154e6cdf87e84f347c44dea0d846771fdbcc182a0cc3dd817db137e431b1d5529716c0543e178cf343a99124b17d67524b6819bd009605ef5976", 0xe3}, {&(0x7f0000000e00)="abe6fe634215a0aa12a522e9576b9b4e80eea1f30072b0a32176133f94008047186b18f3e3759289e225117065e0d8e203ddf412144a735e1c1ce4ebf4ff5701d0d679178591797cb82172b7e86bcc23c64fa3f4ccc4162c96febdeabd554031c7789915e04ad69d5731a69392f46973e823c4fcd34b30b7bba030e91ab93da5542c816831a353d9ee3cdb3ec53b", 0x8e}, {&(0x7f0000000ec0)="079319e582c85089bf980a2170f1b522d8ac669c2044e1f849af228c307c0eef1e23971abe3a9c4671b8108f2d5d479ff0258c36ccee2f98b3c462cfc771a4f08d4eb36968947aca4c4a003ce317d75f581804e6e0db6a806be0a1e9754f5b02fdb42e175f344b2c7fbd849968", 0x6d}, {&(0x7f0000000f40)="0c085f932226fc61f8e0ee5fcb515c08d1241e20b0e20af617409794810eec3cfde8b6246e0ce1d7fd3f40293ad6d3b607b8a06a7b949f1c06241a4294a74a716984d9d7b652176e0dc6d9687bba061fe5169671ee37bdb52afcea91adcd6a7e846a1f1d57a027a330b32b5d1531a124f51470055bdfcf80615bda976847577bb38eeffb06a376c404742d9037594b9a9312e565e8ceffe21cbbe02c0c8abd0b03f7a7792e6cbef9989f40465ddcc1cf4070f8693e7288919a9727990e519732889b50ce25ac74cbfc0310dddd420d888e", 0xd1}, {&(0x7f0000001040)="d86e9ddead592ecbe6ec87c9b1afc971", 0x10}, {&(0x7f0000001080)="61be6e3eb6841805c8a30a699a33467b0eff64445cb465caa31f8e6c89b138eb8cbeefbe74459698433a6b950d5ea76b060d83e3374f022c0435e6728b0037cb5a2b938576345a54645bd9b4cf4f7bd0bf587bf1770e6b87a9099f", 0x5b}, {&(0x7f0000001100)="b9ac2c0f49cdac674524b2c3b4ecf295b6e91d5d673c20800a65ed1d4958ab12994962d71353562cfc4e591f786b91cefbc29eb770482bde5c490c3de9f7e697e5c2f592d1c0bb704a4b3470c5a33a6e64c093a8f0682de738292213ab9776df64862154d4a34bf930510daff7c36b905a02bdb7835c96878fa33a685650423fdcc9b9382e2a1c038239baf6846e9cfedc6815fce51dc91b82973909f7c00863b25cd9baeb1f6a6a545a8f5ccb954b39a76c1bf9c890afa83a3ade7409a6", 0xbe}], 0x7, &(0x7f0000001240)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}], 0x30}, 0x0) r12 = signalfd(r6, &(0x7f00000012c0)={[0x80]}, 0x8) fsconfig$FSCONFIG_SET_FLAG(r12, 0x0, &(0x7f0000001300)='rw\x00', 0x0, 0x0) 13:50:37 executing program 1: keyctl$link(0x8, 0x0, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="033f5c4adfdb0bebf882fc45fa989fc42c6f1011211d2c72502a400273510960dbb1f5626634bed739cd52cffa744bc5e1108627ae7cb7657097b3a53b319d445adf0f776d72cacdb91b843fce78e82628298463845eae5b20fb03808cca16aa464db3c73fc23d8cc526d198ae5fd7324d322987d8bc4db3319c8f722c7fe7a5", 0x80, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x0}, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x0}, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="6b03846b03d74807ae4bcde9ea95326b5f15d4e865667940d56333f70675e225b07750dc4e57459bfe61bc455e95299f274bd7ae386993e91a7b8684f7c406d514120e51f344631b1618266e3830947d01af210f720c652d30978a0aaa148c945ca80ab50ce93160a4f6636a6050b118fb826535c8ff374874a5c185f44db49ca68bc7edbb2c26118e785cb6683516b3fc866211fa0b9d0c16cd4c13c8ea04eddb472a261f4c2c1e550da16508a254b00dfb4639a6", 0xb5, r0) keyctl$search(0xa, r1, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, r2) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r1, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$unlink(0x9, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000005c0)='id_resolver\x00', &(0x7f0000000680)=@keyring={'key_or_keyring:', r5}) add_key(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)="c8543a36ae770e0cabd18c9b2b8e5cb6f4e60ca3241d67d38e8e3b62956886bff5c05b28cefba192b6cb545989195f76ed50f606eb657868f7d8435db7c7bd886125c3f3eb6b5a646ad9a4e33735f7e259b72d77177a394c6eb9f340cbc9cbee18ba", 0x62, r2) add_key$fscrypt_provisioning(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)={0x2, 0x0, @c}, 0x29, r3) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0xfbe46211b4061214, 0x32, 0x52, 0x38, 0x32, 0x37, 0x30, 0x37, 0x31, 0x62, 0x36, 0x33, 0x66, 0x4, 0x38, 0x32]}, &(0x7f0000000900)={0x0, "db57fabccab32f24c956827f14903fbb1cc1d03c6e16eaa5cee274dfbf52143403da8efefc5644cb74ccdaf115382ab4c6f66bcad319f813496e724649e41ba6", 0x27}, 0x48, r5) request_key(&(0x7f0000000980)='ceph\x00', &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='syz', r5) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000ac0)='id_legacy\x00', &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, 0x0) 13:50:37 executing program 2: r0 = fork() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x81, 0x5, 0x8, 0x52, 0x0, 0x6, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x12, 0x4, @perf_config_ext={0x1, 0x63}, 0x809, 0x3, 0x69a, 0x4, 0x800, 0x81, 0x7fff, 0x0, 0x3ff, 0x0, 0x5}, r0, 0x10, r1, 0x3) ptrace$setopts(0x4206, r0, 0x7, 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) r3 = mq_open(&(0x7f0000000100)='\x00', 0x2, 0x111, &(0x7f0000000140)={0x14000000000000, 0x3, 0xed7c}) kcmp$KCMP_EPOLL_TFD(r2, r0, 0x7, r1, &(0x7f0000000180)={r1, r3, 0x71}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000200)={0x7fffffff, 0x2df5}) r5 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) sync_file_range(r5, 0x5, 0x8001, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x48800, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x33]}}, {@huge_never}, {@size={'size', 0x3d, [0x36]}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x32, 0x25, 0x74, 0x2d, 0x6d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x70]}}, {@mode={'mode', 0x3d, 0x3}}], [{@audit}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@dont_hash}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_gt={'uid>', r7}}, {@dont_hash}]}) fsetxattr$security_capability(r5, &(0x7f0000000440), &(0x7f0000000480)=@v1={0x1000000, [{0x1ff, 0x2000}]}, 0xc, 0x1) mq_timedsend(r3, &(0x7f00000004c0)="858504183197d3827c91b8df3436a4e82ff26449eccb86dbd90355ce8837a76bb77cc0b652947d3d58ce8320466f869fbc953a535a73d137635cd969f5e04e0c279e430447e0950d96a8362072ddef88923d3dad5610e5f8a3f0340be3bd52326b965e109dc8cc1533e7c12d72207cb30a4b6c3fbec5a93fd9bb45137f4d4c020933e9d23670213591fba69d063d578c", 0x90, 0x1, &(0x7f0000000580)={0x77359400}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) clone3(&(0x7f0000000800)={0x20000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x1f}, &(0x7f0000000680)=""/57, 0x39, &(0x7f00000006c0)=""/218, &(0x7f00000007c0)=[r2, r2, r2, 0x0, r0, r2, r0, r0, r0], 0x9, {r4}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) prlimit64(r8, 0xd, &(0x7f0000000900)={0x81, 0x3f}, 0x0) pselect6(0x40, &(0x7f0000000940)={0x7f, 0x1ff, 0x1020000000, 0xffffffffffffffcb, 0x8, 0x7fff}, &(0x7f0000000980)={0x7, 0x0, 0x2020000000000000, 0x7e, 0x80, 0x0, 0x8d67, 0x400}, &(0x7f00000009c0)={0xffffffffffffffff, 0x8, 0x3c0a, 0x100, 0x400, 0x7f, 0x7fffffff, 0x80}, &(0x7f0000000a00)={0x77359400}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x20]}, 0x8}) 13:50:37 executing program 3: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/247, 0xf7}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/155, 0x9b}, {&(0x7f0000001200)=""/142, 0x8e}], 0x5, 0x5, 0x6) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x178, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x71}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x134}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x538}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x9, 0x21, 0x1000, 0x4]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4da1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe51d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2000, 0x9, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x959c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfe3e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffc00}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x850) r1 = creat(&(0x7f0000001580)='./file0\x00', 0x196) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000015c0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x54b0dd0fa2cce78, r0, 0x830c9000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x2901, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x74, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20080010}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, 0x0, 0x219, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x4044000) r7 = socket$unix(0x1, 0x2, 0x0) fcntl$addseals(r7, 0x409, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x5c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040012}, 0x889) 13:50:37 executing program 4: io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="cc5429b5", 0x4, 0x7, 0x0, 0x2}, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x422000, 0x0) r2 = signalfd4(r1, &(0x7f0000000140)={[0x9]}, 0x8, 0x400) r3 = syz_open_dev$hidraw(&(0x7f0000000180), 0x4, 0xba379e1724dd7f8c) open_by_handle_at(r3, &(0x7f00000001c0)=@ceph_nfs_confh={0x10, 0x2, {0x3f, 0x3}}, 0x20001) r4 = signalfd4(r2, &(0x7f0000000200)={[0x80000001]}, 0x8, 0x80000) io_setup(0x9696, &(0x7f0000000240)) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c) fcntl$setstatus(r5, 0x4, 0x4400) r6 = fsmount(r2, 0x1, 0xc) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000300)) r7 = open_tree(r6, &(0x7f0000000340)='./file0\x00', 0x101) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x170, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_NAT={0x15c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8815}, 0x4040000) syz_open_dev$vcsa(&(0x7f00000005c0), 0xffffffffffff2f49, 0x260100) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0xa0000, 0x0) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000640)=""/237) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000780)='net/snmp\x00') 13:50:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/235, 0xeb}, {&(0x7f0000001280)=""/117, 0x75}, {&(0x7f0000001300)}, {&(0x7f0000001340)=""/110, 0x6e}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/254, 0xfe}], 0xa) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000015c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001600)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000001680)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r4, {0x20, 0x5}}, './file1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001800)={'gretap0\x00', &(0x7f0000001700)={'gre0\x00', 0x0, 0x1, 0x10, 0x6, 0x8, {{0x36, 0x4, 0x3, 0x7, 0xd8, 0x65, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0x20, 0x1, 0x8, [{@loopback, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xffff}, {@broadcast, 0x6}]}, @cipso={0x86, 0x6c, 0x3, [{0x2, 0x2}, {0x5, 0xd, "9290416d209731784d24b9"}, {0x5, 0x10, "5b30d3875576ea1e8ddadc0db371"}, {0x0, 0x7, "b47c5ddbea"}, {0x6, 0x6, "d3c151a7"}, {0x0, 0x11, "d49ca7c12aff7b30bc09948fb831b6"}, {0x0, 0x2}, {0x5, 0xf, "04cc30447e71dda2ef8d46bebe"}, {0x0, 0x7, "8d4e0d657a"}, {0x5, 0x11, "6e7b6eb517283e309c63788b36f77e"}]}, @end, @lsrr={0x83, 0x1b, 0x3a, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010100]}, @generic={0x44, 0x4, "fc52"}, @timestamp_addr={0x44, 0x1c, 0x40, 0x1, 0x8, [{@remote, 0x2}, {@rand_addr=0x64010101}, {@private=0xa010102, 0xc4c}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001940)={'syztnl1\x00', &(0x7f0000001840)={'syztnl0\x00', 0x0, 0x27, 0x40, 0x2, 0x4, {{0x2f, 0x4, 0x0, 0x8, 0xbc, 0x68, 0x0, 0x20, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xb8, [@dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101, @private=0xa010100]}, @timestamp_prespec={0x44, 0x24, 0xd4, 0x3, 0x2, [{@multicast1}, {@private=0xa010101, 0x1}, {@remote, 0x9c1a}, {@private=0xa010101, 0xffffffce}]}, @noop, @timestamp={0x44, 0x10, 0x23, 0x0, 0x4, [0x4, 0x2, 0x2]}, @end, @ssrr={0x89, 0x13, 0x42, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x44, 0x2, 0x3, 0x8, [{@empty, 0xffffffff}, {@remote, 0x4}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x4}, {@rand_addr=0x64010100, 0xf042}, {@local, 0x5}]}, @generic={0x94, 0x5, "c027b6"}]}}}}}) r6 = accept$inet6(r2, &(0x7f0000001980)={0xa, 0x0, 0x0, @private2}, &(0x7f00000019c0)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001a00)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001ac0)={'syztnl1\x00', &(0x7f0000001a40)={'ip6gre0\x00', r7, 0x29, 0x7e, 0x3f, 0xfffff8d9, 0x24, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8000, 0x80, 0x3, 0x7}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$lock(r8, 0x24, &(0x7f0000001b00)={0x2, 0x0, 0x3, 0x5, r1}) io_setup(0x1, &(0x7f0000001b40)=0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) r11 = socket(0x2d25ed8d2e824acc, 0x4, 0x58) r12 = syz_open_pts(r3, 0xc00) io_submit(r9, 0x6, &(0x7f0000002640)=[&(0x7f0000001cc0)={0x0, 0x0, 0x0, 0xb, 0x7f, r10, &(0x7f0000001bc0)="ef8c5e73f0698d498021736de309419633a1a3d5dd665602f66bbce422d41d9a954b7b01d2a959544d2b0e0020fe772e8c0720adade5adf45a3d7485859cc6dce098bcfb78bb4bfc37144f533fea5431dbb395f4486e6b4f84b5ca74bcd587a8b78a91c1a046bd79c09b1666b4959b4938a316503da6cb02c45fd9c3c8ba390f49e26e269de15b0dfb1ead363b04ba9c3782ae8f3a92ddccf3f3b2e6fb6801ec49de86d6034a2a15701e6486d1d4900171d5d78e200a64312c3002beca9eaa5db2431f46b4eab9ba0cb4d157c534f5bb26935a3d19355cfd820cd5ca4c395c3ab1c7dc50812e1cb19028cae6d9a36b01d7d590", 0xf3, 0x0, 0x0, 0x1, r3}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x7, 0x7f, r11, &(0x7f0000001d00)="e3f83dfc903dd925f237e5369eb74aa2f0641d6652fbbfc0881cf01758a7296f42", 0x21, 0x0, 0x0, 0x1, r2}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x5, r12, &(0x7f0000001d80)="acc443f891e8e2ab57c60351de668204d00c0509ffb0758fb4702fa3d18666ba869771ba9becb3d99d4ee07b70572abdeb3facd6ea88562d6d8cd0523c968024ab9b9d82818e673e13ed37bfafa5938d5f706510dd9617527205476dcd46bd87d586135d3a48f2dabaca492c00e1098a677ed695f748b9399010e65ef13eb0aa53c9f6d36a537fca2af4bebf2cf585b64ea09d426f28fc85e4c2cb4e170ab39f425580c04e21be4dfa2bc3c89c030c1f7ab1bcedb5ea939fe8d8beefc0db4de0c0b88c3426301781b7e123434ed4106d74618673c8dcb0433df3362fdc04e349047f7a2e8eef3aead3dfb3b1c17b6b48", 0xf0, 0x5, 0x0, 0x2, r5}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x8, 0x7ff, r8, &(0x7f0000001ec0), 0x0, 0x5, 0x0, 0x1, r2}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x8, 0xffff, r4, &(0x7f0000001f40)="c208d608f653e6becb77", 0xa, 0xd2e0}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x8, 0xd7c0, r8, &(0x7f0000001fc0)="b80cd4929446b45bce8b0d20125833c8ccd0b4b8fa22046c124a69d55270034b3b39a0075baaf6407fc1b9d97ef2e17148cdd59f5303cc23ec0b875666759078548d4d97624d167fd06d4253d996c451a654de09cc359ecc2cce073538332af956269aff0b17bb59bc739138c00d5d47dec59c80cb7094d7550f7798efa14e5594fe6e91173b", 0x86, 0x2}]) [ 64.917846] audit: type=1400 audit(1664459437.805:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:50:37 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x84801, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/102, 0x66}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/49, 0x31}], 0x7, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40002000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001d00)=0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r7 = epoll_create(0xffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005080)=[{{&(0x7f0000001e40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001ec0)=""/209, 0xd1}, {&(0x7f0000001fc0)=""/98, 0x62}], 0x2, &(0x7f0000002080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002100), 0x6e, &(0x7f0000003500)=[{&(0x7f0000002180)=""/170, 0xaa}, {&(0x7f0000002240)=""/39, 0x27}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/142, 0x8e}, {&(0x7f0000002400)=""/237, 0xed}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003600), 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000003680)=""/230, 0xe6}, {&(0x7f0000003780)=""/144, 0x90}, {&(0x7f0000003840)=""/242, 0xf2}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/233, 0xe9}, {&(0x7f0000004a40)=""/77, 0x4d}, {&(0x7f0000004ac0)=""/245, 0xf5}], 0x7, &(0x7f0000004c40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000004c80)=""/26, 0x1a}, {&(0x7f0000004cc0)=""/13, 0xd}, {&(0x7f0000004d00)=""/219, 0xdb}, {&(0x7f0000004e00)=""/46, 0x2e}, {&(0x7f0000004e40)=""/231, 0xe7}, {&(0x7f0000004f40)=""/56, 0x38}], 0x6, &(0x7f0000005000)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}}], 0x4, 0x0, &(0x7f0000005180)={0x77359400}) pipe(&(0x7f00000051c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000005300)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc, &(0x7f0000001cc0)=[{&(0x7f0000000080)={0x298, 0x23, 0x1, 0x70bd27, 0x25dfdbfd, "", [@generic="10db", @nested={0x270, 0x87, 0x0, 0x1, [@typed={0xce, 0x46, 0x0, 0x0, @binary="83872673e973816e8cdba34daec3a6ef042f1899fcb9a426e08737e26ed2bffd033804d883a7b1e218ddc353afd1c1c28e8867e8ba82e8bab57e57d6f59006c8637a941a85c73a6018ee37a9b4ad3b68a828754cd51b2fe4b70383f27b7dcf4f84dc23621888a57d0552e52a153a6bb3003159bd71814eea5a4ec380656933aa3a561afb37a6f4faed3f1d9be10ced83faedb5746640668e89cfa55feddf79232be8fb11cf738438eedcb4c834c9d2d0d0cf2446284085d2005003085d36e9f9d348b41df55129c031f5"}, @generic="a0a8ba6ade2236a0e9f6e2e9039000a5b69ee2c65e2d7fad36d1fe8c2bbe3069fc1b190f56f4caf0fa07d6f451838437291b655dac5b20e6e66be7caf0986c20bd0ef6795e56de2d5896adeb8356dcb620eaf82097fd013b1aa9c39f", @generic="da0a835899671df6782d45f9cd965e26035425f0abf183a46ec444590b3369a3e9e8f3327b2e81945c", @typed={0x8, 0x57, 0x0, 0x0, @pid}, @generic="b7e11b72990dc81616a4cc621b1e7578c423b2a63fb81c9d29d1ae545356aa1514b8c6e2935431bf4a31fe31b61be086b0c3d392628951402d7ce45da320", @generic="f7ab6ff50784fc8cfdb2f71f9d2c5eadeed24f915e4e4be91903b56d4bf2b7bee941e99832163085b155d2a76ca4437bb38ca87a517d2fa274d924e9d584916a779f5b63d6428e2341c22e7fe1334fa642673a637761b34b0b524a476f23e979eb9f37472a01383745702591f9c729d89e28937a87a199e6e1e23f6985b24d5b51cb47acec47e3fdec042737b9fa713f7c9e294601c746aefb0560506a7b3d201ae22ec2940ed07422508197d5340be6820c1f342771", @generic="efb0ef2038ed53d4f370ba66a53dc934ba310a5e71eb2126b4da6f"]}, @typed={0x11, 0x5b, 0x0, 0x0, @str=':*--!+---^@{\x00'}]}, 0x298}, {&(0x7f0000000800)={0x1454, 0x2c, 0x800, 0x70bd2c, 0x25dfdbff, "", [@generic="529fc89ab63723537493d388302cbd5849cc94abc2de5cbf7a2c743f33a409b43fb373a529f05756197f8ebf3e9ff2b546666ebde817db0c3a0b334685fa734bd81d48bf26f1d72289311a72b5552d979ae6c3ef3ecea4e7a2ef1b2f5c03c40318e0537c94365fe2cbed638a2aaa5b1a83d56e8bf8fd6b3bce92431de15505efd0504b725131719d6766ebaf732e207d71677e401bd6d61b793f", @nested={0x1361, 0x56, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r1}, @generic="1ae616fef699db005aa40e898790fa4c2c07a275ea9db4353b6968f61f2fb97ab7afeda84adeae6ffe06e6c9c592d3622aee0e64ac1b5c86b2ef21037eb56cb08866575f4fbf5b219cc64b20048b4c3c51ead5e392cc6ad6e92a9d98597f309efd28b8240fff7e1032c0bbbb474af867abff3e068b066bf25b4d61f36d4bd2d0dce9ecee65e4e70bd6bb45a22ff2ae6b6c8a996408bd323b65a69e45f4f668eca84f373f7334ec3cd1a9e4926723e6b99f460f6a2fa718bafe699601e08a1c486a06db5490941337", @generic="bc6ebe4e8a61896975689647b1290cd0de7cc1ce9a6cb707ac72af9a0fe89094af858e67537ff8ffce39df33b01a3fa81327a2511d31b941adcdc827043b6beb392b5e041d824cf1756fe2ba01b43414abcf55809397ab4bd671236a282ab0d23636a3b49dce4dbef67d4dcab8b8ccb1dd998b6ca45b637fdd6ec44bc2f7c1ea2cb445416f499ca8b3826ffe8d971885c504acebf0c2a960f9d3a4552dff272e2e2802888a3950c881bec637a164a7538e447877b5bff4cbd3b24de5c7b1d67ad633a1efdb841b9c5f938fd53f62ef3bd4616e92a020b2f0", @generic="d40d479fb1d28c79f0dc37816d7fff9a25c35e5adbfe041d791450392cd25a6d76bda2a059b2303c8ee04c82e62ed025cb7219700c3c479968aaa4e55ed7006194b2ecf89f13fc5d16d38a3d07521ec3e00cac50f77f5ff9bd88d1f1607e0f55b509cc947e9a498f291790ff968864b3a1fe300b92c68ac9bc654f3dba167ca56d9e8b92e98ecc6dbcd64ad9a2bd4f6629ccfa4628902968d32c05c8529243aa5bea2da58344c79bcc75f5e8f85ab29d0b46f3ca460b679e0d5c56609a9e4c5d6f5832a5a10d56fef818f7641f4b9788d99196681e4e5ee17c3f3a27f9125f6d3536a84b71192118dba1a3ce5978ee0fd3", @typed={0x46, 0x17, 0x0, 0x0, @binary="dc7bec1fefb17206ae0f3f5fadaae38bf59683d48bc8be38e5370b51bc18ee05f0a67c7e7eab588419162349fd8424138e40b8d8c560d20b0394c6fd030d6aca3970"}, @typed={0x1004, 0x61, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x88, 0x0, 0x0, @u32=0x7fff}, @generic="468d36f0db4d7044e81dc625746bd5b1659d1333e296182d36313e5bf85cc56bda7535c29f6760c75d51090b0e41e23db06fabd7098304e8d91a1d884bf2cd31d4d811d8893cd943045ff003ec4e0966772103ea41c38d42e848c524794980c097882a7cc58c79bacb684447de0cce9a"]}, @generic="98b7d38938ad745f96629815e8a6", @nested={0x20, 0x49, 0x0, 0x1, [@typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@local}]}, @nested={0x18, 0x40, 0x0, 0x1, [@typed={0x14, 0x43, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x1454}, {&(0x7f0000001c80)={0x1c, 0x3f, 0x800, 0x70bd25, 0x25dfdbff, "", [@typed={0xa, 0x87, 0x0, 0x0, @str='&A[,(\x00'}]}, 0x1c}], 0x3, &(0x7f0000005200)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r6}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r13, r14]}}], 0xc8, 0x4000000}, 0x4044014) r15 = syz_open_procfs(r4, &(0x7f0000005340)='net/ip6_tables_targets\x00') execveat(r15, &(0x7f0000005380)='./file0\x00', &(0x7f0000005500)=[&(0x7f00000053c0)='*{\x00', &(0x7f0000005400)='$[%#\x00', &(0x7f0000005440)='&A[,(\x00', &(0x7f0000005480)='\x00', &(0x7f00000054c0)='/dev/bsg\x00'], &(0x7f0000005740)=[&(0x7f0000005540)=',@--\\($\'$.$&^\x00', &(0x7f0000005580)=':*--!+---^@{\x00', &(0x7f00000055c0)='/dev/bsg\x00', &(0x7f0000005600)='&A[,(\x00', &(0x7f0000005640)=',-\x00', &(0x7f0000005680)='\x00', &(0x7f00000056c0)='/dev/bsg\x00', &(0x7f0000005700)='}%:+\x00'], 0x400) getsockname(r11, &(0x7f0000005780)=@alg, &(0x7f0000005800)=0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000005840)={{{@in=@multicast2, @in6=@private2, 0x4e24, 0x7ff, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b, 0x0, r1}, {0x4, 0x1ff, 0x4, 0x5, 0x100000001, 0xfffffffffffffffe, 0x5, 0x3}, {0x274, 0xfffffffffffffffa, 0x81, 0xffffffff}, 0xffffff01, 0x6e6bc0, 0x0, 0x1, 0x3, 0x2}, {{@in6=@empty, 0x4d5, 0x32}, 0x2, @in=@private=0xa010101, 0x3501, 0x4, 0x0, 0x7f, 0x3ff, 0x5, 0x1}}, 0xe8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000005940)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) pread64(r3, &(0x7f0000005a80)=""/53, 0x35, 0x3f0d) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000005ac0)={0x40000011}) fchdir(r8) pipe(&(0x7f0000005b00)) 13:50:37 executing program 6: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xab4f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x4004010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f5b7da337b86"}, @NL80211_ATTR_IE={0x11, 0x2a, [@ibss={0x6, 0x2, 0x400}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_SSID={0xe, 0x34, @random="7cf266488e98b2dbb8fc"}, @NL80211_ATTR_IE={0x7d, 0x2a, [@tim={0x5, 0x58, {0x1, 0x58, 0x1f, "85e870952761bd913925feeac6fded70af4484d012f8dcb96b755b4d131b7991966aec6002c54614a7a6f0bebf996885fb8ab24e0ee08536667ae824bd93d34232ab12683bfa15a0bb570ebec509c771321aa2663e"}}, @cf={0x4, 0x6, {0x4, 0x6, 0x8, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x7f}, 0x80, 0x20, @device_a, 0x6, 0x3ff, 0xf5}}]}, @NL80211_ATTR_MAC={0xa}]}, 0xe4}}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r3 = dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x10c, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x9}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9ea2}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="2d4b0060670f41f8e49c45877b66d7df6707d4a7dd4a0d"}, @NL80211_ATTR_IE={0xbf, 0x2a, [@preq={0x82, 0x41, @ext={{0x1, 0x1, 0x1}, 0x2, 0x57, 0x3655722, @device_a, 0x4a8, @device_b, 0x3, 0xfffffe00, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x7f}, {{0x1, 0x0, 0x1}, @device_a, 0x3ff}, {{0x1, 0x0, 0x1}, @device_b, 0x7992ddba}]}}, @peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x9, @val=0x2c, @val="e3e8e6f567374e132c9b6ecbf144514f"}}, @cf={0x4, 0x6, {0x3, 0x1, 0x9b3, 0x7}}, @challenge={0x10, 0x1, 0x34}, @preq={0x82, 0x51, @not_ext={{0x0, 0x0, 0x1}, 0x81, 0x5, 0x7, @broadcast, 0xfffeffff, "", 0x77f, 0x0, 0x5, [{{0x1}, @device_b, 0x26e}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{}, @broadcast, 0x1}, {{0x1}, @broadcast, 0xffff}, {{0x1, 0x0, 0x1}, @broadcast, 0xffffffff}]}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x81}, 0x20048000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000b80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000640)={0x4c4, 0x40, 0x8, 0x70bd28, 0x25dfdbfb, {0x1f}, [@nested={0x2e4, 0x7, 0x0, 0x1, [@generic="cbe8605abbd2266b96ac493e22a0a08933d09b45207d3f5db80d75b6abe9e211f51c61629fc7319387a7c2e091a57687012857868529a9150b21628c9c0c5eaeaf7e3cf4218518240cbba4e2d47165be7ff2cd6cf90676c4e10280c031ea138c3da7", @generic="1293104dc3ab50c81b5a02960a4c455eaa174800f11963387077acc88211b2394364960d9255dcf41b15d47f633802e90d5bc03f8366b7a3e8c2acd0f4353599740e396373de78c042b0f732514aa10cc42ca48850c7a932afdc01ce7c605931ae28a2f8acc5a50f8cf6ee84291dfa51226c094a1db32dbf3b0b31d74771d7b43a3986d4bceab1a0cdab6aa9828e", @generic="697637ca15d37dbf4ce517ced7cb510b0e920686ad5fa9240d0fcd073f594252a9f3354b1989fe53a9523091ce95abc35ded691ba58a21de23077c04b8888c2bd9208e730cb242ffae86ed7e143f9808303af8f40757f3d35b72da4aec08e665d767041788cc1e06b205012d6b173ea81542996ee1dfc237dca5a7a8cd2fcd4939dc141b7daa713b63f063c37bae65f4059510194c7a04e8df4448a5a4197c0ad1ae00f62223f6052aa6b0e9666ae934052995a7aa278655aa", @typed={0x8, 0x36, 0x0, 0x0, @fd=r3}, @generic="a6bb4378cde40f592c359e45a60d6acf636d6b24ab4c0fc7b72595990e53c129023c42b5c03a895bca0781719b5e6a87c6cdfd45a885854df27114c6460a29d32d213df7c7ae9f70af5175185fac1813ec62ad65ce2b35dd02cd1334cc49a138c904f8667b6fef7c178547099bdef84b60523b31d64c5d501b269d192ef716f50e1bf7e210f7722aac5775cb110540255514594129e70e8436265a3ba5a8db0cd06e144d55aa6dbf90e6d69c728c947d05cd500f248cc8a549d1c2080a6cf7", @typed={0x1c, 0x7d, 0x0, 0x0, @binary="bb4901d80f0910b772a6e98662968fc2849ac59e942fdd69"}, @typed={0x8, 0xb, 0x0, 0x0, @uid}, @generic="bb64ed0a6e1b110c69e0a5bf151b17bfc80a29f907a7ad5ddc05548706f4b8b0f8e050ce6570ffc0019f68259b3789cd9bf7611ce942c0a86d64224b089afbb7a635d279c02a41dcbd68c835"]}, @generic="cf5577b57204a1f95e7c727dced572905a41b5e50f720adeb72ccc86f7302e1e6b0e421322ab943aabfaadefcdb8e0501831d2350e26e2771a08bac4a82b93a3b17f6b46e50cb58eb6bf10c4264d9662104eb8", @typed={0x4, 0x4}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x101}, @typed={0x23, 0x3f, 0x0, 0x0, @binary="6b3491883e0dfe6eb1e32dfae209084a0204bfca9abde1d471daaf8d802a76"}, @typed={0xa, 0x71, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @nested={0x139, 0x15, 0x0, 0x1, [@generic="89ad27e682378eb7da1c09af79de936e2dff2e8f17c1fad7e0ee34cb4e9a5cc975eb227c666722e4f7a592cb4b21f037842c66457ee96bd0f3b9cdfded10d1921c93a0c622435966227b4c42b8a76edd4a127611ba2e3fe8b1538ab211c375e3dc5fbeaf2109babe1aa66f52611f0584f0486e4a84c9e2e61d967601", @typed={0x8, 0x77, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @generic="e8a638fae33621c489f86c359dc6", @generic="59cb13822a69b044a7a1c043f696861249de0573a78ca6eb164d4588fb68ba56e47cf4323a075f1ca3442ea7d81ef3082fad7f57688cfbe410814b9ddfb68f2d3662499029120d54f3a27a9abdcf5ec002919b9473888ae86a58339c07c2df6ec8342794463c093f478a67e35d4385c38ed33421680a1b00e60c40197952693c64c9774fa8e5264e71945048e38d9bb55739cb367f2702bbd72eac"]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x20000005}, 0x1) r6 = openat$cgroup_ro(r3, &(0x7f0000000bc0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r5) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r7, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xea}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4881}, 0x8c00) r8 = open(&(0x7f0000000d80)='./file0\x00', 0x20000, 0x18) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r4, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffffc0, 0x6}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000081) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f00), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r9, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xffff, 0x0, 0x537c, 0x200, 0xd53]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000002}, 0x40800) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x5c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="6f97e3c0cc98"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="73d53a424e2e"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9b15d8d49487"}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004090) [ 66.125873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.127813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.129349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.132096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.133793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.135400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.140485] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.176523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.179025] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.180318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.183706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.185917] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.193213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.197980] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.255420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.257646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.259056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.261922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.263615] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.265286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.270904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.272577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.274420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.277374] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.278022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.280354] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.282101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.291960] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.335645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.341801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.343378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.346605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.347295] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.348299] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.348648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.355005] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.421166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.432684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.441634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.448672] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.450727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.457069] Bluetooth: hci7: HCI_REQ-0x0c1a [ 66.459805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.467463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.468744] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.472282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.476889] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.478740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.483954] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.151453] Bluetooth: hci0: command 0x0409 tx timeout [ 68.214982] Bluetooth: hci1: command 0x0409 tx timeout [ 68.342900] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 68.342991] Bluetooth: hci3: command 0x0409 tx timeout [ 68.344017] Bluetooth: hci2: command 0x0409 tx timeout [ 68.406945] Bluetooth: hci4: command 0x0409 tx timeout [ 68.471142] Bluetooth: hci7: command 0x0409 tx timeout [ 68.535112] Bluetooth: hci5: command 0x0409 tx timeout [ 70.199563] Bluetooth: hci0: command 0x041b tx timeout [ 70.262951] Bluetooth: hci1: command 0x041b tx timeout [ 70.391176] Bluetooth: hci2: command 0x041b tx timeout [ 70.391235] Bluetooth: hci3: command 0x041b tx timeout [ 70.455061] Bluetooth: hci4: command 0x041b tx timeout [ 70.518978] Bluetooth: hci7: command 0x041b tx timeout [ 70.582989] Bluetooth: hci5: command 0x041b tx timeout [ 72.246938] Bluetooth: hci0: command 0x040f tx timeout [ 72.311029] Bluetooth: hci1: command 0x040f tx timeout [ 72.439007] Bluetooth: hci3: command 0x040f tx timeout [ 72.439044] Bluetooth: hci2: command 0x040f tx timeout [ 72.502921] Bluetooth: hci4: command 0x040f tx timeout [ 72.566923] Bluetooth: hci7: command 0x040f tx timeout [ 72.630931] Bluetooth: hci5: command 0x040f tx timeout [ 73.591951] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 74.295995] Bluetooth: hci0: command 0x0419 tx timeout [ 74.360026] Bluetooth: hci1: command 0x0419 tx timeout [ 74.486960] Bluetooth: hci2: command 0x0419 tx timeout [ 74.487937] Bluetooth: hci3: command 0x0419 tx timeout [ 74.551006] Bluetooth: hci4: command 0x0419 tx timeout [ 74.614950] Bluetooth: hci7: command 0x0419 tx timeout [ 74.679090] Bluetooth: hci5: command 0x0419 tx timeout [ 76.180158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.182297] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.183257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.190022] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.191449] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.193165] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.197078] Bluetooth: hci6: HCI_REQ-0x0c1a [ 78.198950] Bluetooth: hci6: command 0x0409 tx timeout [ 80.246939] Bluetooth: hci6: command 0x041b tx timeout [ 82.295971] Bluetooth: hci6: command 0x040f tx timeout [ 84.342961] Bluetooth: hci6: command 0x0419 tx timeout 13:51:32 executing program 4: io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="cc5429b5", 0x4, 0x7, 0x0, 0x2}, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x422000, 0x0) r2 = signalfd4(r1, &(0x7f0000000140)={[0x9]}, 0x8, 0x400) r3 = syz_open_dev$hidraw(&(0x7f0000000180), 0x4, 0xba379e1724dd7f8c) open_by_handle_at(r3, &(0x7f00000001c0)=@ceph_nfs_confh={0x10, 0x2, {0x3f, 0x3}}, 0x20001) r4 = signalfd4(r2, &(0x7f0000000200)={[0x80000001]}, 0x8, 0x80000) io_setup(0x9696, &(0x7f0000000240)) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c) fcntl$setstatus(r5, 0x4, 0x4400) r6 = fsmount(r2, 0x1, 0xc) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000300)) r7 = open_tree(r6, &(0x7f0000000340)='./file0\x00', 0x101) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x170, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_NAT={0x15c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8815}, 0x4040000) syz_open_dev$vcsa(&(0x7f00000005c0), 0xffffffffffff2f49, 0x260100) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0xa0000, 0x0) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000640)=""/237) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000780)='net/snmp\x00') 13:51:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x3f, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="f4ed7efa4f5d1dbf13871d905fbbd6e0759a31107dad1332f0cdbf269bf113ed3d06d6", 0x23, 0x7}, {&(0x7f0000000340)="71b945737c159b720c7729a2c23adef6c897404ffaee5b26bea234a42f51f573d1ff8507e2b8e0db893c8057c047dafaa1385c52f5a806dcf5ea0ab8e8afafd3ab0fb53fe5f43c5b0f75034e91256cbc7d34ffd25b5f62a4f25b9611ad649a3e912ffa32e63aab2b1ca57e8bd412eb929a92df35222751affdcdabfb8a13ad590f8ceb653a627a54b56cec51bcb3e2464f6d4bf142e5f59a8bac035af8f71422", 0xa0, 0x3}, {&(0x7f0000000400)="bf01f5da2731c824195749e81d849a718ee6c678e94889d331a51f011b5a9713308e508aa8432f22078bb56941c49c246e267919ee34f7176779edfd23ff535421aa14d11674a8a2164a6bbca8", 0x4d, 0x57c}], 0x808c0, &(0x7f0000000500)={[{@nodots}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_type}, {@obj_role={'obj_role', 0x3d, '\'\xcb.['}}, {@context={'context', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '*+)@'}}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x0, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000009, 0x4, @perf_config_ext={0x3, 0xfc0000000}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r2, 0x2, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x4b, 0x1, 0xf1, 0xa3, 0x0, 0x9, 0x100, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x357, 0x40}, 0x100, 0x100, 0x6, 0x1, 0xffffffffbb03a46c, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1}, r2, 0xa, r0, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x22c600, 0x2) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) renameat2(0xffffffffffffffff, &(0x7f0000000740)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000780)='./file1\x00', 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net\x00') perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x80, 0x7, 0x7f, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xfff, 0xe6d}, 0x40e01, 0x4, 0x1, 0x6, 0x4, 0x4, 0xff, 0x0, 0x1ff, 0x0, 0x5}, 0xffffffffffffffff, 0x3, r4, 0x2) fspick(r3, &(0x7f0000000040)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0xff, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x4410, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffff80, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1200, 0x81, 0x20, 0x1, 0x9, 0xf5, 0x7, 0x0, 0x8}, 0x0, 0x6, r3, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 120.130791] loop4: detected capacity change from 0 to 5 [ 120.137369] ======================================================= [ 120.137369] WARNING: The mand mount option has been deprecated and [ 120.137369] and is ignored by this kernel. Remove the mand [ 120.137369] option from the mount to silence this warning. [ 120.137369] ======================================================= [ 120.154427] audit: type=1400 audit(1664459493.042:7): avc: denied { open } for pid=3781 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.155946] audit: type=1400 audit(1664459493.042:8): avc: denied { kernel } for pid=3781 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.174589] ------------[ cut here ]------------ [ 120.174609] [ 120.174612] ====================================================== [ 120.174615] WARNING: possible circular locking dependency detected [ 120.174620] 6.0.0-rc7-next-20220928 #1 Not tainted [ 120.174626] ------------------------------------------------------ [ 120.174630] syz-executor.4/3782 is trying to acquire lock: [ 120.174636] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 120.174681] [ 120.174681] but task is already holding lock: [ 120.174684] ffff88800faa4820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.174714] [ 120.174714] which lock already depends on the new lock. [ 120.174714] [ 120.174717] [ 120.174717] the existing dependency chain (in reverse order) is: [ 120.174721] [ 120.174721] -> #3 (&ctx->lock){....}-{2:2}: [ 120.174736] _raw_spin_lock+0x2a/0x40 [ 120.174749] __perf_event_task_sched_out+0x53b/0x18d0 [ 120.174763] __schedule+0xedd/0x2470 [ 120.174781] schedule+0xda/0x1b0 [ 120.174797] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.174811] syscall_exit_to_user_mode+0x19/0x40 [ 120.174826] do_syscall_64+0x48/0x90 [ 120.174837] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.174856] [ 120.174856] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 120.174873] _raw_spin_lock_nested+0x30/0x40 [ 120.174886] raw_spin_rq_lock_nested+0x1e/0x30 [ 120.174901] task_fork_fair+0x63/0x4d0 [ 120.174919] sched_cgroup_fork+0x3d0/0x540 [ 120.174935] copy_process+0x4183/0x6e20 [ 120.174946] kernel_clone+0xe7/0x890 [ 120.174956] user_mode_thread+0xad/0xf0 [ 120.174967] rest_init+0x24/0x250 [ 120.174982] arch_call_rest_init+0xf/0x14 [ 120.175003] start_kernel+0x4c6/0x4eb [ 120.175021] secondary_startup_64_no_verify+0xe0/0xeb [ 120.175036] [ 120.175036] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 120.175051] _raw_spin_lock_irqsave+0x39/0x60 [ 120.175064] try_to_wake_up+0xab/0x1930 [ 120.175078] up+0x75/0xb0 [ 120.175096] __up_console_sem+0x6e/0x80 [ 120.175114] console_unlock+0x46a/0x590 [ 120.175131] vprintk_emit+0x1bd/0x560 [ 120.175150] vprintk+0x84/0xa0 [ 120.175168] _printk+0xba/0xf1 [ 120.175182] regdb_fw_cb.cold+0x6c/0xa7 [ 120.175203] request_firmware_work_func+0x12e/0x240 [ 120.175217] process_one_work+0xa17/0x16a0 [ 120.175237] worker_thread+0x637/0x1260 [ 120.175255] kthread+0x2ed/0x3a0 [ 120.175271] ret_from_fork+0x22/0x30 [ 120.175284] [ 120.175284] -> #0 ((console_sem).lock){....}-{2:2}: [ 120.175299] __lock_acquire+0x2a02/0x5e70 [ 120.175318] lock_acquire+0x1a2/0x530 [ 120.175335] _raw_spin_lock_irqsave+0x39/0x60 [ 120.175348] down_trylock+0xe/0x70 [ 120.175367] __down_trylock_console_sem+0x3b/0xd0 [ 120.175385] vprintk_emit+0x16b/0x560 [ 120.175403] vprintk+0x84/0xa0 [ 120.175421] _printk+0xba/0xf1 [ 120.175433] report_bug.cold+0x72/0xab [ 120.175443] handle_bug+0x3c/0x70 [ 120.175454] exc_invalid_op+0x14/0x50 [ 120.175465] asm_exc_invalid_op+0x16/0x20 [ 120.175479] group_sched_out.part.0+0x2c7/0x460 [ 120.175491] ctx_sched_out+0x8f1/0xc10 [ 120.175502] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.175515] __schedule+0xedd/0x2470 [ 120.175532] schedule+0xda/0x1b0 [ 120.175549] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.175560] syscall_exit_to_user_mode+0x19/0x40 [ 120.175575] do_syscall_64+0x48/0x90 [ 120.175586] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.175601] [ 120.175601] other info that might help us debug this: [ 120.175601] [ 120.175604] Chain exists of: [ 120.175604] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 120.175604] [ 120.175620] Possible unsafe locking scenario: [ 120.175620] [ 120.175622] CPU0 CPU1 [ 120.175625] ---- ---- [ 120.175627] lock(&ctx->lock); [ 120.175633] lock(&rq->__lock); [ 120.175640] lock(&ctx->lock); [ 120.175647] lock((console_sem).lock); [ 120.175653] [ 120.175653] *** DEADLOCK *** [ 120.175653] [ 120.175655] 2 locks held by syz-executor.4/3782: [ 120.175662] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 120.175695] #1: ffff88800faa4820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 120.175725] [ 120.175725] stack backtrace: [ 120.175728] CPU: 1 PID: 3782 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220928 #1 [ 120.175741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.175749] Call Trace: [ 120.175753] [ 120.175757] dump_stack_lvl+0x8b/0xb3 [ 120.175769] check_noncircular+0x263/0x2e0 [ 120.175788] ? format_decode+0x26c/0xb50 [ 120.175808] ? print_circular_bug+0x450/0x450 [ 120.175827] ? enable_ptr_key_workfn+0x20/0x20 [ 120.175847] ? format_decode+0x26c/0xb50 [ 120.175868] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 120.175887] __lock_acquire+0x2a02/0x5e70 [ 120.175911] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 120.175936] lock_acquire+0x1a2/0x530 [ 120.175955] ? down_trylock+0xe/0x70 [ 120.175976] ? lock_release+0x750/0x750 [ 120.175998] ? vprintk+0x84/0xa0 [ 120.176018] _raw_spin_lock_irqsave+0x39/0x60 [ 120.176032] ? down_trylock+0xe/0x70 [ 120.176052] down_trylock+0xe/0x70 [ 120.176071] ? vprintk+0x84/0xa0 [ 120.176090] __down_trylock_console_sem+0x3b/0xd0 [ 120.176109] vprintk_emit+0x16b/0x560 [ 120.176130] vprintk+0x84/0xa0 [ 120.176150] _printk+0xba/0xf1 [ 120.176164] ? record_print_text.cold+0x16/0x16 [ 120.176183] ? report_bug.cold+0x66/0xab [ 120.176195] ? group_sched_out.part.0+0x2c7/0x460 [ 120.176207] report_bug.cold+0x72/0xab [ 120.176220] handle_bug+0x3c/0x70 [ 120.176232] exc_invalid_op+0x14/0x50 [ 120.176244] asm_exc_invalid_op+0x16/0x20 [ 120.176260] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.176275] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.176286] RSP: 0018:ffff888033da7c48 EFLAGS: 00010006 [ 120.176296] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.176304] RDX: ffff888008c60000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 120.176312] RBP: ffff88803f570000 R08: 0000000000000005 R09: 0000000000000001 [ 120.176320] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800faa4800 [ 120.176328] R13: ffff88806cf3d140 R14: ffffffff8547cf00 R15: 0000000000000002 [ 120.176358] ? group_sched_out.part.0+0x2c7/0x460 [ 120.176373] ? group_sched_out.part.0+0x2c7/0x460 [ 120.176387] ctx_sched_out+0x8f1/0xc10 [ 120.176401] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.176418] ? lock_is_held_type+0xd7/0x130 [ 120.176435] ? __perf_cgroup_move+0x160/0x160 [ 120.176448] ? set_next_entity+0x304/0x550 [ 120.176468] ? update_curr+0x267/0x740 [ 120.176488] ? lock_is_held_type+0xd7/0x130 [ 120.176505] __schedule+0xedd/0x2470 [ 120.176526] ? io_schedule_timeout+0x150/0x150 [ 120.176546] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.176569] schedule+0xda/0x1b0 [ 120.176588] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.176601] syscall_exit_to_user_mode+0x19/0x40 [ 120.176617] do_syscall_64+0x48/0x90 [ 120.176629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.176645] RIP: 0033:0x7fc399499b19 [ 120.176653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.176665] RSP: 002b:00007fc396a0f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.176676] RAX: 0000000000000001 RBX: 00007fc3995acf68 RCX: 00007fc399499b19 [ 120.176684] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc3995acf6c [ 120.176692] RBP: 00007fc3995acf60 R08: 000000000000000e R09: 0000000000000000 [ 120.176700] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc3995acf6c [ 120.176707] R13: 00007ffc6b5dfe7f R14: 00007fc396a0f300 R15: 0000000000022000 [ 120.176721] [ 120.232648] WARNING: CPU: 1 PID: 3782 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 120.233340] Modules linked in: [ 120.233589] CPU: 1 PID: 3782 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220928 #1 [ 120.234195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.235023] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.235433] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.236798] RSP: 0018:ffff888033da7c48 EFLAGS: 00010006 [ 120.237194] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.237725] RDX: ffff888008c60000 RSI: ffffffff815662f7 RDI: 0000000000000005 [ 120.238247] RBP: ffff88803f570000 R08: 0000000000000005 R09: 0000000000000001 [ 120.238769] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800faa4800 [ 120.239288] R13: ffff88806cf3d140 R14: ffffffff8547cf00 R15: 0000000000000002 [ 120.239825] FS: 00007fc396a0f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 120.240437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.240868] CR2: 00007fc7079841f0 CR3: 000000001cfb8000 CR4: 0000000000350ee0 [ 120.241397] Call Trace: [ 120.241589] [ 120.241761] ctx_sched_out+0x8f1/0xc10 [ 120.242063] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.242449] ? lock_is_held_type+0xd7/0x130 [ 120.242777] ? __perf_cgroup_move+0x160/0x160 [ 120.243119] ? set_next_entity+0x304/0x550 [ 120.243445] ? update_curr+0x267/0x740 [ 120.243751] ? lock_is_held_type+0xd7/0x130 [ 120.244084] __schedule+0xedd/0x2470 [ 120.244380] ? io_schedule_timeout+0x150/0x150 [ 120.244739] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.245120] schedule+0xda/0x1b0 [ 120.245391] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.245753] syscall_exit_to_user_mode+0x19/0x40 [ 120.246116] do_syscall_64+0x48/0x90 [ 120.246396] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.246786] RIP: 0033:0x7fc399499b19 [ 120.247068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.248417] RSP: 002b:00007fc396a0f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.248986] RAX: 0000000000000001 RBX: 00007fc3995acf68 RCX: 00007fc399499b19 [ 120.249518] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc3995acf6c [ 120.250047] RBP: 00007fc3995acf60 R08: 000000000000000e R09: 0000000000000000 [ 120.250572] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc3995acf6c [ 120.251106] R13: 00007ffc6b5dfe7f R14: 00007fc396a0f300 R15: 0000000000022000 [ 120.251639] [ 120.251819] irq event stamp: 2264 [ 120.252075] hardirqs last enabled at (2263): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 120.252791] hardirqs last disabled at (2264): [] __schedule+0x1225/0x2470 [ 120.253406] softirqs last enabled at (2050): [] __irq_exit_rcu+0x11b/0x180 [ 120.254050] softirqs last disabled at (2041): [] __irq_exit_rcu+0x11b/0x180 [ 120.254683] ---[ end trace 0000000000000000 ]--- 13:51:33 executing program 3: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/247, 0xf7}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/155, 0x9b}, {&(0x7f0000001200)=""/142, 0x8e}], 0x5, 0x5, 0x6) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x178, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x71}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x134}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x538}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x9, 0x21, 0x1000, 0x4]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4da1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe51d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2000, 0x9, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x959c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfe3e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffc00}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x850) r1 = creat(&(0x7f0000001580)='./file0\x00', 0x196) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000015c0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x54b0dd0fa2cce78, r0, 0x830c9000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x2901, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x74, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20080010}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, 0x0, 0x219, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x4044000) r7 = socket$unix(0x1, 0x2, 0x0) fcntl$addseals(r7, 0x409, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x5c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040012}, 0x889) 13:51:33 executing program 6: syz_io_uring_setup(0x5bf3, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6260, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r3, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r3, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x48}, 0x20000005) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x650b, &(0x7f00000001c0), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) rt_sigtimedwait(&(0x7f0000000380)={[0x7]}, &(0x7f00000003c0), &(0x7f0000000440), 0x8) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1}, 0xb6) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) 13:51:33 executing program 3: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/247, 0xf7}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/155, 0x9b}, {&(0x7f0000001200)=""/142, 0x8e}], 0x5, 0x5, 0x6) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x178, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x71}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x134}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x538}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x9, 0x21, 0x1000, 0x4]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4da1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe51d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2000, 0x9, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x959c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfe3e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffc00}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x850) r1 = creat(&(0x7f0000001580)='./file0\x00', 0x196) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000015c0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x54b0dd0fa2cce78, r0, 0x830c9000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x2901, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x74, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20080010}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, 0x0, 0x219, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x4044000) r7 = socket$unix(0x1, 0x2, 0x0) fcntl$addseals(r7, 0x409, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x5c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040012}, 0x889) 13:51:33 executing program 6: syz_io_uring_setup(0x5bf3, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6260, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r3, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r3, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x48}, 0x20000005) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x650b, &(0x7f00000001c0), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) rt_sigtimedwait(&(0x7f0000000380)={[0x7]}, &(0x7f00000003c0), &(0x7f0000000440), 0x8) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1}, 0xb6) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) 13:51:33 executing program 3: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/247, 0xf7}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/155, 0x9b}, {&(0x7f0000001200)=""/142, 0x8e}], 0x5, 0x5, 0x6) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x178, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x71}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x134}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x538}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x9, 0x21, 0x1000, 0x4]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4da1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe51d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2000, 0x9, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x959c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfe3e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffc00}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x850) r1 = creat(&(0x7f0000001580)='./file0\x00', 0x196) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000015c0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x54b0dd0fa2cce78, r0, 0x830c9000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x2901, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x74, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20080010}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, 0x0, 0x219, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x4044000) r7 = socket$unix(0x1, 0x2, 0x0) fcntl$addseals(r7, 0x409, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x5c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040012}, 0x889) 13:51:33 executing program 6: syz_io_uring_setup(0x5bf3, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6260, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r3, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r3, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x48}, 0x20000005) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x650b, &(0x7f00000001c0), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) rt_sigtimedwait(&(0x7f0000000380)={[0x7]}, &(0x7f00000003c0), &(0x7f0000000440), 0x8) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1}, 0xb6) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) [ 120.670391] loop4: detected capacity change from 0 to 5 VM DIAGNOSIS: 13:51:33 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffffff849ec5c0 RSP=ffff88801a69fa50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff848f8440 R14=ffffffffffffffff R15=ffffea0000b6f1c0 RIP=ffffffff84250f6e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f221f56d6f4 CR3=0000000005226000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f221f57c470 00007f221f57bf20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba131 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff888033da7690 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000a R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba120 RIP=ffffffff823ba189 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc396a0f700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7079841f0 CR3=000000001cfb8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 38313d72656e776f 662c73746f646f6e YMM01=0000000000000000 0000000000000000 3631353539303733 3730343437363434 YMM02=0000000000000000 0000000000000000 6a626f2c3d657079 745f6a626f2c3531 YMM03=0000000000000000 0000000000000000 65746e6f632c5b2e cb273d656c6f725f YMM04=0000000000000000 0000000000000000 2c40292b2a3d7461 6873666b63616d73 YMM05=0000000000000000 0000000000000000 2c38323930363030 3030303030303030 YMM06=0000000000000000 0000000000000000 30303030303d6469 752c746f6f723d74 YMM07=0000000000000000 0000000000000000 7865746e6f632c5b 2ecb273d656c6f72 YMM08=0000000000000000 0000000000000000 92eb12d48b7ea51c 2bab3ae632fa2f91 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000