Warning: Permanently added '[localhost]:6533' (ECDSA) to the list of known hosts. 2022/09/30 10:49:07 fuzzer started 2022/09/30 10:49:07 dialing manager at localhost:40535 syzkaller login: [ 37.341882] cgroup: Unknown subsys name 'net' [ 37.438940] cgroup: Unknown subsys name 'rlimit' 2022/09/30 10:49:22 syscalls: 2215 2022/09/30 10:49:22 code coverage: enabled 2022/09/30 10:49:22 comparison tracing: enabled 2022/09/30 10:49:22 extra coverage: enabled 2022/09/30 10:49:22 setuid sandbox: enabled 2022/09/30 10:49:22 namespace sandbox: enabled 2022/09/30 10:49:22 Android sandbox: enabled 2022/09/30 10:49:22 fault injection: enabled 2022/09/30 10:49:22 leak checking: enabled 2022/09/30 10:49:22 net packet injection: enabled 2022/09/30 10:49:22 net device setup: enabled 2022/09/30 10:49:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 10:49:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 10:49:22 USB emulation: enabled 2022/09/30 10:49:22 hci packet injection: enabled 2022/09/30 10:49:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 10:49:22 802.15.4 emulation: enabled 2022/09/30 10:49:22 fetching corpus: 50, signal 25706/27459 (executing program) 2022/09/30 10:49:22 fetching corpus: 100, signal 36977/40330 (executing program) 2022/09/30 10:49:22 fetching corpus: 150, signal 42651/47526 (executing program) 2022/09/30 10:49:22 fetching corpus: 200, signal 48521/54782 (executing program) 2022/09/30 10:49:22 fetching corpus: 250, signal 53306/60901 (executing program) 2022/09/30 10:49:22 fetching corpus: 300, signal 57123/66049 (executing program) 2022/09/30 10:49:22 fetching corpus: 350, signal 61005/71158 (executing program) 2022/09/30 10:49:23 fetching corpus: 400, signal 66161/77384 (executing program) 2022/09/30 10:49:23 fetching corpus: 450, signal 74897/86790 (executing program) 2022/09/30 10:49:23 fetching corpus: 500, signal 78163/91076 (executing program) 2022/09/30 10:49:23 fetching corpus: 550, signal 81092/95010 (executing program) 2022/09/30 10:49:23 fetching corpus: 600, signal 83955/98777 (executing program) 2022/09/30 10:49:23 fetching corpus: 650, signal 86458/102229 (executing program) 2022/09/30 10:49:23 fetching corpus: 700, signal 90137/106642 (executing program) 2022/09/30 10:49:23 fetching corpus: 750, signal 92601/109940 (executing program) 2022/09/30 10:49:24 fetching corpus: 800, signal 94568/112766 (executing program) 2022/09/30 10:49:24 fetching corpus: 850, signal 97241/116131 (executing program) 2022/09/30 10:49:24 fetching corpus: 900, signal 98397/118225 (executing program) 2022/09/30 10:49:24 fetching corpus: 950, signal 101284/121743 (executing program) 2022/09/30 10:49:24 fetching corpus: 1000, signal 104654/125611 (executing program) 2022/09/30 10:49:24 fetching corpus: 1050, signal 106246/127961 (executing program) 2022/09/30 10:49:24 fetching corpus: 1100, signal 108331/130670 (executing program) 2022/09/30 10:49:24 fetching corpus: 1150, signal 110607/133511 (executing program) 2022/09/30 10:49:24 fetching corpus: 1200, signal 112318/135831 (executing program) 2022/09/30 10:49:25 fetching corpus: 1250, signal 114563/138543 (executing program) 2022/09/30 10:49:25 fetching corpus: 1300, signal 116641/141140 (executing program) 2022/09/30 10:49:25 fetching corpus: 1350, signal 117814/142998 (executing program) 2022/09/30 10:49:25 fetching corpus: 1400, signal 119440/145147 (executing program) 2022/09/30 10:49:25 fetching corpus: 1450, signal 121116/147372 (executing program) 2022/09/30 10:49:25 fetching corpus: 1500, signal 122617/149380 (executing program) 2022/09/30 10:49:25 fetching corpus: 1550, signal 124365/151499 (executing program) 2022/09/30 10:49:25 fetching corpus: 1600, signal 127370/154516 (executing program) 2022/09/30 10:49:25 fetching corpus: 1650, signal 128567/156232 (executing program) 2022/09/30 10:49:26 fetching corpus: 1700, signal 129855/158008 (executing program) 2022/09/30 10:49:26 fetching corpus: 1750, signal 131065/159683 (executing program) 2022/09/30 10:49:26 fetching corpus: 1800, signal 132338/161380 (executing program) 2022/09/30 10:49:26 fetching corpus: 1850, signal 133670/163122 (executing program) 2022/09/30 10:49:26 fetching corpus: 1900, signal 135168/164857 (executing program) 2022/09/30 10:49:26 fetching corpus: 1950, signal 136209/166344 (executing program) 2022/09/30 10:49:26 fetching corpus: 2000, signal 136799/167507 (executing program) 2022/09/30 10:49:26 fetching corpus: 2050, signal 138087/169113 (executing program) 2022/09/30 10:49:26 fetching corpus: 2100, signal 140183/171231 (executing program) 2022/09/30 10:49:27 fetching corpus: 2150, signal 142037/173252 (executing program) 2022/09/30 10:49:27 fetching corpus: 2200, signal 142850/174448 (executing program) 2022/09/30 10:49:27 fetching corpus: 2250, signal 143972/175860 (executing program) 2022/09/30 10:49:27 fetching corpus: 2300, signal 145548/177441 (executing program) 2022/09/30 10:49:27 fetching corpus: 2350, signal 146615/178782 (executing program) 2022/09/30 10:49:27 fetching corpus: 2400, signal 147570/180019 (executing program) 2022/09/30 10:49:27 fetching corpus: 2450, signal 148530/181198 (executing program) 2022/09/30 10:49:27 fetching corpus: 2500, signal 149468/182322 (executing program) 2022/09/30 10:49:27 fetching corpus: 2550, signal 150717/183660 (executing program) 2022/09/30 10:49:28 fetching corpus: 2600, signal 151965/184948 (executing program) 2022/09/30 10:49:28 fetching corpus: 2650, signal 152944/186051 (executing program) 2022/09/30 10:49:28 fetching corpus: 2700, signal 153610/187013 (executing program) 2022/09/30 10:49:28 fetching corpus: 2750, signal 154834/188250 (executing program) 2022/09/30 10:49:28 fetching corpus: 2800, signal 156059/189434 (executing program) 2022/09/30 10:49:28 fetching corpus: 2850, signal 157040/190726 (executing program) 2022/09/30 10:49:28 fetching corpus: 2900, signal 157754/191681 (executing program) 2022/09/30 10:49:28 fetching corpus: 2950, signal 160657/193785 (executing program) 2022/09/30 10:49:29 fetching corpus: 3000, signal 162454/195162 (executing program) 2022/09/30 10:49:29 fetching corpus: 3050, signal 163193/196027 (executing program) 2022/09/30 10:49:29 fetching corpus: 3100, signal 164552/197218 (executing program) 2022/09/30 10:49:29 fetching corpus: 3150, signal 165381/198119 (executing program) 2022/09/30 10:49:29 fetching corpus: 3200, signal 166924/199236 (executing program) 2022/09/30 10:49:29 fetching corpus: 3250, signal 167517/200004 (executing program) 2022/09/30 10:49:29 fetching corpus: 3300, signal 168793/201052 (executing program) 2022/09/30 10:49:29 fetching corpus: 3350, signal 169365/201774 (executing program) 2022/09/30 10:49:29 fetching corpus: 3400, signal 169934/202457 (executing program) 2022/09/30 10:49:30 fetching corpus: 3450, signal 170912/203288 (executing program) 2022/09/30 10:49:30 fetching corpus: 3500, signal 171623/204009 (executing program) 2022/09/30 10:49:30 fetching corpus: 3550, signal 172606/204847 (executing program) 2022/09/30 10:49:30 fetching corpus: 3600, signal 173319/205545 (executing program) 2022/09/30 10:49:30 fetching corpus: 3650, signal 174059/206284 (executing program) 2022/09/30 10:49:30 fetching corpus: 3700, signal 174875/206974 (executing program) 2022/09/30 10:49:30 fetching corpus: 3750, signal 175434/207580 (executing program) 2022/09/30 10:49:30 fetching corpus: 3800, signal 176399/208437 (executing program) 2022/09/30 10:49:30 fetching corpus: 3850, signal 176938/209049 (executing program) 2022/09/30 10:49:31 fetching corpus: 3900, signal 177714/209692 (executing program) 2022/09/30 10:49:31 fetching corpus: 3950, signal 178461/210329 (executing program) 2022/09/30 10:49:31 fetching corpus: 4000, signal 179323/210939 (executing program) 2022/09/30 10:49:31 fetching corpus: 4050, signal 180665/211710 (executing program) 2022/09/30 10:49:31 fetching corpus: 4100, signal 181225/212209 (executing program) 2022/09/30 10:49:31 fetching corpus: 4150, signal 181818/212701 (executing program) 2022/09/30 10:49:31 fetching corpus: 4200, signal 182931/213431 (executing program) 2022/09/30 10:49:31 fetching corpus: 4250, signal 183757/214028 (executing program) 2022/09/30 10:49:32 fetching corpus: 4300, signal 184113/214450 (executing program) 2022/09/30 10:49:32 fetching corpus: 4350, signal 184618/214945 (executing program) 2022/09/30 10:49:32 fetching corpus: 4400, signal 185359/215466 (executing program) 2022/09/30 10:49:32 fetching corpus: 4450, signal 185958/215954 (executing program) 2022/09/30 10:49:32 fetching corpus: 4500, signal 186332/216349 (executing program) 2022/09/30 10:49:32 fetching corpus: 4550, signal 186794/216783 (executing program) 2022/09/30 10:49:32 fetching corpus: 4600, signal 187297/217190 (executing program) 2022/09/30 10:49:32 fetching corpus: 4650, signal 187887/217596 (executing program) 2022/09/30 10:49:33 fetching corpus: 4700, signal 188474/217960 (executing program) 2022/09/30 10:49:33 fetching corpus: 4750, signal 189103/218323 (executing program) 2022/09/30 10:49:33 fetching corpus: 4800, signal 189718/218728 (executing program) 2022/09/30 10:49:33 fetching corpus: 4850, signal 190559/219134 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/219464 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/219737 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/220044 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/220352 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/220650 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/220967 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/221247 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/221526 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/221790 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/222101 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/222405 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/222692 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/222832 (executing program) 2022/09/30 10:49:33 fetching corpus: 4872, signal 190746/222832 (executing program) 2022/09/30 10:49:36 starting 8 fuzzer processes 10:49:36 executing program 1: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000040)=')\x00', &(0x7f0000000080)='{&,\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\'-^:$\x00', &(0x7f0000000140)='^+{@}\x90@}\x00', &(0x7f0000000180)='\x95#{\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='\\[]\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\\/).\x00', &(0x7f0000000300)='(j+\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='Y,$}\x8e\x00', &(0x7f00000003c0)=']\x00'], 0x1000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) execveat(r0, &(0x7f0000000480)='./file1\x00', &(0x7f00000006c0)=[&(0x7f00000004c0)='*))[],[}%}>}\x00', &(0x7f0000000500)=']\x00', &(0x7f0000000540)=']\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)=':(\x00', &(0x7f0000000640)='\")-#\x00', &(0x7f0000000680)='\x95#{\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='{&,\x00', &(0x7f0000000740)='\'-^:$\x00'], 0x1000) write(r0, &(0x7f00000007c0)="759f97513085ebb18f561a4f7a95f48f963c836dd2adbe43d386eb276c4b4497b21477136b247caf9760", 0x2a) r1 = openat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x200000, 0xb6) r2 = syz_mount_image$msdos(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x101, 0x2, &(0x7f0000000a40)=[{&(0x7f00000008c0)="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", 0xfe, 0xfffffffffffffff7}, {&(0x7f00000009c0)="f9ad62436c3cb56fcfe2278629c0ea0870cc4512a82e699bc5af7cf877f0e36a18f77e4439ecdb80a73bffe35cd980b89dc5cfca745aeb96ac3eaf787daac1c1f2404307651be8070b75", 0x4a, 0x9}], 0x0, &(0x7f0000000a80)={[{}], [{@subj_type={'subj_type', 0x3d, '\\[]\x00'}}, {@appraise_type}, {@fowner_lt}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'Y,$}\x8e\x00'}}, {@appraise_type}, {@measure}, {@dont_appraise}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) r3 = openat(r2, &(0x7f0000000b40)='./file1\x00', 0x0, 0x2e) pipe2(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000c00)={@private1, 0x0}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001100)={'syztnl0\x00', &(0x7f0000001080)={'syztnl2\x00', 0x0, 0x2f, 0x81, 0x6, 0x7c, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x1, 0x20, 0x3, 0x8001}}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001140)={@local, @remote, 0x0}, &(0x7f0000001180)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001300)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x206000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xe8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x4) fcntl$addseals(r0, 0x409, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001340), 0x4c002, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000002040)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002000)={&(0x7f0000001400)={0xbec, r9, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x41}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x936, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0xb7}, @broadcast, @device_a, @device_b, {0xf, 0x9e4}, @broadcast}, {0xc, 0x1, 0x0, 0x0, 0xfc}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_b, @initial, {0x8, 0x6e6}}, {0xf, 0x1, 0x3}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x1ac, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @device_b, {0x7, 0x6}, @broadcast}, {0x7, 0x1, 0x1, 0x0, 0x8d}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x80}, @device_b, @broadcast, @random="187658307f78", {0x9, 0x9d3}}, {0x8, 0x0, 0x1, 0x1, 0x9}}}, @a_msdu=[{@device_a, @broadcast, 0xfe, "871f4d98b079da1e942f77f1bd34a1231f796a3feed53d0fbc5471fcbcc8f3fd63ff68f5de63c99a6ccf266153b20ce9180fc233feb9a7b784241a44b9bd21fe4083f9a1fb9692531aad1ec75ef32c329f1818380e605f0a96017a3d1d1084db9094cfe6a743e4e1dc16aed6e8327b4e06d992bcd76a5204e970f44f8137fc736a362a7e5e1c8086c2a801fe42d36bd5aa84eda0b2f0779d4236ab84cf092318735c125e300baccfccb44e94e1a508dc85f1447bc632197a38ec9a45b8adfd28667d151e7e490ae0161d8949c581dc14edb4692a2eb8d07ffb8e44a0245dcce61e31618ed0e904a03993a46b52f29b67a93c41b5c538c0c7d943f4683c5b"}, {@device_a, @device_a, 0x4e, "b0190f5bb466d9e6a078cab083a527a856c797000b6a14c259a60e89a427df5754d29e4ff54968ff5d59569ed44f5d3263c97648860bee7474cc34038bd043a03172dd89cbde732e2682442e86c8"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xc5, 0x33, @mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @from_mac=@broadcast, {0xf, 0x1}}, 0x18a0, 0x36, @random=0x800, @val={0x1, 0x2, [{0x1b}, {0x2}]}, @void, [{0xdd, 0x63, "fdb590abd4d3941755652d13c7d2cfd7dcc813ba50f334eb6fe806d4ccfaecc9dc87037191f69ab3c41a384f42c3873a3817706154df488664fae5ec6cc52b711c5f3083170355541a84ccf0551b70e2db6bd68bc9c7e6cfb4c266f9c0eb8de23bc420"}, {0xdd, 0x15, "36e3a4ea15a825c9e1f4fa0dc48eae90af7a531f4c"}, {0xdd, 0x21, "cbb46ef8613f9a1353b0561cfed00e2863f4b65b8c2d0de8d48038e0f54eece95e"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x883e}]}, 0xbec}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f00000020c0)={0x314, 0x13, 0x2, 0x70bd25, 0x25dfdbff, {0x1e, 0x4, 0x2, 0x6, {0x4e24, 0x4e23, [0x2, 0x10001, 0x0, 0xe4e], [0x7, 0x6, 0x7fffffff, 0xdcb5], r5, [0x6, 0x20]}, 0xc5, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "e74624c34d96145f2458607029ca5d58ea941873d3648fad0772a4baa85d47eb787e3010fd6d92e5f44f302d07989006b33231c4b48eefb5e2b86d4c47eca92c37ebd165408be01416354233"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "c46dc0b2d064a9f4c8dbbe66df3155b53e9b1738eb6062ae420517e2b6d9d517939c4715915506519f2a625fb73b99d30154ef9c0b4c3763b158d6490151f0396495211478828e8809e6870d78cec6efc5e2422926750dd5e6758368055e0fe890d1c8e47c7bbd64ea3596faa96b6603e2d0bc5d239df478532c1edb3da4492a61e3c8514bb7e6a5ee243d65fb6c859c0a353b4817842c81a7453b958ed4dc261b6804f11e4244769f02b901d583fb43f56743922b11c1ee279c20b7f11baaf75b2f69e5556d5b2efa5e26ba75322b7fac6dd90077567fd6498083bc1798deac69a0f904425ee0e118"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "070058a759608652b1f35f26f0100545cac5a5f3f9288c851083840436442f43becc74849ca43bb3d129f07a38e96f7d1142813aa99924d57f018f806a27294c835ff06426fb7b1d98165a3e29ead9d0afc676129f6f8c338d86e25325509eae8ee15450f033dd3508e98e8c3c8529b1aa6d82848f7b72ce3b2521448f3bf43687"}]}, 0x314}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000025c0)={&(0x7f00000024c0)={0xf4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x3, 0x3, 0x0, {0x7ff, 0x5, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x1, 0x6}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_KEYS={0xa0, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "40d86afd36"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bba8ac5de5e08dac292a6a3f55"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x480}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000002640)=0x1) signalfd(0xffffffffffffffff, &(0x7f0000002680)={[0x7ff]}, 0x8) 10:49:36 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x1, 0x40}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc4c00, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x1, 0x3}, {0x3, 0x40}, 0x8, 0x3, 0xe1}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x2}, {0x75f8}, 0x80, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="32caf06c39baad9a8342abecb45b7d59747c0408f7611bc45386626170ef810ad324c7e4df952dd6f1ec0d1c7f01965747875df88037631ca52a6e888df758c9249b71286541c6a2ad2dc9652b3b57a781f39efe71b4fb72d50e6750718aa4798679c213057d7c000e6595350dcb68752306", 0x72, 0x0, &(0x7f0000000240)={0x2, 0x101, {0x0, 0xc, 0xaf, "49048310e31aa5ddd90ada5bc14b1aed0f2db4e42007b1795e1cc7cc8d6deaa3a77e39a05f619c1d8c527c439eb1c136a20bfa2014667176f5a54720da01eac89332b202111851d36f77e3ae8774c28242007689c7a8d23f8eb2e579dba20f6ced87fb25041be565d80d40196b99d8bbfff461a479c014f6c05f9f042b27bc7bf9303b1a1c93968d84e83b97a2e02432b28ded5d175e64a9376c0f6e00798bd4f0c9276e7b8c2bf8b964e39d5d1bec", 0x45, "079535f094485ea24ac068abfd36aee51b6a15697b337ae972087b295a28bc0e2be896d06ed52f2ab00a1800dc2e69624e0da20fb94f8f2d425261a29dcd61fb25053326ee"}, 0x8b, "4923bf21617bf7ac93c789a56056c6febba5f1bcbe5449aacaf577c0278bdeb2969a73b4ebbdffd758091a4ca32662996609d98388e10743287715af9e1412ca55f6a53e234542535d3c23bb6def3d9de1e647b887e2a7243bf48556c8606ce6b5fce9b1c0f74933533ff4d1bf40fead9ed0ddab0ada913ec5fbd72ccd624d2a33683170bca299a861a071"}, 0x198}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000480)="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") openat$bsg(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) fcntl$getflags(r2, 0xb) r3 = syz_mount_image$msdos(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x4, 0x1, &(0x7f00000015c0)=[{&(0x7f0000001540)="03e6d9eb7e39893a9542dd22d5487a099ca5b63fea3964cc75c47adb88a632da60a452bf6930cd4b6ce3fdf1ab931e8885afaa04c5f08a24906c572060d3c23c72d6fe6677119c0ca37a592cc19ddaeac2b563c8e830cea73bd3023bcef5cc86d409b0b515ffeabb27efed817e53a6555792612ae579555cfff10b0c", 0x7c, 0x1}], 0x4808, &(0x7f0000001600)={[{@dots}, {@nodots}, {@fat=@flush}, {@dots}], [{@obj_type={'obj_type', 0x3d, 'z$!:\x99$@],\\'}}, {@subj_role={'subj_role', 0x3d, '&:'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'l-'}}, {@measure}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2800) getgroups(0x3, &(0x7f0000001780)=[0xee00, 0xee00, 0xffffffffffffffff]) recvmmsg$unix(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/87, 0x57}], 0x1}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000003a80)=[{&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/150, 0x96}], 0x2, &(0x7f0000003ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000003b80)=@abs, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003c00)=""/159, 0x9f}, {&(0x7f0000003cc0)=""/65, 0x41}, {&(0x7f0000003d40)=""/117, 0x75}, {&(0x7f0000003dc0)=""/168, 0xa8}, {&(0x7f0000003e80)=""/11, 0xb}], 0x5, &(0x7f0000003f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004000), 0x6e, &(0x7f0000005380)=[{&(0x7f0000004080)=""/76, 0x4c}, {&(0x7f0000004100)=""/183, 0xb7}, {&(0x7f00000041c0)=""/63, 0x3f}, {&(0x7f0000004200)=""/91, 0x5b}, {&(0x7f0000004280)=""/134, 0x86}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/33, 0x21}], 0x7, &(0x7f0000005400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000005540)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f00000055c0)=""/239, 0xef}, {&(0x7f00000056c0)=""/31, 0x1f}, {&(0x7f0000005700)=""/23, 0x17}, {&(0x7f0000005740)=""/89, 0x59}, {&(0x7f00000057c0)=""/63, 0x3f}, {&(0x7f0000005800)=""/201, 0xc9}], 0x6, &(0x7f0000005980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x6, 0x2100, &(0x7f0000005b80)) fsetxattr$system_posix_acl(r3, &(0x7f0000001680)='system.posix_acl_access\x00', &(0x7f0000005bc0)={{}, {0x1, 0x6}, [{0x2, 0x6, r4}, {0x2, 0x6}], {0x4, 0x5}, [{0x8, 0x2, r6}, {0x8, 0x0, 0xee00}, {0x8, 0x6}, {0x8, 0x5, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x54, 0x0) ioctl$TIOCGSOFTCAR(r11, 0x5419, &(0x7f0000005c40)) getgroups(0x1, &(0x7f0000005c80)=[r10]) setgroups(0x9, &(0x7f0000005f40)=[r7, r9, 0x0, r12, r5, 0xee00, 0x0, 0x0, 0x0]) 10:49:36 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0xfffffffb, 0x1ff, 0xc23, 0x6b5, 0x30000, 0x200}) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000001c0)={0x5, 0x7fffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) write$P9_RREMOVE(r0, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) r3 = socket$inet(0x2, 0x6, 0xae82) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280), 0x10) r4 = accept(r1, 0x0, &(0x7f00000002c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000300)=0x2) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x72c0a) fgetxattr(r1, &(0x7f0000000340)=@known='system.sockprotoname\x00', &(0x7f0000000380)=""/29, 0x1d) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f00000003c0)={0x3, 0x3, 0xa}) 10:49:36 executing program 2: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x100000000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000000c0)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x480, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x79}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10811}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = dup(r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4124a486}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x18, {0x800, @bearer=@l2={'eth', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x800) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r3) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x51d]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3c1b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000680)={0x20}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x40001) r6 = dup3(0xffffffffffffffff, r5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000900)=0xe8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044481}, 0x4040040) 10:49:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1c000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c004081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40801) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1b4, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x80}, 0x20068080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40020}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x3c0, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x16c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa18e}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3e5}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x66c95e62b9126e54}}, @NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x8327580fde675768}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc851}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x234, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffff00}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x733}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x100, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5726}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4040880}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000b40)={0x4b0, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b26e934}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50fd4ebc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @empty, 0xc000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xba, 0x3, "748c8dfb35aa068ed3024a217d4feb6b6045b4a45e2d0d2ea3dff48140e84cea4b0956ed3ee9295be04505d85681ecbc8a70510d056ed21500e1180ffd5eaf5d869ee0f487a041ab45fe3a667b89ec2cb7f7f64ba19f8c237ce8584d4f64fceb096f4238ed8cdfe263b047aec077ca740ff1d6e94c7c72876e0429f8d5212b71a085149363fcfc1d29876603cf4c375fa0dbae9fecc75e250ae74c4d1380e099699de7b04a2a58981f32ac69a91ea8e1720c9b957dde"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xaf}]}, @TIPC_NLA_NODE={0x238, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "921f46e854576737b4b57f624615ffe8a9fd668653b2da6b5cb5e71edd"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "414267215c0824156104fa98f8949964fb527184cb"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3d054e19308f053aed35a4381edd9e031d4986ffdb855242a07c"}}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "e5aeb15a1490d4d1c699ea38e73d9397115cf386d7f42fd9e1c1e06835f3d7074a832ffb29b70199ebcd688016fc9489b4d1ffaa0cf06b906a89a0479f6b0557d173ac4bb06ba59f61b02784e6cfa379d70123f0da965a015331e9874c0ec9835aba2f854897c94bd13dd24ead3333b8ecc7fc20e7d9409dea7ba0af90f2eae8ffa6ca51c53f62"}, @TIPC_NLA_NODE_ID={0xda, 0x3, "cde092bdad1ed4fcd56e371be4f3b11a27645dc0717259835738f3e2cd8a7537c6c5471643e2dbec9739f09289cdfc8a8c75a533108de285ddb67e33360a49047a375b16ba169ae5225ca29cf07100ad0e5186367ec3bfdb98765d22893edbe64cd0f664acd7641a12a815384ce501bebcbe928bbd8b3245d9bfb9bd2a69ed1f29a91b28843bd5d6fde921202a96d542577fcc859e3cd6ea873cde99598c547726cac153c7f5b7692ee0fa6e0cf9da219c1027edb1cd1cd493576e60b6c1ffe77b1aa44399d2d15597b7f3b3e290c1ed83b653c4015a"}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfc26, 0x25}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x7fff, 0x5, 0x1f, 0x0, 0x6fa1, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x9c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0x24, 0x1}, {0x1}, {0x48}, {0x6}, {0x16}, {0x30}, {0x24}, {0x3}, {0x3, 0x1}, {0x12, 0x1}, {0x6}, {0x60, 0x1}, {0x2, 0x1}, {0xb}, {0x6c}, {0x12, 0x1}, {0x18, 0x1}, {0x3}, {0x16, 0x1}, {0x36, 0x1}, {0x3}, {}, {0x1}, {0x48, 0x1}, {0x16, 0x1}, {}, {0x36, 0x1}, {0x4, 0x1}, {0x48}, {0x7c}, {0x214df733446542f4, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_SSID={0x16, 0x34, @random="71c9087b4bf7132ea65ca78f6a83aa942b57"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="609e5d5551"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8014}, 0x10004010) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x88, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, r7, 0x13a, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40001) preadv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x1, 0x800) [ 65.912165] audit: type=1400 audit(1664534976.425:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:49:36 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r1, {0x7147}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x31}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x44}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80019}, 0x4004080) 10:49:36 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x8040) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x88d0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r2, 0xb10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x7294f6e5af36a8c3) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0x0, 0x300, 0x70bd2b, 0x81, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d94cac110ea9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040881}, 0x11) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004280)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000004380)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000004540)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004500)={&(0x7f00000043c0)={0x114, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xa6cbf3c9c20fc94}, 0x24000898) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004840)={&(0x7f00000045c0)={0x260, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2e3c3ea4}, @ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "df3b92330d29ef"}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/:(*-@\xe2%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'caif0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4e1cccea}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x89}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',@\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(k$!$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}.\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000004) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000004900), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000004d80)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004940)={0x3fc, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x197c657a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e028cb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57968087}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54bcc2ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4516c3df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68b8fefc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3487ea94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x440d8b5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x667626d8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47c8b91f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcc6bd48}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bdfc90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd28}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13136e01}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39eafa32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f067843}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42d7157a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59ed9601}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee47}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f68eb2f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffd0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf051}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fcc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x408377a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c924b9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x180d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfecc}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd353}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dd36525}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74206c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6304060}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8996}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7638}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c18256c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ca5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x265bdcc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cb4157c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x322e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf508}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1552}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e22}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67c79476}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c4d63a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x545f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6590063b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x758807ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf3d146e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20fbd33d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22f645c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fcc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46d3abc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x381f1e29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a25}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28241327}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b496b23}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30074fed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c458e57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce23}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501e30cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x785a6b4}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68509979}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a5976b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x786d3880}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe44f75f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x775afe4d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33c049b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ff4c7da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2675}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x770a9b52}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34e31f89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a648d52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc110}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x423d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaae0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa79d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a1f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x252292d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41616e6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf169}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a46}]}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x20008085}, 0x80c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000004ec0)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f40)={0x50, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004000}, 0x200000c0) 10:49:36 executing program 7: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)={0x3, 0xfff, 0x1, 0x1, 0x4, 0x6b, 0x3ff}, 0xc) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0xdf, "30159ff6665394a2eebf8e5fb3472cb9a7b788200d008839cedfba80d8f6d4f69a8f626e3f124be34d33fea986cc41fd35ded54de99a7b136becb0c2cf55097ae3d16ed1385d34c28f491d8fd0ad6d6b244c74d551d247dd013b7b830263d54863dcfd4801e09b4ee287bb558b559515eb25139cc15bc60ee2358b51f848a435c153eea8d8d6d7919a92488339a2ccf035f83598b7302d29f6091a8e9cfd3f4d5686aa1f1337aed37fdf58d4796adcb6a21cd24fcaa817e20f8b8d757e7ad8c71bd357046749774bf2d54db329556ff9db97240c953ce4c7d1fd6586622f45"}, &(0x7f0000000340)=0x103) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x2}, {}, 0x88, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="23f1f84eecb7fc812ab5a7887521c20c775a411da2bc20e8387f2b67a5f32084593bd31f727b3331dd9b22bb17799c25e4f846734aeb5d4a04f4433c313cbe4954bb80cfc47f5ce269bc8f6958766b9e09aed9b0b6e51c875cd22b1b36bf6b855833b044cb383e515c05949cda475a80ab0b82b6823d8bd0", 0x78, 0x0, &(0x7f0000000480)={0x2, 0x107, {0x1, 0xc, 0x5a, "6433994f12b03088dc85d395ed32740875882b62cbd1ec7b00c1d362cef1f67e3edf2781aa5a9a9d390af5930b9981df4efd3f18443bda552fe283efdd9efeb10823559fef9b5c049205ce3cf0a56e1980524a6647543dabea97", 0xa0, "d3738d4a248b76dd1725fc7a04fcfc35b40f9566b7fd3acd92e5310d169d72e8aebf5879b7978c57a0942cc12fad8329ee2ecdae9bb88b538d47eb9a71dc09e52b196ae9c7fd244527a8a7a76dbc75115e12a5c46fd89ea95af600e426a9eb22f27e9aa982631a6ed3197eea044be4d37451d032259de85e6e8f52de0f2a95753620e096799e92e8a88f7166f47e31c8c6ab982dab98a317fe77cae2c41e9d02"}, 0x7b, "af94441b271feda233005a26d9682107d1ae93c1685bde5bcdbf588af23fb93aa6495a47d00863074d707e63971cc5aaee3f801e7a75643216f0288fa00a7f31ac1ea0a9c34dfb7ac72c4d7886b9b1318da78adffae63a82e3df3d35d1be71e8db06d1b17f735c516fcb47e7d762f65a1ead5e5b3a4a5cf67dd1f4"}, 0x18e}) r2 = io_uring_setup(0x3151, &(0x7f00000006c0)={0x0, 0xfc6f, 0x8, 0x1, 0x6c}) poll(&(0x7f0000000740)=[{r1, 0x4000}, {0xffffffffffffffff, 0x8000}, {r1, 0x3002}, {r2, 0x404}], 0x4, 0x3) accept4$unix(r0, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80800) syz_io_uring_setup(0x78d1, &(0x7f0000000840)={0x0, 0x19fe, 0x0, 0x2, 0x1f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) syz_io_uring_setup(0x9b7, &(0x7f0000000940)={0x0, 0xe5e4, 0x1, 0x1, 0x350, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000a40)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x8000, 0x9, 0x0, {0x0, 0x0, r0}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000c80)={&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b40)="1e880cdddf26e319a3678be94b199a05c3584ffbaaffc780e6e16a237e36c0fcb111abfd385541aaea32190757320b1d16148508ab147e3bf42691c6b98b5ed1a4aa8233d7b4ec9a3993ab34b4e8c304c9e822de686a90ecb9ebadb0c6723bc7dabe8a4f7c77c51fe3e5f1c91030b01752fe19555eeab3c10c3bcbcd370c7e3585ea30ecb8955ad048f1cb", 0x8b}, {&(0x7f0000000c00)='9a', 0x2}], 0x2, 0x0, 0x0, 0x8845}, 0x800) munmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000cc0)={'bridge_slave_0\x00', {0x2, 0x0, @local}}) r6 = memfd_secret(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r6) [ 67.217751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.221102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.223320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.228789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.232348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.235148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.241359] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.260660] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.262700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.265188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.269810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.281763] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.289085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.302962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.302984] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.305623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.307091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.336992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.340840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.344640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.346087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.347698] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.348857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.352068] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.363088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.364898] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.378074] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.380693] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.381931] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.382966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.385249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.389792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.391335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.394125] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.400397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.400425] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.404579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.408724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.411492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.413251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.414728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.420685] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.424994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.426085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.432519] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.433579] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.435978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.437606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.439438] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.442242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.446745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.449024] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.450576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.455191] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.456648] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.493631] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.298277] Bluetooth: hci0: command 0x0409 tx timeout [ 69.362856] Bluetooth: hci2: command 0x0409 tx timeout [ 69.425764] Bluetooth: hci3: command 0x0409 tx timeout [ 69.426862] Bluetooth: hci1: command 0x0409 tx timeout [ 69.427771] Bluetooth: hci4: command 0x0409 tx timeout [ 69.489625] Bluetooth: hci5: command 0x0409 tx timeout [ 69.490966] Bluetooth: hci6: command 0x0409 tx timeout [ 69.553646] Bluetooth: hci7: command 0x0409 tx timeout [ 71.345511] Bluetooth: hci0: command 0x041b tx timeout [ 71.409551] Bluetooth: hci2: command 0x041b tx timeout [ 71.473583] Bluetooth: hci4: command 0x041b tx timeout [ 71.474063] Bluetooth: hci1: command 0x041b tx timeout [ 71.474511] Bluetooth: hci3: command 0x041b tx timeout [ 71.537610] Bluetooth: hci6: command 0x041b tx timeout [ 71.538087] Bluetooth: hci5: command 0x041b tx timeout [ 71.601493] Bluetooth: hci7: command 0x041b tx timeout [ 73.393584] Bluetooth: hci0: command 0x040f tx timeout [ 73.457603] Bluetooth: hci2: command 0x040f tx timeout [ 73.522046] Bluetooth: hci3: command 0x040f tx timeout [ 73.522980] Bluetooth: hci1: command 0x040f tx timeout [ 73.523742] Bluetooth: hci4: command 0x040f tx timeout [ 73.585726] Bluetooth: hci5: command 0x040f tx timeout [ 73.586947] Bluetooth: hci6: command 0x040f tx timeout [ 73.649748] Bluetooth: hci7: command 0x040f tx timeout [ 75.441540] Bluetooth: hci0: command 0x0419 tx timeout [ 75.505513] Bluetooth: hci2: command 0x0419 tx timeout [ 75.569553] Bluetooth: hci4: command 0x0419 tx timeout [ 75.570148] Bluetooth: hci1: command 0x0419 tx timeout [ 75.570773] Bluetooth: hci3: command 0x0419 tx timeout [ 75.633548] Bluetooth: hci6: command 0x0419 tx timeout [ 75.634160] Bluetooth: hci5: command 0x0419 tx timeout [ 75.697579] Bluetooth: hci7: command 0x0419 tx timeout 10:50:28 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r1, {0x7147}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x31}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x44}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80019}, 0x4004080) 10:50:28 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r1, {0x7147}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x31}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x44}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80019}, 0x4004080) 10:50:28 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r1, {0x7147}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x31}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x44}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80019}, 0x4004080) 10:50:29 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r1, {0x7147}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) 10:50:29 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r1, {0x7147}}, './file0\x00'}) 10:50:29 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 10:50:29 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 10:50:29 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001a40)=0x5) [ 119.757053] FAT-fs (loop0): Unrecognized mount option "obj_type=z$!:™$@]" or missing value [ 119.782209] FAT-fs (loop0): Unrecognized mount option "obj_type=z$!:™$@]" or missing value [ 120.505058] loop1: detected capacity change from 0 to 16383 [ 120.518382] FAT-fs (loop1): Unrecognized mount option "subj_type=\[]" or missing value [ 120.551097] loop1: detected capacity change from 0 to 16383 [ 120.552855] FAT-fs (loop1): Unrecognized mount option "subj_type=\[]" or missing value [ 120.582789] audit: type=1400 audit(1664535031.099:7): avc: denied { create } for pid=3940 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 122.546583] Bluetooth: hci7: command 0x0405 tx timeout 10:50:50 executing program 6: r0 = timerfd_create(0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001040)=0xfffffff7, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/201, 0xc9}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/102, 0x66}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/66, 0x42}], 0xa, 0x8000, 0x6) r1 = syz_open_procfs$userns(0x0, &(0x7f00000017c0)) fchown(r1, 0xee01, 0xee01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'caif0\x00'}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001840), &(0x7f0000001880)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000001940)=0x8, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001980)={0x6, 'ip6erspan0\x00', {0x7}, 0x3}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000019c0)={{}, {0x77359400}}, &(0x7f0000001a00)) 10:50:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f02, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x520f, &(0x7f0000000380)={0x0, 0x54fc, 0x4, 0x1, 0x194}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x437) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "950b8bbc34bf9b44a5f783e82416e13437591aaea9e99d56d9fa2b62c996fb937ef8e5bb361a4eb72e3b338b3d456d93c2993fc14a84c9df4fca9a60ad24fe51c5a3fc272feb82e0053d62793dcbb53a9aac338c90f5cdae9589decd38f50a09d93770fe9fffa2570bae21a6c16607cb009087b6f6850ff959c7cde98a4e32896d4e19a961e665ed3624ef5c69dc0964b4e762a597e962c8f0c77006ae2c2e61c9d589d8075d51ad024b5e6af6d9ad992d0bf7c9b663e91485d32a9e7ee3febf65c5d7f7d8cf1d6ee7a1d12df1d9a056d2c44371e7d7376e0baa911ce2fb91f811506149e1b2bcf3dc0e9c94a294388d4636547a098e57bad5c0bf1ee2d21aabc22fc193ed1e85886abdeb6944ead2082984e3b7724633f58c76185a0e7814cf6745bb5ca89b88abdf102a0bcf9fb0c1b2eed6553ee3a0eab3b9bcebf70187adf95f5a2564a6d081679f6988f7e0fffda8c75027eec9fd9177d245704a2f1348f6aa2141357964efb85de30e3be48ba72b34f46a53c393aacb648b728316adf6edc89a128dac296e8022e3457cda709d3f4ee82e744910890ba79420b32572d19d21d965bb5f7be6713d2aff1c6a47589d00d173a4f7f75c191247fb6eea511c85f1f2ca3389aeec86fa05b79a53eadd44f6928fd6492e18d1de7614e68ab21dfd71508786e535de92de39236ea42fbaa81ae85784b5c24c89f6bee084493fc227b3c9f620efa3b7c13b48c1bd1bc20f5972f2a94a68b6717e2f0524741ee7d55a39eee078436f0af9a982a0953bd1cd57849007d08bfbf1dfe814c8448539baa1c5b8ced883da94c7b946cb9e205c83941172aa1bc8e710fe6efec7ef16639408348485e6890ea289fabb6a872c634aa21059ca2bd3cf3deae4bfada536780a9f11ef2a84a17bc2e5ffefc8b7f1aa708f2d89e496578b78381a82916a7a2b36413b76171af62915c76d20d2ec695f0d7dd0ae6a5a890e1070500a62f4267321900efe7073474e030a3ab8086275b552ac0ca8e94f438307b354e39005cddc582c5da0f3753b37643cc13bdff1efef66055f16e871e8ad26a502e5e7509d05f98f32f3f0b5d563c498e860b5b931e36ccd1e7d7f5a0904288aecd9c6a5bbda28d43169cb7967d69d124f5cf6fd1574ba9a9eabd5b8b0b27bb48ac5659c2734e21eb8cd71ba8c7fd8ff7b7cb65d7d127ff0f53fc25d2f3eb05586d7299eb8cb1eb255a460c9a05151ceead842b1c21e8c19ebecf6cb1a7f9a19a254c9e39bfbcb905d6d0265b37fae4d15ef8e4c56f82bf976662e0d258c2e7ba2ebe6ca3e9ea3d0ea52ee8b67d8f318a2a27a716977d4fe916264e11788a1e80dde6a0100b156b89f11e4e3bf78c66d535e46477fcd9f568578523406f21a6796ac3c1e0f6ba31a471f359579b103299799606a766a1ca7148c153d85c5420bd1e1ee0564c08c88dec5d248eccf1f63cf01015197f6a3fa61a598e8ad327cd6dfe3cf9f0b4e685dc0e9b10908f68b2290a3741a90991e1f67c04015a780a87c89644280b032722ceb2531bbed8e4459edad3409cbe1ddfd071052277cd908cebe5c00009c3f3a33b9ec60b200e700eb9d48954461c82591a5ffeec87f12d081d30e4c61999879c607cc653a3b2478439b42ea05b469534f20653d8d61a55e9761dd331386109af0b2453eb2e8ba54e7c16e890727c133b442956db67278d661166a9290d4fe8008821649eeefba119ba3776597654a546611693db7b3fc63aa2d01047dbf8a6db146b0fcf3afc8d819575f642dc87ffbd0a42bb68c20f1ea1dac2804db95adab571d2ca60c679a8db02ba3cd5765713e5c3748205b56fd3f6f6e32f628c5b986b1f9d218df36b03db78ee74544555dfa7506a939f48c10a9df0620a841f7e9c67cbf5b367c4c0bbd69b76956326f1737d143d49619691433473fd5fed20fc5710ff0f7c6288a4071f02f741532e3080d59b039466ab62972ecc563ee511e8a9d56fa7179569f1d2420ddc90c62d654331771dd8515ecb6d9030901de113996870c1d921fca0d39a5da13183ab12506008f3074a26ef1990fdabfea0d42d346748959a35e0e07c447c03a591c54ae61186cf579e2636e89d3b3f06c5a019330dbb2d313cff036624a789abb4d5a76ea83e31774be2280de447a053e29a2cb6c4fe62292b61e6513098cc0269a6d526aab3dba820ebe9408839a8f96a5cd09bb29dd6e1b2bdfd31d6b93ceb47976f6650f0c294b061fd25118d364cb0654b0f87741953c3fb2a590394179678b1fab1390db08d599bc418f168f4aa56ebbf3fc9f1597151c83e989770349402695c8b2bfd2b488e0735a071650d4fe1420804c66ce4261424f60424c0390397e7eea3ca904173b8620d74799ae84204abc9548801f3ca29973a33110c6b13d0aaaf316948e1d6fb99ca3150864361418d7f05f39ba7b9026a356f185ad23542e6f0af8d71989486bde21d7451acf86bab6ed27271f395ab31e88e6cd6ff6da710e6ae680fc1711a1319694f9ac56cdcfd46a10db35295627a7dcd4c605e98e455164ff21927b904929973b7520f752b76e6cd3732e540371fd78a5a42611f42d0b185d213a47abd2dfdc37c79894d3323900631655bc263fb5e8aa6b6f32c9f8ced4acc81c6d4bc95fa48faee5697d4221cc576bae07afe10057cf40423318fcd32c3158d65eb770728028f8e5354069ec4f4f63b9a4cd68172397bfa5371a43697e7bc26d777c55ce5f0a225324397a7567b0b969604db7d32c95b05017db53bad3cc1ac3f3d3bc0287d7794f9baf0f1a7064258586e39743dc150637d84c47fce0feb9e9f3c1fbddcdc9de4a1011a54cf9a74fd28b029f0bfb45f723e4dbe9910a203e98fdbe6fa0d562ead671d5ecaba5f2f29d8e37dcae6b3b6e0cc4917ef4da6b9f0baacbc51840ebaf85f0f7d11897d8887a35d99f50eedefcb07913a665d0843f68a73767df874c5995936bf5c03bf40ff54e179c094127af6254e22da82484472eca7a48bf932c2470ad5c6bc43b2392ebae24692e73ae1c6e0c03eb958b78952531156d7509da69cfd9d8e5068e560fc7f28a974490ecbbc79aafb65f525e5b8d04aaed3b683c6b23703d6ff361f5bd57a9b62ffa5e994b9bbaaf582688f78bc13ef909f9634324fbf6859646b673e2b1d80f56a58bffdac390c245d8cc3036da0e6656f24af365da36ec6cc74847ccfb4a36115c1f19cc6e848f909089a2ac660d1223765295f37c442f987ed98b3f7b3b963213d2e6289b147c80dfc239800f0d48d37fc4739fa521dd686f5413261a9cd06f1c09c598d3d91e66db106ef212c3a1b8c02834f9cc3634ca938df7a478c25b55f0c654bc4f70057a60a7bbf02706f048329d3ad3052f23b698b8ffb97085f121249359320efff2add0c35db60e7cf74e0169e9cf13c0c3725768fea6e928a213e61bae007bc307e4fe63b0905772c469747b5884509acce8b7c368b417b44460d6e5d3ab9dec690c43a029122ba37216d48a0d7eb519fcd0257df3a693711ffa60c8a3855713f359c3780f4a40694982d7ce84e40f03faaf942730e9daa8777d7a8909999df47955ea430bb443789f047066426df0a7fe04f741420b0db3c5e54f0b03e60b5897e96c4bf34f324ef899b9ea4b36c44b2496f043e7be07f3a58bb094caab78f168d9486d0dfd1adc97ae3ce5e710a9e47e6b5f8360417d1462acb4062057dda820c5d4b4cc90a13732fc2b52b12b2d255cb01f529a597e5ee29eb36e0c479896ae189103580a633c4a09621043df2205d00b45a84cd8ebe81c483cdf66994827672942dba7674e2090829a33744394e7b9c81ff273a5df6e0eceaa9b2abad932c8740d3b0b977e91fc03f4020a4459fa582d48673215c14f0da08a82a67b8bb804915c9d1218d7a9de94033a32725f30f9f9e81987d63cca018d12c3894b7fbeb95901f382bdee8595b2e6b7f42d0ada636db6e000625dfaa79a6309b2dd279fff258cefcc044a06bdbe489230ffdd90efdda0df2da52742a59e24b8c50ec68790fc62207ac2cd6d4997d6a4faa5e2645e30228f39094750eef3ce56b1569438750ff50130c64e8f37d8ff49fa9d9c0d409e9f60f347cb386946ce117b4c40a9a53c7359d3a966c7326263270eb16876ff1e6da42a73a634ac661327a916b8416bac1bb49a5e9b8da0dc7170d833d07df1fab73a7f202aaa768049efefc4b399611a6fdbe29aaccfb6416be56f30e9fce9602d0cf57c1c70b321974e3518434ca828f1a51d4191b99e0e0a7451ba3b4f2b5cf95b44fc417abcc5b0b13bae366614f75c98aade49013475086a48d9e64ba7701d6aa7997132e56b97b962921a73e7a70de0f32c06d0117b24708867f7247024a28096607669001e87ec188812d0eab256b0296e0f70c47c6ca89dd511c1362523930a546a44ebc421e03e979a5bba49732d437d82e7555e5a10c4a1fd933c6c50380d3d7a147586e4033005f533f7ade992af2696c4d122311a473f97644095805a18da9d0b52e2f72dd386a3d14f478c7ba144503ee2e94bfb3853fb37adca2f7bf51872fd3a54e392c8b6dbf142c6ae83ca21575ca6a1d3fa1b1de90f4a816d093561f88f6e6aaf782d08c798147a64851759b8667a1531da2d571e1457edd13d7d0929ae02daed710e9ae1a2796e38a1c2921dd2fd57f825f4cf95f02e34e9cf3e894d57cfde113224210caec0b4ab2901262b6e36d96ea1febc8c73a12f0e40f6b47b13709cfecbec1420fcb5cdc2b5986d0a54fe0459ba5f77b90bc9d2cbdd86663910fed740f6f41d94cb1b3818a550f8da00f6d17b150e4872fec8712a7490a1782a82b9680ceeeb41fdb8c95c1d3d574437d3bd1915020d96e411978c1738d7683b62f5dbf6280dc72860a2b6fa1de548e6a22987f1d3b5eb010172d7c684e9943e32b140fc51cd8c7046a2cc604244a7aad63a9edd2f64c31c8fe127a2cb965ac0a374b24e475bc78f4cbdda40b39b282af1d192bd2a967fc6b7811f8ef8be8d65cd8d3ddbf1e69989c073a16c9c1896ca8a734bc6a4df17d39d30a8b8c1ec3d93534747e8e9a769f60a9e10cc69ea5903993bc481630e1df50eedc1a1a51d96de8fcd27a3ba4108349c92d52b81886d19217b10508527634c58af2806b2dae8c71aaeb6946896decd03266a75bccf676d86064188d0da683b3b38a3c03fc22bbf6c8d8bdea829bc5aa5d5521da096718aa6a629f174e510b1215b49f27db3c145555baa329d15de80976748b68648482cb8cf9e79cc3acefe4d8436c04e882934abc30ac5886d10a54b759f1b4407d1ea9d8cc1049e4f60c9dc96dbda9dbc581d31bb3dcfe32598bac97974d6c8625a2be3d48ef98edfbf0725cc18f21b50a67b0de8ff6544cd67ce0d43fcc1d248"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf470, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x7f, 0x100}, {0x80, 0xffffffff}]}, 0x18, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 10:50:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0xfffffffb, 0x1ff, 0xc23, 0x6b5, 0x30000, 0x200}) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000001c0)={0x5, 0x7fffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) write$P9_RREMOVE(r0, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) r3 = socket$inet(0x2, 0x6, 0xae82) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280), 0x10) r4 = accept(r1, 0x0, &(0x7f00000002c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000300)=0x2) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x72c0a) fgetxattr(r1, &(0x7f0000000340)=@known='system.sockprotoname\x00', &(0x7f0000000380)=""/29, 0x1d) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f00000003c0)={0x3, 0x3, 0xa}) 10:50:50 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0xfffffffb, 0x1ff, 0xc23, 0x6b5, 0x30000, 0x200}) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000001c0)={0x5, 0x7fffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) write$P9_RREMOVE(r0, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) r3 = socket$inet(0x2, 0x6, 0xae82) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280), 0x10) r4 = accept(r1, 0x0, &(0x7f00000002c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000300)=0x2) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x72c0a) fgetxattr(r1, &(0x7f0000000340)=@known='system.sockprotoname\x00', &(0x7f0000000380)=""/29, 0x1d) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f00000003c0)={0x3, 0x3, 0xa}) 10:50:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x81, 0xce, 0xfe, 0x7f, 0x0, 0x4, 0xa0301, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x400, 0x50}, 0xd02, 0x2010000, 0x1ff, 0x0, 0x101, 0x9d, 0x2, 0x0, 0xbd, 0x0, 0xa}, 0x0, 0x9, 0xffffffffffffffff, 0x7c35b9870854ea77) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf470, 0x6, @perf_config_ext={0x9, 0x4}, 0x40021, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be2f630}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000480)={0x100008100, &(0x7f0000000040), &(0x7f0000000100), 0x0, {0x3}, &(0x7f00000003c0)=""/147, 0x93, &(0x7f0000000240)=""/28, &(0x7f0000000300)=[r0, 0x0, r2], 0x3}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000500)={0x5, "82bd06"}, 0x6) 10:50:50 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901) r1 = syz_io_uring_setup(0x2e58, &(0x7f00000000c0)={0x0, 0x83e, 0x20, 0x1, 0x3ad}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x4002, 0x0) syz_io_uring_setup(0x9e4, &(0x7f00000001c0)={0x0, 0xea8f, 0x4, 0x1, 0x31c, 0x0, r2}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, 0x0) close_range(r1, r3, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001}) 10:50:50 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4f) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 10:50:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = syz_io_uring_complete(0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, 0x0) ioctl$FITHAW(r3, 0xc0045878) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x101, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) [ 140.281654] audit: type=1400 audit(1664535050.798:8): avc: denied { open } for pid=3986 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 140.283418] audit: type=1400 audit(1664535050.799:9): avc: denied { kernel } for pid=3986 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 140.300675] ------------[ cut here ]------------ [ 140.300708] [ 140.300714] ====================================================== [ 140.300720] WARNING: possible circular locking dependency detected [ 140.300727] 6.0.0-rc7-next-20220929 #1 Not tainted [ 140.300739] ------------------------------------------------------ [ 140.300745] syz-executor.4/3990 is trying to acquire lock: [ 140.300757] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 140.300827] [ 140.300827] but task is already holding lock: [ 140.300832] ffff88800d925c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 140.300883] [ 140.300883] which lock already depends on the new lock. [ 140.300883] [ 140.300889] [ 140.300889] the existing dependency chain (in reverse order) is: [ 140.300895] [ 140.300895] -> #3 (&ctx->lock){....}-{2:2}: [ 140.300922] _raw_spin_lock+0x2a/0x40 [ 140.300943] __perf_event_task_sched_out+0x53b/0x18d0 [ 140.300965] __schedule+0xedd/0x2470 [ 140.300992] schedule+0xda/0x1b0 [ 140.301019] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.301041] syscall_exit_to_user_mode+0x19/0x40 [ 140.301066] do_syscall_64+0x48/0x90 [ 140.301099] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.301124] [ 140.301124] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 140.301151] _raw_spin_lock_nested+0x30/0x40 [ 140.301172] raw_spin_rq_lock_nested+0x1e/0x30 [ 140.301196] task_fork_fair+0x63/0x4d0 [ 140.301228] sched_cgroup_fork+0x3d0/0x540 [ 140.301256] copy_process+0x4183/0x6e20 [ 140.301276] kernel_clone+0xe7/0x890 [ 140.301295] user_mode_thread+0xad/0xf0 [ 140.301315] rest_init+0x24/0x250 [ 140.301338] arch_call_rest_init+0xf/0x14 [ 140.301369] start_kernel+0x4c6/0x4eb [ 140.301397] secondary_startup_64_no_verify+0xe0/0xeb [ 140.301424] [ 140.301424] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 140.301451] _raw_spin_lock_irqsave+0x39/0x60 [ 140.301472] try_to_wake_up+0xab/0x1930 [ 140.301498] up+0x75/0xb0 [ 140.301525] __up_console_sem+0x6e/0x80 [ 140.301556] console_unlock+0x46a/0x590 [ 140.301587] vt_ioctl+0x2822/0x2ca0 [ 140.301609] tty_ioctl+0x785/0x16b0 [ 140.301629] __x64_sys_ioctl+0x19a/0x210 [ 140.301655] do_syscall_64+0x3b/0x90 [ 140.301687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.301712] [ 140.301712] -> #0 ((console_sem).lock){....}-{2:2}: [ 140.301739] __lock_acquire+0x2a02/0x5e70 [ 140.301772] lock_acquire+0x1a2/0x530 [ 140.301803] _raw_spin_lock_irqsave+0x39/0x60 [ 140.301824] down_trylock+0xe/0x70 [ 140.301853] __down_trylock_console_sem+0x3b/0xd0 [ 140.301885] vprintk_emit+0x16b/0x560 [ 140.301917] vprintk+0x84/0xa0 [ 140.301948] _printk+0xba/0xf1 [ 140.301969] report_bug.cold+0x72/0xab [ 140.302001] handle_bug+0x3c/0x70 [ 140.302033] exc_invalid_op+0x14/0x50 [ 140.302067] asm_exc_invalid_op+0x16/0x20 [ 140.302090] group_sched_out.part.0+0x2c7/0x460 [ 140.302125] ctx_sched_out+0x8f1/0xc10 [ 140.302157] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.302179] __schedule+0xedd/0x2470 [ 140.302206] schedule+0xda/0x1b0 [ 140.302232] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.302254] syscall_exit_to_user_mode+0x19/0x40 [ 140.302278] do_syscall_64+0x48/0x90 [ 140.302311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.302336] [ 140.302336] other info that might help us debug this: [ 140.302336] [ 140.302341] Chain exists of: [ 140.302341] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 140.302341] [ 140.302370] Possible unsafe locking scenario: [ 140.302370] [ 140.302374] CPU0 CPU1 [ 140.302379] ---- ---- [ 140.302383] lock(&ctx->lock); [ 140.302394] lock(&rq->__lock); [ 140.302406] lock(&ctx->lock); [ 140.302419] lock((console_sem).lock); [ 140.302430] [ 140.302430] *** DEADLOCK *** [ 140.302430] [ 140.302433] 2 locks held by syz-executor.4/3990: [ 140.302447] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 140.302505] #1: ffff88800d925c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 140.302557] [ 140.302557] stack backtrace: [ 140.302562] CPU: 0 PID: 3990 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 140.302586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 140.302601] Call Trace: [ 140.302607] [ 140.302614] dump_stack_lvl+0x8b/0xb3 [ 140.302650] check_noncircular+0x263/0x2e0 [ 140.302683] ? format_decode+0x26c/0xb50 [ 140.302714] ? print_circular_bug+0x450/0x450 [ 140.302748] ? enable_ptr_key_workfn+0x20/0x20 [ 140.302778] ? __lockdep_reset_lock+0x180/0x180 [ 140.302812] ? format_decode+0x26c/0xb50 [ 140.302846] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 140.302881] __lock_acquire+0x2a02/0x5e70 [ 140.302924] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 140.302968] lock_acquire+0x1a2/0x530 [ 140.303001] ? down_trylock+0xe/0x70 [ 140.303035] ? lock_release+0x750/0x750 [ 140.303072] ? find_held_lock+0x2c/0x110 [ 140.303105] ? vprintk+0x84/0xa0 [ 140.303140] _raw_spin_lock_irqsave+0x39/0x60 [ 140.303162] ? down_trylock+0xe/0x70 [ 140.303194] down_trylock+0xe/0x70 [ 140.303225] ? vprintk+0x84/0xa0 [ 140.303259] __down_trylock_console_sem+0x3b/0xd0 [ 140.303293] vprintk_emit+0x16b/0x560 [ 140.303330] vprintk+0x84/0xa0 [ 140.303365] _printk+0xba/0xf1 [ 140.303387] ? record_print_text.cold+0x16/0x16 [ 140.303415] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 140.303442] ? lock_downgrade+0x6d0/0x6d0 [ 140.303477] ? report_bug.cold+0x66/0xab [ 140.303513] ? group_sched_out.part.0+0x2c7/0x460 [ 140.303549] report_bug.cold+0x72/0xab [ 140.303586] handle_bug+0x3c/0x70 [ 140.303621] exc_invalid_op+0x14/0x50 [ 140.303656] asm_exc_invalid_op+0x16/0x20 [ 140.303681] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 140.303730] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 140.303753] RSP: 0018:ffff8880409e7c48 EFLAGS: 00010006 [ 140.303771] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.303785] RDX: ffff88801f530000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 140.303801] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 140.303815] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d925c00 [ 140.303830] R13: ffff88806ce3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 140.303851] ? group_sched_out.part.0+0x2c7/0x460 [ 140.303891] ? group_sched_out.part.0+0x2c7/0x460 [ 140.303931] ctx_sched_out+0x8f1/0xc10 [ 140.303969] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.303998] ? lock_is_held_type+0xd7/0x130 [ 140.304025] ? __perf_cgroup_move+0x160/0x160 [ 140.304046] ? set_next_entity+0x304/0x550 [ 140.304081] ? update_curr+0x267/0x740 [ 140.304118] ? lock_is_held_type+0xd7/0x130 [ 140.304145] __schedule+0xedd/0x2470 [ 140.304179] ? io_schedule_timeout+0x150/0x150 [ 140.304212] ? __x64_sys_futex_time32+0x480/0x480 [ 140.304240] schedule+0xda/0x1b0 [ 140.304269] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.304294] syscall_exit_to_user_mode+0x19/0x40 [ 140.304321] do_syscall_64+0x48/0x90 [ 140.304356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.304382] RIP: 0033:0x7ff680d82b19 [ 140.304398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.304419] RSP: 002b:00007ff67e2f8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.304441] RAX: 0000000000000001 RBX: 00007ff680e95f68 RCX: 00007ff680d82b19 [ 140.304456] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff680e95f6c [ 140.304470] RBP: 00007ff680e95f60 R08: 000000000000000e R09: 0000000000000000 [ 140.304484] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff680e95f6c [ 140.304499] R13: 00007ffde33b8a7f R14: 00007ff67e2f8300 R15: 0000000000022000 [ 140.304524] [ 140.412050] WARNING: CPU: 0 PID: 3990 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 140.413406] Modules linked in: [ 140.413882] CPU: 0 PID: 3990 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 140.415051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 140.416681] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 140.417485] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 140.420117] RSP: 0018:ffff8880409e7c48 EFLAGS: 00010006 [ 140.420893] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 140.421923] RDX: ffff88801f530000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 140.422958] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 140.424012] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d925c00 [ 140.425045] R13: ffff88806ce3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 140.426073] FS: 00007ff67e2f8700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 140.427234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.428088] CR2: 000055555705b708 CR3: 000000000ef38000 CR4: 0000000000350ef0 [ 140.429125] Call Trace: [ 140.429513] [ 140.429849] ctx_sched_out+0x8f1/0xc10 [ 140.430445] __perf_event_task_sched_out+0x6d0/0x18d0 [ 140.431212] ? lock_is_held_type+0xd7/0x130 [ 140.431864] ? __perf_cgroup_move+0x160/0x160 [ 140.432521] ? set_next_entity+0x304/0x550 [ 140.433161] ? update_curr+0x267/0x740 [ 140.433742] ? lock_is_held_type+0xd7/0x130 [ 140.434393] __schedule+0xedd/0x2470 [ 140.434957] ? io_schedule_timeout+0x150/0x150 [ 140.435633] ? __x64_sys_futex_time32+0x480/0x480 [ 140.436362] schedule+0xda/0x1b0 [ 140.436878] exit_to_user_mode_prepare+0x114/0x1a0 [ 140.437593] syscall_exit_to_user_mode+0x19/0x40 [ 140.438299] do_syscall_64+0x48/0x90 [ 140.438861] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.439616] RIP: 0033:0x7ff680d82b19 [ 140.440181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.442803] RSP: 002b:00007ff67e2f8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.443908] RAX: 0000000000000001 RBX: 00007ff680e95f68 RCX: 00007ff680d82b19 [ 140.444930] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff680e95f6c [ 140.445961] RBP: 00007ff680e95f60 R08: 000000000000000e R09: 0000000000000000 [ 140.446996] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff680e95f6c [ 140.448035] R13: 00007ffde33b8a7f R14: 00007ff67e2f8300 R15: 0000000000022000 [ 140.449076] [ 140.449424] irq event stamp: 598 [ 140.449918] hardirqs last enabled at (597): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 140.451258] hardirqs last disabled at (598): [] __schedule+0x1225/0x2470 [ 140.452483] softirqs last enabled at (144): [] __irq_exit_rcu+0x11b/0x180 [ 140.453715] softirqs last disabled at (135): [] __irq_exit_rcu+0x11b/0x180 [ 140.454947] ---[ end trace 0000000000000000 ]--- [ 140.474453] hrtimer: interrupt took 20488 ns 10:50:51 executing program 5: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) acct(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x98500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 10:50:51 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901) r1 = syz_io_uring_setup(0x2e58, &(0x7f00000000c0)={0x0, 0x83e, 0x20, 0x1, 0x3ad}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x4002, 0x0) syz_io_uring_setup(0x9e4, &(0x7f00000001c0)={0x0, 0xea8f, 0x4, 0x1, 0x31c, 0x0, r2}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, 0x0) close_range(r1, r3, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001}) 10:50:51 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0xfffffffb, 0x1ff, 0xc23, 0x6b5, 0x30000, 0x200}) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000001c0)={0x5, 0x7fffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) write$P9_RREMOVE(r0, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) r3 = socket$inet(0x2, 0x6, 0xae82) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280), 0x10) r4 = accept(r1, 0x0, &(0x7f00000002c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000300)=0x2) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x72c0a) fgetxattr(r1, &(0x7f0000000340)=@known='system.sockprotoname\x00', &(0x7f0000000380)=""/29, 0x1d) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f00000003c0)={0x3, 0x3, 0xa}) [ 140.584210] Process accounting resumed [ 140.599972] Process accounting resumed VM DIAGNOSIS: 10:50:51 Registers: info registers vcpu 0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff8880409e7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff67e2f8700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555705b708 CR3=000000000ef38000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff680e697c0 00007ff680e697c8 YMM02=0000000000000000 0000000000000000 00007ff680e697e0 00007ff680e697c0 YMM03=0000000000000000 0000000000000000 00007ff680e697c8 00007ff680e697c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=00000000000318ae RBX=ffff88806ce3f080 RCX=ffffc900063b1000 RDX=0000000000040000 RSI=ffffffff813bbb47 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888041417700 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c7e11 R14=ffff88806ce3f088 R15=0000000000000001 RIP=ffffffff813bbb49 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f62e7c56700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000080 CR3=000000003fadc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000