Warning: Permanently added '[localhost]:64935' (ECDSA) to the list of known hosts. 2022/09/30 11:55:25 fuzzer started 2022/09/30 11:55:25 dialing manager at localhost:40535 syzkaller login: [ 39.277428] cgroup: Unknown subsys name 'net' [ 39.369143] cgroup: Unknown subsys name 'rlimit' 2022/09/30 11:55:39 syscalls: 2215 2022/09/30 11:55:39 code coverage: enabled 2022/09/30 11:55:39 comparison tracing: enabled 2022/09/30 11:55:39 extra coverage: enabled 2022/09/30 11:55:39 setuid sandbox: enabled 2022/09/30 11:55:39 namespace sandbox: enabled 2022/09/30 11:55:39 Android sandbox: enabled 2022/09/30 11:55:39 fault injection: enabled 2022/09/30 11:55:39 leak checking: enabled 2022/09/30 11:55:39 net packet injection: enabled 2022/09/30 11:55:39 net device setup: enabled 2022/09/30 11:55:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 11:55:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 11:55:39 USB emulation: enabled 2022/09/30 11:55:39 hci packet injection: enabled 2022/09/30 11:55:39 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 11:55:39 802.15.4 emulation: enabled 2022/09/30 11:55:39 fetching corpus: 50, signal 26714/28491 (executing program) 2022/09/30 11:55:39 fetching corpus: 100, signal 37833/41165 (executing program) 2022/09/30 11:55:39 fetching corpus: 150, signal 48728/53420 (executing program) 2022/09/30 11:55:39 fetching corpus: 200, signal 53967/60061 (executing program) 2022/09/30 11:55:40 fetching corpus: 250, signal 57644/65074 (executing program) 2022/09/30 11:55:40 fetching corpus: 300, signal 62306/70983 (executing program) 2022/09/30 11:55:40 fetching corpus: 350, signal 68608/78308 (executing program) 2022/09/30 11:55:40 fetching corpus: 400, signal 72375/83170 (executing program) 2022/09/30 11:55:40 fetching corpus: 450, signal 77226/88986 (executing program) 2022/09/30 11:55:40 fetching corpus: 500, signal 80685/93466 (executing program) 2022/09/30 11:55:40 fetching corpus: 550, signal 83847/97534 (executing program) 2022/09/30 11:55:40 fetching corpus: 600, signal 86421/101087 (executing program) 2022/09/30 11:55:40 fetching corpus: 650, signal 89780/105292 (executing program) 2022/09/30 11:55:41 fetching corpus: 700, signal 91899/108348 (executing program) 2022/09/30 11:55:41 fetching corpus: 750, signal 94101/111441 (executing program) 2022/09/30 11:55:41 fetching corpus: 800, signal 97733/115709 (executing program) 2022/09/30 11:55:41 fetching corpus: 850, signal 99626/118462 (executing program) 2022/09/30 11:55:41 fetching corpus: 900, signal 101098/120853 (executing program) 2022/09/30 11:55:41 fetching corpus: 950, signal 103635/124017 (executing program) 2022/09/30 11:55:41 fetching corpus: 1000, signal 105854/126958 (executing program) 2022/09/30 11:55:41 fetching corpus: 1050, signal 107311/129181 (executing program) 2022/09/30 11:55:42 fetching corpus: 1100, signal 109416/131906 (executing program) 2022/09/30 11:55:42 fetching corpus: 1150, signal 110813/134052 (executing program) 2022/09/30 11:55:42 fetching corpus: 1200, signal 112363/136292 (executing program) 2022/09/30 11:55:42 fetching corpus: 1250, signal 114524/138986 (executing program) 2022/09/30 11:55:42 fetching corpus: 1300, signal 117526/142297 (executing program) 2022/09/30 11:55:42 fetching corpus: 1350, signal 118510/143985 (executing program) 2022/09/30 11:55:42 fetching corpus: 1400, signal 120014/146034 (executing program) 2022/09/30 11:55:42 fetching corpus: 1450, signal 121214/147843 (executing program) 2022/09/30 11:55:43 fetching corpus: 1500, signal 123221/150229 (executing program) 2022/09/30 11:55:43 fetching corpus: 1550, signal 124028/151730 (executing program) 2022/09/30 11:55:43 fetching corpus: 1600, signal 125758/153932 (executing program) 2022/09/30 11:55:43 fetching corpus: 1650, signal 126811/155580 (executing program) 2022/09/30 11:55:43 fetching corpus: 1700, signal 128306/157540 (executing program) 2022/09/30 11:55:43 fetching corpus: 1750, signal 129575/159232 (executing program) 2022/09/30 11:55:43 fetching corpus: 1800, signal 130802/160898 (executing program) 2022/09/30 11:55:43 fetching corpus: 1850, signal 132147/162618 (executing program) 2022/09/30 11:55:43 fetching corpus: 1900, signal 133657/164482 (executing program) 2022/09/30 11:55:44 fetching corpus: 1950, signal 134867/166131 (executing program) 2022/09/30 11:55:44 fetching corpus: 2000, signal 136201/167835 (executing program) 2022/09/30 11:55:44 fetching corpus: 2050, signal 137995/169783 (executing program) 2022/09/30 11:55:44 fetching corpus: 2100, signal 139086/171234 (executing program) 2022/09/30 11:55:44 fetching corpus: 2150, signal 139896/172503 (executing program) 2022/09/30 11:55:44 fetching corpus: 2200, signal 141431/174197 (executing program) 2022/09/30 11:55:44 fetching corpus: 2250, signal 142346/175504 (executing program) 2022/09/30 11:55:44 fetching corpus: 2300, signal 143132/176744 (executing program) 2022/09/30 11:55:45 fetching corpus: 2350, signal 144297/178136 (executing program) 2022/09/30 11:55:45 fetching corpus: 2400, signal 145939/179823 (executing program) 2022/09/30 11:55:45 fetching corpus: 2450, signal 147772/181588 (executing program) 2022/09/30 11:55:45 fetching corpus: 2500, signal 148822/182917 (executing program) 2022/09/30 11:55:45 fetching corpus: 2550, signal 149729/184090 (executing program) 2022/09/30 11:55:45 fetching corpus: 2600, signal 150541/185125 (executing program) 2022/09/30 11:55:45 fetching corpus: 2650, signal 151405/186264 (executing program) 2022/09/30 11:55:45 fetching corpus: 2700, signal 152760/187677 (executing program) 2022/09/30 11:55:45 fetching corpus: 2750, signal 153568/188757 (executing program) 2022/09/30 11:55:46 fetching corpus: 2800, signal 154400/189845 (executing program) 2022/09/30 11:55:46 fetching corpus: 2850, signal 154845/190722 (executing program) 2022/09/30 11:55:46 fetching corpus: 2900, signal 156879/192413 (executing program) 2022/09/30 11:55:46 fetching corpus: 2950, signal 158452/194021 (executing program) 2022/09/30 11:55:46 fetching corpus: 3000, signal 159127/194906 (executing program) 2022/09/30 11:55:46 fetching corpus: 3050, signal 159476/195634 (executing program) 2022/09/30 11:55:46 fetching corpus: 3100, signal 160924/196895 (executing program) 2022/09/30 11:55:46 fetching corpus: 3150, signal 161781/197861 (executing program) 2022/09/30 11:55:47 fetching corpus: 3200, signal 162555/198741 (executing program) 2022/09/30 11:55:47 fetching corpus: 3250, signal 163402/199657 (executing program) 2022/09/30 11:55:47 fetching corpus: 3300, signal 164335/200617 (executing program) 2022/09/30 11:55:47 fetching corpus: 3350, signal 165180/201520 (executing program) 2022/09/30 11:55:47 fetching corpus: 3400, signal 166086/202463 (executing program) 2022/09/30 11:55:47 fetching corpus: 3450, signal 166807/203309 (executing program) 2022/09/30 11:55:47 fetching corpus: 3500, signal 167514/204134 (executing program) 2022/09/30 11:55:47 fetching corpus: 3550, signal 168385/204984 (executing program) 2022/09/30 11:55:47 fetching corpus: 3600, signal 169210/205799 (executing program) 2022/09/30 11:55:48 fetching corpus: 3650, signal 170456/206952 (executing program) 2022/09/30 11:55:48 fetching corpus: 3700, signal 170909/207620 (executing program) 2022/09/30 11:55:48 fetching corpus: 3750, signal 173502/209152 (executing program) 2022/09/30 11:55:48 fetching corpus: 3800, signal 174512/209965 (executing program) 2022/09/30 11:55:48 fetching corpus: 3850, signal 175840/210874 (executing program) 2022/09/30 11:55:48 fetching corpus: 3900, signal 176621/211590 (executing program) 2022/09/30 11:55:48 fetching corpus: 3950, signal 177608/212345 (executing program) 2022/09/30 11:55:49 fetching corpus: 4000, signal 178739/213091 (executing program) 2022/09/30 11:55:49 fetching corpus: 4050, signal 179462/213715 (executing program) 2022/09/30 11:55:49 fetching corpus: 4100, signal 180238/214352 (executing program) 2022/09/30 11:55:49 fetching corpus: 4150, signal 181114/215051 (executing program) 2022/09/30 11:55:49 fetching corpus: 4200, signal 181634/215594 (executing program) 2022/09/30 11:55:49 fetching corpus: 4250, signal 182234/216132 (executing program) 2022/09/30 11:55:49 fetching corpus: 4300, signal 182583/216640 (executing program) 2022/09/30 11:55:49 fetching corpus: 4350, signal 183382/217172 (executing program) 2022/09/30 11:55:50 fetching corpus: 4400, signal 184127/217721 (executing program) 2022/09/30 11:55:50 fetching corpus: 4450, signal 184881/218255 (executing program) 2022/09/30 11:55:50 fetching corpus: 4500, signal 185507/218771 (executing program) 2022/09/30 11:55:50 fetching corpus: 4550, signal 186088/219264 (executing program) 2022/09/30 11:55:50 fetching corpus: 4600, signal 186969/219880 (executing program) 2022/09/30 11:55:50 fetching corpus: 4650, signal 187319/220316 (executing program) 2022/09/30 11:55:50 fetching corpus: 4700, signal 187835/220730 (executing program) 2022/09/30 11:55:50 fetching corpus: 4750, signal 188520/221188 (executing program) 2022/09/30 11:55:51 fetching corpus: 4800, signal 189269/221647 (executing program) 2022/09/30 11:55:51 fetching corpus: 4850, signal 190038/222094 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/222520 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/222846 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/223149 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/223493 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/223809 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/224145 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/224454 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/224788 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/225117 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/225459 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/225779 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/226082 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/226387 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/226703 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/226878 (executing program) 2022/09/30 11:55:51 fetching corpus: 4872, signal 190746/226878 (executing program) 2022/09/30 11:55:53 starting 8 fuzzer processes 11:55:53 executing program 0: sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x8001) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4200, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x14c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc3a6}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9db}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4048835}, 0x840) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xcc, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x80}}]}, 0xcc}}, 0x8110) r3 = openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x18d080, 0x4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000780)={0x348, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x338, 0x15}}}}, [@NL80211_ATTR_IE={0xe5, 0x2a, [@perr={0x84, 0xaf, {0x0, 0xb, [@not_ext={{}, @broadcast, 0xffffffff}, @not_ext={{}, @broadcast, 0x4, "", 0xe}, @not_ext={{}, @broadcast, 0x93, "", 0x1f}, @ext={{}, @broadcast, 0xfff, @device_b, 0x5}, @ext={{}, @broadcast, 0x4, @device_a, 0x5}, @ext={{}, @device_b, 0x4, @broadcast, 0xf}, @ext={{}, @device_b, 0x9, @device_a, 0x36}, @ext={{}, @device_a, 0xfff, @broadcast, 0x13}, @not_ext={{}, @broadcast, 0x100, "", 0x28}, @not_ext={{}, @device_a, 0x10000, "", 0x35}, @not_ext={{}, @device_a, 0x5, "", 0x3e55}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0xb6, 0x2a}}, @ibss={0x6, 0x2, 0x2}, @chsw_timing={0x68, 0x4, {0x5, 0x1}}, @ht={0x2d, 0x1a, {0x800, 0x3, 0x2, 0x0, {0x3f, 0x7d, 0x0, 0x192, 0x0, 0x0, 0x1}, 0x8, 0xffffffc0, 0x6}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_IE={0xec, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @dsss={0x3, 0x1, 0x78}, @erp={0x2a, 0x1, {0x1, 0x1}}, @perr={0x84, 0xa3, {0x9, 0xb, [@not_ext={{}, @broadcast, 0xfff, "", 0x2a}, @not_ext={{}, @device_a, 0x5, "", 0x29}, @not_ext={{}, @device_b, 0x10000, "", 0x8}, @ext={{}, @broadcast, 0xd130, @device_b, 0x3c}, @not_ext={{}, @device_b, 0x5, "", 0x26}, @ext={{}, @device_b, 0x4, @device_b, 0x30}, @ext={{}, @device_a, 0x7, @device_b, 0x1c}, @not_ext={{}, @device_a, 0x6, "", 0xa}, @not_ext={{}, @device_b, 0x80000001, "", 0x3a}, @not_ext={{}, @device_b, 0x0, "", 0xa}, @not_ext={{}, @device_b, 0x7f, "", 0x2a}]}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x3f}}, @channel_switch={0x25, 0x3, {0x0, 0x3, 0xd1}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2a, 0xab, @device_b, 0x883, "", 0x3, 0x9, @broadcast, 0x7fff}}, @cf={0x4, 0x6, {0x7, 0x4, 0x3, 0x1f00}}]}, @NL80211_ATTR_IE={0x142, 0x2a, [@ssid={0x0, 0x4, @random="1502298c"}, @link_id={0x65, 0x12, {@random="89d06a23cadb", @device_a, @broadcast}}, @random_vendor={0xdd, 0xfa, "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"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x1e, 0x40}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @channel_switch={0x25, 0x3, {0x0, 0x9d, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x87, 0x68, 0x1f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x20}]}, 0x348}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r4 = timerfd_create(0x1, 0x0) r5 = dup2(r3, r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r3) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6d}, @void, @val={0xc, 0x99, {0x0, 0x1c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000e80)={r1, 0x7, 0x8, 0x80}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000f80)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xdc, 0x0, 0x700, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44000}, 0x4041) openat(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x2000, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001180)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), r3) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 11:55:53 executing program 4: r0 = io_uring_setup(0x77bb, &(0x7f0000000000)={0x0, 0xa07e, 0x1, 0x2, 0x1d0}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x9, 0x0, 0x0, 0xba, 0x2, [{0x100000001, 0x7, 0x9}, {0x8, 0x3f, 0x100000000, '\x00', 0x2000}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000001c0)={0x1, @tick=0x7, 0xe1, {0x80}, 0x3, 0x1, 0x81}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000200)={0x1ff, 0x9, 0x6, 0x0, 0x7, 0x8}) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x483) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x1, {0x0, r2}, 0x7, 0x2, 0x1, {0x0, 0x0, r0}}, 0x3) getsockopt(r2, 0x6, 0x930b, &(0x7f0000000300)=""/177, &(0x7f00000003c0)=0xb1) r3 = fspick(r1, &(0x7f0000000400)='./file0\x00', 0x1) r4 = pidfd_getfd(r2, r3, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r4, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{}, {r5, r6/1000+60000}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000540)={0x1, 'xfrm0\x00', {}, 0x400}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r3, &(0x7f0000000580)={r4, r7, 0x4}) open(&(0x7f00000005c0)='./file0/file0\x00', 0x1, 0x20) setsockopt(0xffffffffffffffff, 0x800, 0x2, &(0x7f0000000600)="68c7b8f42112a9f1ef577e367c8a677569c46acae293cf0bc3a66352010c1430d6391dcb2d2d7e2643873e3e23b77c9ccdc6e1921baa77e731ff1c5991130aa6ff7eff33afee243e2f63b6ffe611b6e89f1751744b77d1691f513aa023540fc6ec1c75b1389193992a36bf2842163d98c47de2e7713049aa36bb14f4c69feff1ac0a3399d5683d68ec", 0x89) 11:55:53 executing program 3: flock(0xffffffffffffffff, 0x10) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=""/101) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x7, 0x1, {0x1, ':'}}, 0xa) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x810) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x800, 0x71) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000800}, 0x40040) write$P9_RXATTRWALK(r0, &(0x7f00000004c0)={0xf, 0x1f, 0x2, 0x4}, 0xf) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/nf_conntrack\x00') sendfile(r1, r2, &(0x7f0000000580)=0x1, 0x1) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa00, 0x5f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000020}, 0x4001c94) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000800), 0x103800, 0x0) r5 = syz_mount_image$nfs4(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x4, 0x6, &(0x7f0000001c80)=[{&(0x7f00000008c0)="c8e1070878b9e00f1e142e14af8e7eaa91d8a71da845d137902c64c0d58c86887b7ba5fde4953cc3fa048977a9de9a6928c031237438a49cc52d691fbeabc1e4886cb526b178fa34b19ec6243b1d871355c8ed70a2c30f972d2d9a9b05835299b305181ebdc5e5f915968fc2b93b14ec87bda827405f0b8cba9da664dfe55f28edf8bcd0f377e5bf369cc32172e77c97404d3233e95bf8824c3edd717e04ea25c4490a5373116dbeb872074a7689ea1a24a56d7cbca28d8ac210a35968d1b698fc80c95a1dfa8c8ef10a629c9f23fb", 0xcf, 0x200}, {&(0x7f00000009c0)="3eecdae0ea03680080af28009075b4383b5a48927b4b875dd4f925db6ebf5f6025b0da5fc7b629263df0e228c40685001d468d76243a4aad3aae9ef58a90d59e2127cda5ed6e6458ba73eada86e4c8950e4f34fdd8fe53734fccbd92b520a84a251a79e30ef111ca94959d72cae160e208309a6e6ebfbefddfea8976352adc317c5ba3c1b7f77d80fbf4d73945246ba4b9e27e3a78e49486b8e4991dd4653dee27001aa9d4771c62dea560f850bf51854cec1ca8b3270320eed513c638b499e9eaeb69700e0c0e85f3811dab353e", 0xce, 0x7}, {&(0x7f0000000ac0)="25669d0f483a45fee535b978fc8d31ba2d4068cb998a4953903ad2a99e00", 0x1e, 0x7ff}, {&(0x7f0000000b00)="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", 0x1000, 0x6}, {&(0x7f0000001b00)="a340d1669129d10b118afbb503e345323f1e84c2c0e59fffe6a087813d1c99a6a35cd26e028605ec9a2a7c4ea31e4fcce92f2e6e6744fcdf77e8cb71d3bcc24dac703dd7ad185b058d6d45123248d4a9e64651f5998b2ce64c2a28b3971c0153e6b342f0c9154eecd8", 0x69, 0x8}, {&(0x7f0000001b80)="104a00e5cbd11cdb9b65d754d00f5098dc95804724a3d4b2e1a12dbb63e5e493b7f43cfcb36bbf862e9c0e038640165a0847bc2cea7d01789c999f5ca3353910f30fe0183039f34504f32baf5e4e918be8a9ebf79a368ea16af2daf87938c934f740dcf5407b6cf26d547f063aef77c0845878e456a56545e4a2a1068d74ffb2359786dcf296fcfd17ceb6a7fb1baf32d0f493b2b7c5b182e3ef3f732f1967e5a6433a416b355ede14a3836c973ffe095c91094ccb93747d72b774434604fb27043e5ad9839a9b8f07d32e1982e62a2e4477f4a1ca2e", 0xd6, 0x2}], 0x1044002, &(0x7f0000001d40)={[{'\x00'}, {'pci\x00'}, {'syz0\x00'}, {'syz0\x00'}, {'\\'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '%'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x33, 0x63, 0x37, 0x64, 0x65, 0x31], 0x2d, [0x62, 0x38, 0x0, 0x31], 0x2d, [0x65, 0x39, 0x31, 0x30], 0x2d, [0x32, 0x65, 0x34, 0x36], 0x2d, [0x9, 0x35, 0x31, 0x36, 0x65, 0x64, 0x62, 0x37]}}}, {@uid_lt={'uid<', 0xee00}}]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ppoll(&(0x7f0000001e40)=[{r2, 0x200}, {r3, 0x40}, {r2, 0x244b}, {r2, 0x428}, {r2, 0x208}, {r4, 0x4088}, {r2}, {r5, 0x20}, {r2, 0xa040}, {r6, 0xc040}], 0xa, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8) r7 = syz_mount_image$vfat(&(0x7f0000001f40), &(0x7f0000001f80)='./file0\x00', 0x2, 0x5, &(0x7f0000002240)=[{&(0x7f0000001fc0)="89fdc56ab06efa6c8b1dd506504f531b135595f77c080860337cd8c8529a77857a0eb5236612cc9378ea674a5bebd9e0d3ddfd15a617a614a78f0397ba258460b241e8dd49c8ee39633645c155899d808a522400f1ae01923e7b65c2c48c53c3c1ca68fb2ab46f72c0e405a14d01c4e55fc719e5ce626637", 0x78, 0x10001}, {&(0x7f0000002040)="e72330ecdc193be0c909f9010237cabacb947be20b74d8e0df25576db9198d69e7bbd029ade60a49b13e0066248e5b2e99d7a1290985ea5555d9eb0401e57425b6cc1257bcd0158f67495e0456e0561f24231328cf310186a09474c6e17dd001096e477007997e2c06bcbe12c39816f2c26165f1daaf62ae844525c6ef57f5bcd2d6c035ce06c73e205fa04e148d40ade7dbda0d34db91ab", 0x98, 0x3}, {&(0x7f0000002100)="af87d207aff04c4f642ea4dc06ac73fa20159ebcf6952c4f79a218acc14f8c", 0x1f, 0x5}, {&(0x7f0000002140)="748ea410297e06a185af190b675c22b171c6dc2a681052afb653169b2da58815c5e4c362712dcc467f5d8c4a07ff791a0e0a0e2211c20dc790a603fd85641a0f4d33edbb31788a59f99709e8c2a60cf3f77bd8bbd740a0e8025c086e931ac9dd2ceeeabcf06fba6766950a8c9fc356f614a03adbb43fdf80b3399a780262b390ca1be25565b85406f6f7e473017b7130b8b58bd17410991ba5ec656c6a20847a6efaccd5c691606acd631334997cd1d81b11ac395d", 0xb5, 0x5a0}, {&(0x7f0000002200)="7ee173b1b1df5b13a0dd7f206437b898d024a3dca4e4d88b65b8457153bc2b04d4cb04659af88fcb12b53f481156389ba0a85359eeaae1982a0938", 0x3b, 0x9}], 0x0, &(0x7f00000022c0)={[{@shortname_lower}, {@fat=@flush}, {@shortname_winnt}, {@uni_xlate}, {@numtail}, {@shortname_win95}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) r8 = openat(0xffffffffffffff9c, &(0x7f00000023c0)='./file1\x00', 0x4a000, 0x0) dup3(r7, r8, 0x80000) 11:55:53 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0xc040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x402, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x600080}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x11) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x284000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc091}, 0x4000000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x3, 0x7, 0x101, 0x0, 0x0, {0xb, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20014) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040041}, 0x81) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r3) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048044}, 0x61681b71c6766a17) 11:55:53 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getspdinfo={0x14, 0x25, 0x20, 0x70bd27, 0x25dfdbfd, 0x0, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xff, 0xfe, 0xf, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0x5, 0x3d}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x900, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x50}}, 0xc880) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@empty, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5, 0x0, 0x1, 0x400, 0x1, 0x40c40023, r2}) r3 = openat$incfs(r1, &(0x7f0000000400)='.pending_reads\x00', 0x140, 0x4) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000540)={@loopback, r2}, 0x14) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48024}, 0x10) getresuid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20001840}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)=@delpolicy={0x168, 0x14, 0x100, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4e20, 0x3, 0x4e20, 0xc91, 0xa, 0x20, 0x20, 0x32, r2, r4}, 0x6e6bb3, 0x2}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @replay_thresh={0x8, 0xb, 0x8}, @algo_comp={0xf9, 0x3, {{'deflate\x00'}, 0x588, "78f08a1ecd51b578beec360e88753dcdc05e2ce7923b6edef2616dcf625b22ff013d53c1889d477787d77f835bc02c6744c162665ca8f91387df01252a3ec29621468df1c0f20610114f029ee9a68d4ace334d7f21fa1adb77f5fefd0a48a35a076d0ecbe3f10bb8e4f611eb26194aa96879efc1e8395f24607eab719305d32181169da81df9b4acd3ae0c94982d721109923f82c2a4ba8dc7a65f56cf7c1b38e03b3cb045002692d771a514bc5019cd7f"}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40001}, 0x4004000) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000980)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r2}, 0x14) dup(r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f00000009c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000a00)=0x28) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x40c, 0x13, 0xa32, 0x70bd27, 0x25dfdbff, {0x25, 0x40, 0x6, 0x81, {0x4e24, 0x4e22, [0x7fffffff, 0x3, 0x80, 0x1], [0x5, 0x7fff, 0x8, 0x8], r2, [0x1, 0x9]}, 0x7, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "a64890b0f68597da62e69e98da4f0ca4bae934b8a03e0ec38f673d0e7895b9852927b0a2000b2431dbfb571e528b50b295012b28aa5e862b5743039f1ed5110cb38a8ab34f38b17ca80856f059bf65f8423e528896751623ca7e77010e14ea3baf574b8421929972d5fc82a47bccacf3d050c3f4b8d4bb314f7485662bb9fd9a1fe72c25dec7149634b9fd3cf99fa19d43992029118c8de942e25a"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "bab05eea02ce321ec9f0d5af28a51c4cb96cf6dd1e1e4b3ef603edebb6a4225f07c5cbdc91d3ca7ca292f046ee27aee1f0e12b68fe73708b1d3c35cbbcd8ff0c9cafe5ca8158c0d326afa0d301ef8197a0cdf5c3b1ce9fc26c37906005ead00a596f41042f1a2c"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "2a4e28980983b60796e7dd01d04426251d3ff2390b2fd37cb603c28d7285b1d29d2693f50ba1adb8f01b42c6227169fcf4caa257ea6587cfbe04d7c9d709723f5727aa5ba78468fc0c5f893da083626bc9f737c500f642233dbc82214df31c47f42577609d4caab46a0a17eab8d3be494badc8aeb9a33cd6ee3b3032c2fc29b41c12d1436c97e454fff948f7094b9d6a47b21adf52c432d4f12302a5907f32bc34acb4785349008c5e04e3395e0a68faa43956e8e2a67bedaed17f41c9544deac9c6377b4661e71852d27c22a5e4a4ef250c2ea551d0d0a32694acca007c4114dd3a4857c012725bf321dffdb07979923cf13d597b"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "592df7877b8ff9fd455ea4c5e85c083feb3cdaa3df4bfc62034b9038395ba59c9d8fbf5bc704d25c9c95ad9431e10d51063e7473f5167c6aec7045e775fcd8f713fac11778a3e6dd3c6105f7d4612c778d2835127adbfe703a0c9e0affd66e4627d67bd26f0f83e06b7da13550e7cd24c02fc689d5cc1e4d28029d57cfe645056f080b5f0efce1aef4d66401c201467e34d1e0d23ac0d09c5cf7bcd095d0a8029ee8620a026289f16c67e93a49f8bba179a79f931cf7e304fffc75dc99fe340166ded9d614ed748a19dd9a7b361ffd"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "84e9ad63a12428fbaf868c7a5e9e84468d69a54ece635c5e8d687607e221fb8ce545f4f9b6ab15418d12ead0d260a21eae89aaaa4f5947c20a02d6d24719ad2b9eee00c3113a3699b3d9aa"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "2dec432eb48fabaae7c2d8d35b7c33c6116e0c815f2fecf1b53401a712756376ad1d38e233f6b614be442fa45bc70249ad3f4d7d65351200f5be1482492b3dc8039779bdc2a5a0e7b36f166cfca0f0af02bceb9b501dec54aa5a9645e19926fb601358c9af5647eb290c28e0720753d99e38985a5e34c0c6d810563d431f2a626a2c44e15fb8dcf55ae5a3224bce"}]}, 0x40c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008044) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008014}, 0x850) 11:55:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x24000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r8, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x9000}, 0x20020814) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r7) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x400000, 0x0) sendmsg$AUDIT_USER_AVC(r10, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0x100, 0x453, 0x300, 0x70bd26, 0x25dfdbff, "813759ee1355d1450965c7413dd904d66d79a9f5a5c616bc8b5ade157c9d8e219efd2b16171ae9787b79db1bc43c961af8c989a828d3f085684013ee4d643f8e9e0c205bc433d7d5b7a0ad185f7e7d4c3731e1bf42dfab4293431af42950597a36772221c3b7580924fba8239c0e8f46bdf23c9e02e693164b50689aae618719bcf5059c02b96af59cb6c2236c545d8143c098e5566a5cf60362dd87ec5342b08e012135881b2272ec4a9cf9a0eac5a8a0024220b1d02476ed04b74c17fd3ec51e8132bf6c8f071a197ba5373cbf4f79d0c58a52d71981e4cfb1523ae62741fbc0ec0fef569770633d4ea90930826eac", [""]}, 0x100}, 0x1, 0x0, 0x0, 0x20004060}, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x40c, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x24048000) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40895) 11:55:53 executing program 2: keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/57, 0x39) keyctl$invalidate(0x15, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r0, &(0x7f00000000c0)=""/234, 0xea) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)=' \x00') r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$describe(0x6, r1, &(0x7f00000002c0)=""/241, 0xf1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "c70ac37b2974267ddfe05969c2457e60fe3415e9dda11af55c21b61dee9debc6b16a88d5328ed83c11a77d0bc103f55b5610067ca26d3af2d37de1d6ee24f9b3", 0x11}, 0x48, r1) keyctl$unlink(0x9, r2, r3) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r4, r0, r5, 0x0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "a1e0083d8828effb63f14da425b4f5be49f5ad6b5204c9a3b650d5db94a45b67b5e0172bd194010580d6b30d8bce5c035816078259566b66b1497332bab7e29b", 0x14}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000740)={r5, 0x65, 0x34}, &(0x7f0000000780)={'enc=', 'pkcs1', ' hash=', {'sha256-ce\x00'}}, &(0x7f0000000800)="879987161713c2e32ef41d19b53e4131db2e57b4e6cb1626039415971edcddf84331a9332d4f78ef2cce15e64c7c474f17ed970db795d6617e1bde63886a7a38b4118a3a04be72721189b740bbf930eadd42d821e39d6c79acc3dc648147c3d5e8c898d254", &(0x7f0000000880)=""/52) r6 = add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc1}, &(0x7f0000000940)={0x0, "e1b6a8dafa8fe28e539fda7d4b02a67947bc92a08b204ec17c95a1018ef5333b2e5cbda85cb278d121b8d4d8c780093134433d4f5a639a38d79fbe5175f88b36", 0x1a}, 0x48, r4) keyctl$describe(0x6, r6, &(0x7f00000009c0)=""/83, 0x53) keyctl$link(0x8, 0x0, r5) request_key(&(0x7f0000000a40)='blacklist\x00', &(0x7f0000000a80)={'syz', 0x2}, &(0x7f0000000ac0)='sha256-ce\x00', r0) 11:55:53 executing program 7: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x0, 0xb6, 0x5, 0x400, 0x80000001, 0xa110}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x7f, 0x9, 0x6}) capset(&(0x7f0000000100)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000140)={0x2af, 0x999, 0x18, 0x8, 0x40, 0x2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) migrate_pages(r0, 0x76a3, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x10040000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000000240), 0x6e, &(0x7f0000003600)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/172, 0xac}, {&(0x7f0000001380)=""/247, 0xf7}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/231, 0xe7}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/48, 0x30}, {&(0x7f00000035c0)=""/50, 0x32}], 0x8, &(0x7f0000003680)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002120) capset(&(0x7f0000003780)={0x20080522, r1}, &(0x7f00000037c0)={0xef, 0x93d, 0x7, 0x5, 0x5, 0x3}) capset(&(0x7f0000003800)={0x399f1316, r0}, &(0x7f0000003840)={0x3, 0x40, 0x5, 0x5, 0x18000000, 0x7a}) capset(&(0x7f0000003880)={0x20071026, r2}, &(0x7f00000038c0)={0x0, 0x9, 0x1, 0x7fffffff, 0x4, 0x2}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000003a00)=0xe8) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000003a40)={@multicast1, @remote, r5}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000003a80)={0x0, 0x0}) capset(&(0x7f0000003b00)={0x20080522, r6}, &(0x7f0000003b40)={0xb8, 0x3112, 0xffffffff, 0x1, 0x80000000, 0x400}) fsync(r4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r7 = openat$cgroup_pressure(r4, &(0x7f0000003b80)='cpu.pressure\x00', 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000003bc0)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000003c00), r4) epoll_create(0x2) capset(&(0x7f0000003c40)={0x19980330, r0}, &(0x7f0000003c80)={0x1ff, 0x9, 0x759ae278, 0xfffffffa, 0x8, 0x7fff}) [ 66.498219] audit: type=1400 audit(1664538953.352:6): avc: denied { execmem } for pid=283 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 67.759091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.760507] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.762390] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.763782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.768904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.777626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.779449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.780464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.783260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.784628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.787382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.789187] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.790472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.792742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.794420] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.796355] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.797524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.798876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.800728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.804538] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.805714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.821467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.822928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.824255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.825445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.826568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.830827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.832320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.833677] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.834911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.836285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.838174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.839443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.840629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.841871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.851008] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.855802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.857920] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.858076] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.869924] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.870893] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.874078] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.885612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.893822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.895287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.897833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.899464] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.900673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.905519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.907116] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.907780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.914261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.917617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.919592] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.920834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.928656] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.876548] Bluetooth: hci1: command 0x0409 tx timeout [ 69.876560] Bluetooth: hci6: command 0x0409 tx timeout [ 69.940030] Bluetooth: hci7: command 0x0409 tx timeout [ 69.940102] Bluetooth: hci3: command 0x0409 tx timeout [ 69.940743] Bluetooth: hci0: command 0x0409 tx timeout [ 69.941486] Bluetooth: hci2: command 0x0409 tx timeout [ 69.942045] Bluetooth: hci4: command 0x0409 tx timeout [ 69.942697] Bluetooth: hci5: command 0x0409 tx timeout [ 71.924064] Bluetooth: hci6: command 0x041b tx timeout [ 71.924535] Bluetooth: hci1: command 0x041b tx timeout [ 71.988112] Bluetooth: hci4: command 0x041b tx timeout [ 71.988138] Bluetooth: hci5: command 0x041b tx timeout [ 71.988572] Bluetooth: hci2: command 0x041b tx timeout [ 71.989048] Bluetooth: hci7: command 0x041b tx timeout [ 71.989420] Bluetooth: hci0: command 0x041b tx timeout [ 71.989800] Bluetooth: hci3: command 0x041b tx timeout [ 73.972045] Bluetooth: hci6: command 0x040f tx timeout [ 73.973407] Bluetooth: hci1: command 0x040f tx timeout [ 74.036042] Bluetooth: hci3: command 0x040f tx timeout [ 74.037159] Bluetooth: hci0: command 0x040f tx timeout [ 74.037914] Bluetooth: hci7: command 0x040f tx timeout [ 74.038732] Bluetooth: hci2: command 0x040f tx timeout [ 74.039514] Bluetooth: hci5: command 0x040f tx timeout [ 74.040302] Bluetooth: hci4: command 0x040f tx timeout [ 76.020022] Bluetooth: hci1: command 0x0419 tx timeout [ 76.020484] Bluetooth: hci6: command 0x0419 tx timeout [ 76.084044] Bluetooth: hci4: command 0x0419 tx timeout [ 76.084492] Bluetooth: hci5: command 0x0419 tx timeout [ 76.084922] Bluetooth: hci2: command 0x0419 tx timeout [ 76.085345] Bluetooth: hci7: command 0x0419 tx timeout [ 76.085721] Bluetooth: hci0: command 0x0419 tx timeout [ 76.086127] Bluetooth: hci3: command 0x0419 tx timeout [ 124.276773] loop3: detected capacity change from 0 to 8 [ 124.299298] loop3: detected capacity change from 0 to 256 [ 124.339751] loop3: detected capacity change from 0 to 8 [ 124.349952] loop3: detected capacity change from 0 to 256 11:56:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)={[{@journal_path={'journal_path', 0x2c}}]}) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r0, 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0xffff, 0x2, &(0x7f00000005c0)=[{&(0x7f00000004c0)="2610db74a04b1963885e8d104959f5d5334ef4739d34222d476cf2b178223d71fcc6bfc790286aecf21556457673a71363b7d89ac8a14a7b21e50c5df91cdd37ec4bf5bddb14899de580ffec3331f6992abc4aaaaf9439d95a7a9b69f52360093316714f380a5ba8cfe074a5", 0x6c, 0x101}, {&(0x7f0000000540)="6cf2e890b1f4cca00f36580102ad517191d9751dc7e1f1c788ac0f1f4a4128c08b3cf77e8a8cd2c7ef7589ec8d0bfc132c15bbe973ca660a632814b88e516c986ed56b702a73", 0x46, 0xfff}], 0x800040, &(0x7f0000000600)={[{@fat=@dmask={'dmask', 0x3d, 0x6}}, {@fat=@errors_continue}, {@dots}, {@dots}], [{@obj_user={'obj_user', 0x3d, 'data_err=abort'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'unconfined_u'}}, {@seclabel}, {@subj_type}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x1c}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xa2b, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="2c6e85c9cb6f6a694f7fb4fb0e2b27607387ca78c568d5843f7d0241a4651301b35ed0c519c89b0273320b18062d8fdf07a3ee578a6c987e95cb7512d0e55fb8f9e74d2cf8534fd9f22d334b7af8364bce04c32ab8e365c2eb39c425c299e7d77f302148c16836c88b9ce45df8140236ed778f7569e5b40b2602e82f6bbbd7699566e5fa36d651a5fa0fbf7148e3b648b658c740351fd45915acbca53040fbfac0d32a9d73c1d686a8f43a63a8f4", 0xae, 0xfffffffffffffffb}, {&(0x7f0000000200)="184d673f6a18571bc6f788b9844ca6aec9880be3c812fbc57a517bb3439afae0da28067831703a3dec0f0afe65033d95282a0c222ebd398ab78f4ef483e1f050c705ec70598d23bed2b8414ee8bde1c108851a2ecfdc7f917e28dcd1f69b8eb033cdda7c4bfb7b6bb772677201e587d077f796018ac9d24b6910861878df124db55634ebbc64119d3778a1aeafe14e06445455d56c5d142dedcd4c13b12b58e63d0bc961e89bb11002c3ea925ab93f581d41772b1944d8fb3360d9e2e3b213dc4b8b2e44f1ea53eff9763868e8bf2d1e", 0xd0, 0x3}], 0x40068, &(0x7f0000000300)={[{@nolazytime}, {}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@block_validity}, {@data_journal}, {@max_batch_time={'max_batch_time', 0x3d, 0x68}}, {@dioread_nolock}, {@data_err_abort}, {@prjquota}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@uid_gt={'uid>', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, ']'}}, {@fowner_gt={'fowner>', r1}}, {@subj_user={'subj_user', 0x3d, '^\x11\x9b$:)$('}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@audit}]}) [ 124.453328] journal_path: not usable as path [ 124.453733] EXT4-fs: error: could not find journal device path [ 124.479431] journal_path: not usable as path [ 124.479796] EXT4-fs: error: could not find journal device path 11:56:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r5, 0x3, 0x6, @link_local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, r0, 0x0) [ 124.625710] device syz_tun entered promiscuous mode [ 124.694532] device syz_tun left promiscuous mode [ 124.711011] device syz_tun entered promiscuous mode [ 124.723973] device syz_tun left promiscuous mode 11:56:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r5, 0x3, 0x6, @link_local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, r0, 0x0) 11:56:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x0, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x14}}}}}, 0x28}}, 0x0) sendfile(r1, r2, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 124.864554] device syz_tun entered promiscuous mode [ 124.925969] device syz_tun left promiscuous mode 11:56:51 executing program 3: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xb8\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c090}, 0x20040815) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) [ 125.025368] audit: type=1400 audit(1664539011.886:7): avc: denied { open } for pid=3891 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.026955] audit: type=1400 audit(1664539011.886:8): avc: denied { kernel } for pid=3891 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.037930] ------------[ cut here ]------------ [ 125.037953] [ 125.037957] ====================================================== [ 125.037960] WARNING: possible circular locking dependency detected [ 125.037965] 6.0.0-rc7-next-20220929 #1 Not tainted [ 125.037972] ------------------------------------------------------ [ 125.037975] syz-executor.3/3892 is trying to acquire lock: [ 125.037982] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.038023] [ 125.038023] but task is already holding lock: [ 125.038026] ffff88803e00b020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.038053] [ 125.038053] which lock already depends on the new lock. [ 125.038053] [ 125.038056] [ 125.038056] the existing dependency chain (in reverse order) is: [ 125.038060] [ 125.038060] -> #3 (&ctx->lock){....}-{2:2}: [ 125.038074] _raw_spin_lock+0x2a/0x40 [ 125.038085] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.038096] __schedule+0xedd/0x2470 [ 125.038111] schedule+0xda/0x1b0 [ 125.038124] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.038137] syscall_exit_to_user_mode+0x19/0x40 [ 125.038150] do_syscall_64+0x48/0x90 [ 125.038168] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.038181] [ 125.038181] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.038195] _raw_spin_lock_nested+0x30/0x40 [ 125.038205] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.038219] task_fork_fair+0x63/0x4d0 [ 125.038236] sched_cgroup_fork+0x3d0/0x540 [ 125.038250] copy_process+0x4183/0x6e20 [ 125.038262] kernel_clone+0xe7/0x890 [ 125.038271] user_mode_thread+0xad/0xf0 [ 125.038282] rest_init+0x24/0x250 [ 125.038293] arch_call_rest_init+0xf/0x14 [ 125.038310] start_kernel+0x4c6/0x4eb [ 125.038325] secondary_startup_64_no_verify+0xe0/0xeb [ 125.038339] [ 125.038339] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.038353] _raw_spin_lock_irqsave+0x39/0x60 [ 125.038363] try_to_wake_up+0xab/0x1930 [ 125.038376] up+0x75/0xb0 [ 125.038390] __up_console_sem+0x6e/0x80 [ 125.038407] console_unlock+0x46a/0x590 [ 125.038423] vprintk_emit+0x1bd/0x560 [ 125.038439] vprintk+0x84/0xa0 [ 125.038454] _printk+0xba/0xf1 [ 125.038466] kauditd_hold_skb.cold+0x3f/0x4e [ 125.038483] kauditd_send_queue+0x233/0x290 [ 125.038499] kauditd_thread+0x5f9/0x9c0 [ 125.038513] kthread+0x2ed/0x3a0 [ 125.038527] ret_from_fork+0x22/0x30 [ 125.038540] [ 125.038540] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.038553] __lock_acquire+0x2a02/0x5e70 [ 125.038570] lock_acquire+0x1a2/0x530 [ 125.038586] _raw_spin_lock_irqsave+0x39/0x60 [ 125.038596] down_trylock+0xe/0x70 [ 125.038611] __down_trylock_console_sem+0x3b/0xd0 [ 125.038627] vprintk_emit+0x16b/0x560 [ 125.038643] vprintk+0x84/0xa0 [ 125.038658] _printk+0xba/0xf1 [ 125.038668] report_bug.cold+0x72/0xab [ 125.038684] handle_bug+0x3c/0x70 [ 125.038701] exc_invalid_op+0x14/0x50 [ 125.038717] asm_exc_invalid_op+0x16/0x20 [ 125.038729] group_sched_out.part.0+0x2c7/0x460 [ 125.038747] ctx_sched_out+0x8f1/0xc10 [ 125.038763] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.038774] __schedule+0xedd/0x2470 [ 125.038788] schedule+0xda/0x1b0 [ 125.038801] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.038812] syscall_exit_to_user_mode+0x19/0x40 [ 125.038824] do_syscall_64+0x48/0x90 [ 125.038841] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.038853] [ 125.038853] other info that might help us debug this: [ 125.038853] [ 125.038856] Chain exists of: [ 125.038856] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.038856] [ 125.038871] Possible unsafe locking scenario: [ 125.038871] [ 125.038873] CPU0 CPU1 [ 125.038876] ---- ---- [ 125.038878] lock(&ctx->lock); [ 125.038884] lock(&rq->__lock); [ 125.038890] lock(&ctx->lock); [ 125.038896] lock((console_sem).lock); [ 125.038902] [ 125.038902] *** DEADLOCK *** [ 125.038902] [ 125.038904] 2 locks held by syz-executor.3/3892: [ 125.038911] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.038940] #1: ffff88803e00b020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.038966] [ 125.038966] stack backtrace: [ 125.038969] CPU: 0 PID: 3892 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 125.038982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.038990] Call Trace: [ 125.038993] [ 125.038997] dump_stack_lvl+0x8b/0xb3 [ 125.039016] check_noncircular+0x263/0x2e0 [ 125.039032] ? format_decode+0x26c/0xb50 [ 125.039049] ? print_circular_bug+0x450/0x450 [ 125.039066] ? enable_ptr_key_workfn+0x20/0x20 [ 125.039082] ? format_decode+0x26c/0xb50 [ 125.039099] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.039117] __lock_acquire+0x2a02/0x5e70 [ 125.039139] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.039161] lock_acquire+0x1a2/0x530 [ 125.039178] ? down_trylock+0xe/0x70 [ 125.039195] ? lock_release+0x750/0x750 [ 125.039215] ? vprintk+0x84/0xa0 [ 125.039233] _raw_spin_lock_irqsave+0x39/0x60 [ 125.039244] ? down_trylock+0xe/0x70 [ 125.039260] down_trylock+0xe/0x70 [ 125.039276] ? vprintk+0x84/0xa0 [ 125.039293] __down_trylock_console_sem+0x3b/0xd0 [ 125.039310] vprintk_emit+0x16b/0x560 [ 125.039329] vprintk+0x84/0xa0 [ 125.039346] _printk+0xba/0xf1 [ 125.039357] ? record_print_text.cold+0x16/0x16 [ 125.039373] ? report_bug.cold+0x66/0xab [ 125.039391] ? group_sched_out.part.0+0x2c7/0x460 [ 125.039409] report_bug.cold+0x72/0xab [ 125.039428] handle_bug+0x3c/0x70 [ 125.039445] exc_invalid_op+0x14/0x50 [ 125.039463] asm_exc_invalid_op+0x16/0x20 [ 125.039476] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.039496] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.039507] RSP: 0018:ffff888020527c48 EFLAGS: 00010006 [ 125.039516] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.039524] RDX: ffff88803d659ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 125.039532] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.039539] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803e00b000 [ 125.039547] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 125.039558] ? group_sched_out.part.0+0x2c7/0x460 [ 125.039578] ? group_sched_out.part.0+0x2c7/0x460 [ 125.039598] ctx_sched_out+0x8f1/0xc10 [ 125.039617] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.039631] ? lock_is_held_type+0xd7/0x130 [ 125.039645] ? __perf_cgroup_move+0x160/0x160 [ 125.039656] ? set_next_entity+0x304/0x550 [ 125.039673] ? update_curr+0x267/0x740 [ 125.039692] ? lock_is_held_type+0xd7/0x130 [ 125.039706] __schedule+0xedd/0x2470 [ 125.039723] ? io_schedule_timeout+0x150/0x150 [ 125.039739] ? rcu_read_lock_sched_held+0x3e/0x80 [ 125.039760] schedule+0xda/0x1b0 [ 125.039775] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.039787] syscall_exit_to_user_mode+0x19/0x40 [ 125.039801] do_syscall_64+0x48/0x90 [ 125.039818] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.039831] RIP: 0033:0x7f1b4e79ab19 [ 125.039840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.039850] RSP: 002b:00007f1b4bd10218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.039861] RAX: 0000000000000001 RBX: 00007f1b4e8adf68 RCX: 00007f1b4e79ab19 [ 125.039869] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b4e8adf6c [ 125.039876] RBP: 00007f1b4e8adf60 R08: 000000000000000e R09: 0000000000000000 [ 125.039883] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f1b4e8adf6c [ 125.039890] R13: 00007ffd1017142f R14: 00007f1b4bd10300 R15: 0000000000022000 [ 125.039903] [ 125.096963] WARNING: CPU: 0 PID: 3892 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.097674] Modules linked in: [ 125.097918] CPU: 0 PID: 3892 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 125.098525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.099364] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.099776] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.101126] RSP: 0018:ffff888020527c48 EFLAGS: 00010006 [ 125.101532] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.102072] RDX: ffff88803d659ac0 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 125.102605] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.103141] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803e00b000 [ 125.103672] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 125.104203] FS: 00007f1b4bd10700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.104817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.105252] CR2: 00007fddf3f32368 CR3: 000000001bd78000 CR4: 0000000000350ef0 [ 125.105797] Call Trace: [ 125.105988] [ 125.106167] ctx_sched_out+0x8f1/0xc10 [ 125.106475] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.106866] ? lock_is_held_type+0xd7/0x130 [ 125.107196] ? __perf_cgroup_move+0x160/0x160 [ 125.107540] ? set_next_entity+0x304/0x550 [ 125.107859] ? update_curr+0x267/0x740 [ 125.108165] ? lock_is_held_type+0xd7/0x130 [ 125.108499] __schedule+0xedd/0x2470 [ 125.108788] ? io_schedule_timeout+0x150/0x150 [ 125.109144] ? rcu_read_lock_sched_held+0x3e/0x80 [ 125.109529] schedule+0xda/0x1b0 [ 125.109800] exit_to_user_mode_prepare+0x114/0x1a0 [ 125.110184] syscall_exit_to_user_mode+0x19/0x40 [ 125.110548] do_syscall_64+0x48/0x90 [ 125.110836] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.111227] RIP: 0033:0x7f1b4e79ab19 [ 125.111511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.112866] RSP: 002b:00007f1b4bd10218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.113436] RAX: 0000000000000001 RBX: 00007f1b4e8adf68 RCX: 00007f1b4e79ab19 [ 125.113983] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b4e8adf6c [ 125.114524] RBP: 00007f1b4e8adf60 R08: 000000000000000e R09: 0000000000000000 [ 125.115061] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f1b4e8adf6c [ 125.115600] R13: 00007ffd1017142f R14: 00007f1b4bd10300 R15: 0000000000022000 [ 125.116145] [ 125.116323] irq event stamp: 642 [ 125.116579] hardirqs last enabled at (641): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 125.117288] hardirqs last disabled at (642): [] __schedule+0x1225/0x2470 [ 125.117913] softirqs last enabled at (500): [] __irq_exit_rcu+0x11b/0x180 [ 125.118558] softirqs last disabled at (491): [] __irq_exit_rcu+0x11b/0x180 [ 125.119194] ---[ end trace 0000000000000000 ]--- 11:56:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010100000000000000000200000014000000fe8000000000004000000000000000bb"], 0x28}}, 0x0) [ 125.193805] ieee80211 : Selected rate control algorithm 'minstrel_ht' [ 125.209072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 11:56:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c6538006f359798a1a6e8095c245952fb8ab530181fb6c81b73b42ea658ace063b0fa34587a0458ffd363338cab52e981b78c86fec24c62fa878c4642ba52edb8bee56ae014c5bae761f695eb61399ad26758dc7fa24bc146c14408fe6ed4263e94848ea811a3b69ab9b1c6a4fa07a4dd775aefc550ab58dee661e866f34cc60110c845d211ffdf25db68983673b521e28fbd3f5f3dde8eb93391e476e9fa8c8d7057f805c1a7a1751ea1dabe00"/207]) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="b0f08300e8d40c6afaf9b224d6cb1b49d1f79666f8d0ff6c55eb14b0e14d4a30092208b5a61b32d5143c9ababe1f4f36a747d62b22b04f48bbe11e4f27cc0165f2da8dec9535df88619f380c6b4df4020ef7aa5aee39c700587d0aa0a2705ee51eb65e94e451a0559f62071fd934354835f7", 0x72, 0x2d1ba62e, 0x0, 0x1}]) r5 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x4, 0x80, 0x1f, 0x0, 0x40, 0x208, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x2, 0x1, 0x6, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x3, 0x0, 0x1f}, r5, 0x5, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff, r5}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) [ 125.246069] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' 11:56:52 executing program 3: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xb8\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c090}, 0x20040815) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) [ 125.374326] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 125.921997] capability: warning: `syz-executor.7' uses 32-bit capabilities (legacy support in use) [ 125.924753] capability: warning: `syz-executor.7' uses deprecated v2 capabilities in a way that may be insecure VM DIAGNOSIS: 11:56:52 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff888020527690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1b4bd10700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fddf3f32368 CR3=000000001bd78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f1b4e8817c0 00007f1b4e8817c8 YMM02=0000000000000000 0000000000000000 00007f1b4e8817e0 00007f1b4e8817c0 YMM03=0000000000000000 0000000000000000 00007f1b4e8817c8 00007f1b4e8817c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000017c821f47 RBX=00007f61191e09d0 RCX=00007f61191849c4 RDX=0000000000000031 RSI=0000000170fa4ce0 RDI=00007f61191849c0 RBP=00007ffd0cd59d20 RSP=00007ffd0cd59b40 R8 =00007f6118f6f030 R9 =0000000000000001 R10=00007f6119368bf0 R11=00007f611947a510 R12=00007f61191849c0 R13=00007ffd0cd59ca8 R14=00007f6119180800 R15=00007f611947a510 RIP=00007f611948ac0e RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6118f70540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f61191e0000 CR3=000000001b1c6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00ff000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffffffff00 YMM02=0000000000000000 0000000000000000 315f315f4c53534e 45504f00315f315f YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000797063 YMM04=0000000000000000 0000000000000000 6567007465737a74 006d726678736377 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000