Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:25129' (ECDSA) to the list of known hosts. 2022/10/03 16:51:36 fuzzer started 2022/10/03 16:51:37 dialing manager at localhost:35095 syzkaller login: [ 35.898271] cgroup: Unknown subsys name 'net' [ 35.989644] cgroup: Unknown subsys name 'rlimit' 2022/10/03 16:51:51 syscalls: 2215 2022/10/03 16:51:51 code coverage: enabled 2022/10/03 16:51:51 comparison tracing: enabled 2022/10/03 16:51:51 extra coverage: enabled 2022/10/03 16:51:51 setuid sandbox: enabled 2022/10/03 16:51:51 namespace sandbox: enabled 2022/10/03 16:51:51 Android sandbox: enabled 2022/10/03 16:51:51 fault injection: enabled 2022/10/03 16:51:51 leak checking: enabled 2022/10/03 16:51:51 net packet injection: enabled 2022/10/03 16:51:51 net device setup: enabled 2022/10/03 16:51:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 16:51:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 16:51:51 USB emulation: enabled 2022/10/03 16:51:51 hci packet injection: enabled 2022/10/03 16:51:51 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 16:51:51 802.15.4 emulation: enabled 2022/10/03 16:51:51 fetching corpus: 50, signal 21428/23275 (executing program) 2022/10/03 16:51:51 fetching corpus: 100, signal 34968/38519 (executing program) 2022/10/03 16:51:52 fetching corpus: 150, signal 42574/47775 (executing program) 2022/10/03 16:51:52 fetching corpus: 200, signal 51171/57862 (executing program) 2022/10/03 16:51:52 fetching corpus: 250, signal 60539/68587 (executing program) 2022/10/03 16:51:52 fetching corpus: 300, signal 64531/74048 (executing program) 2022/10/03 16:51:52 fetching corpus: 350, signal 70142/80948 (executing program) 2022/10/03 16:51:52 fetching corpus: 400, signal 74181/86300 (executing program) 2022/10/03 16:51:52 fetching corpus: 450, signal 77599/91022 (executing program) 2022/10/03 16:51:52 fetching corpus: 500, signal 80504/95247 (executing program) 2022/10/03 16:51:52 fetching corpus: 550, signal 82319/98412 (executing program) 2022/10/03 16:51:53 fetching corpus: 600, signal 85677/102950 (executing program) 2022/10/03 16:51:53 fetching corpus: 650, signal 90712/109023 (executing program) 2022/10/03 16:51:53 fetching corpus: 700, signal 94569/113916 (executing program) 2022/10/03 16:51:53 fetching corpus: 750, signal 96761/117291 (executing program) 2022/10/03 16:51:53 fetching corpus: 800, signal 99464/121061 (executing program) 2022/10/03 16:51:53 fetching corpus: 850, signal 101586/124303 (executing program) 2022/10/03 16:51:53 fetching corpus: 900, signal 104170/127957 (executing program) 2022/10/03 16:51:54 fetching corpus: 950, signal 108300/132906 (executing program) 2022/10/03 16:51:54 fetching corpus: 1000, signal 109747/135410 (executing program) 2022/10/03 16:51:54 fetching corpus: 1050, signal 111696/138373 (executing program) 2022/10/03 16:51:54 fetching corpus: 1100, signal 114327/141892 (executing program) 2022/10/03 16:51:54 fetching corpus: 1150, signal 116168/144684 (executing program) 2022/10/03 16:51:54 fetching corpus: 1200, signal 118144/147616 (executing program) 2022/10/03 16:51:54 fetching corpus: 1250, signal 120421/150746 (executing program) 2022/10/03 16:51:54 fetching corpus: 1300, signal 122148/153379 (executing program) 2022/10/03 16:51:55 fetching corpus: 1350, signal 122946/155264 (executing program) 2022/10/03 16:51:55 fetching corpus: 1400, signal 124624/157755 (executing program) 2022/10/03 16:51:55 fetching corpus: 1450, signal 125987/160109 (executing program) 2022/10/03 16:51:55 fetching corpus: 1500, signal 127988/162909 (executing program) 2022/10/03 16:51:55 fetching corpus: 1550, signal 128751/164695 (executing program) 2022/10/03 16:51:55 fetching corpus: 1600, signal 130367/167068 (executing program) 2022/10/03 16:51:55 fetching corpus: 1650, signal 132140/169624 (executing program) 2022/10/03 16:51:55 fetching corpus: 1700, signal 133865/172105 (executing program) 2022/10/03 16:51:56 fetching corpus: 1750, signal 136751/175457 (executing program) 2022/10/03 16:51:56 fetching corpus: 1800, signal 139326/178547 (executing program) 2022/10/03 16:51:56 fetching corpus: 1850, signal 140573/180579 (executing program) 2022/10/03 16:51:56 fetching corpus: 1900, signal 141886/182677 (executing program) 2022/10/03 16:51:56 fetching corpus: 1950, signal 143040/184616 (executing program) 2022/10/03 16:51:56 fetching corpus: 2000, signal 143737/186179 (executing program) 2022/10/03 16:51:56 fetching corpus: 2050, signal 144831/188064 (executing program) 2022/10/03 16:51:56 fetching corpus: 2100, signal 146207/190197 (executing program) 2022/10/03 16:51:57 fetching corpus: 2150, signal 147404/192063 (executing program) 2022/10/03 16:51:57 fetching corpus: 2200, signal 149071/194320 (executing program) 2022/10/03 16:51:57 fetching corpus: 2250, signal 149622/195738 (executing program) 2022/10/03 16:51:57 fetching corpus: 2300, signal 150472/197371 (executing program) 2022/10/03 16:51:57 fetching corpus: 2350, signal 151241/198930 (executing program) 2022/10/03 16:51:57 fetching corpus: 2400, signal 152635/200965 (executing program) 2022/10/03 16:51:57 fetching corpus: 2450, signal 154078/203013 (executing program) 2022/10/03 16:51:57 fetching corpus: 2500, signal 155062/204647 (executing program) 2022/10/03 16:51:57 fetching corpus: 2550, signal 155963/206256 (executing program) 2022/10/03 16:51:58 fetching corpus: 2600, signal 157178/208104 (executing program) 2022/10/03 16:51:58 fetching corpus: 2650, signal 158039/209594 (executing program) 2022/10/03 16:51:58 fetching corpus: 2700, signal 158829/211051 (executing program) 2022/10/03 16:51:58 fetching corpus: 2750, signal 159706/212556 (executing program) 2022/10/03 16:51:58 fetching corpus: 2800, signal 160748/214194 (executing program) 2022/10/03 16:51:58 fetching corpus: 2850, signal 161743/215711 (executing program) 2022/10/03 16:51:58 fetching corpus: 2900, signal 162193/216939 (executing program) 2022/10/03 16:51:58 fetching corpus: 2950, signal 162713/218192 (executing program) 2022/10/03 16:51:59 fetching corpus: 3000, signal 164076/219959 (executing program) 2022/10/03 16:51:59 fetching corpus: 3050, signal 164706/221249 (executing program) 2022/10/03 16:51:59 fetching corpus: 3100, signal 165352/222603 (executing program) 2022/10/03 16:51:59 fetching corpus: 3150, signal 165948/223895 (executing program) 2022/10/03 16:51:59 fetching corpus: 3200, signal 167306/225610 (executing program) 2022/10/03 16:51:59 fetching corpus: 3250, signal 168748/227355 (executing program) 2022/10/03 16:51:59 fetching corpus: 3300, signal 170504/229208 (executing program) 2022/10/03 16:51:59 fetching corpus: 3350, signal 171852/230837 (executing program) 2022/10/03 16:51:59 fetching corpus: 3400, signal 172298/231966 (executing program) 2022/10/03 16:52:00 fetching corpus: 3450, signal 172874/233170 (executing program) 2022/10/03 16:52:00 fetching corpus: 3500, signal 173357/234305 (executing program) 2022/10/03 16:52:00 fetching corpus: 3550, signal 174158/235629 (executing program) 2022/10/03 16:52:00 fetching corpus: 3600, signal 174984/236893 (executing program) 2022/10/03 16:52:00 fetching corpus: 3650, signal 175531/238096 (executing program) 2022/10/03 16:52:00 fetching corpus: 3700, signal 176112/239239 (executing program) 2022/10/03 16:52:00 fetching corpus: 3750, signal 177123/240638 (executing program) 2022/10/03 16:52:00 fetching corpus: 3800, signal 177695/241788 (executing program) 2022/10/03 16:52:00 fetching corpus: 3850, signal 178119/242838 (executing program) 2022/10/03 16:52:01 fetching corpus: 3900, signal 178753/243966 (executing program) 2022/10/03 16:52:01 fetching corpus: 3950, signal 179415/245130 (executing program) 2022/10/03 16:52:01 fetching corpus: 4000, signal 180633/246472 (executing program) 2022/10/03 16:52:01 fetching corpus: 4050, signal 181254/247554 (executing program) 2022/10/03 16:52:01 fetching corpus: 4100, signal 182438/248953 (executing program) 2022/10/03 16:52:01 fetching corpus: 4150, signal 183052/250031 (executing program) 2022/10/03 16:52:01 fetching corpus: 4200, signal 183692/251114 (executing program) 2022/10/03 16:52:01 fetching corpus: 4250, signal 184304/252158 (executing program) 2022/10/03 16:52:01 fetching corpus: 4300, signal 184708/253128 (executing program) 2022/10/03 16:52:02 fetching corpus: 4350, signal 185296/254172 (executing program) 2022/10/03 16:52:02 fetching corpus: 4400, signal 186276/255382 (executing program) 2022/10/03 16:52:02 fetching corpus: 4450, signal 187308/256630 (executing program) 2022/10/03 16:52:02 fetching corpus: 4500, signal 188889/258058 (executing program) 2022/10/03 16:52:02 fetching corpus: 4550, signal 189673/259141 (executing program) 2022/10/03 16:52:02 fetching corpus: 4600, signal 190183/260126 (executing program) 2022/10/03 16:52:03 fetching corpus: 4650, signal 191288/261373 (executing program) 2022/10/03 16:52:03 fetching corpus: 4700, signal 191633/262274 (executing program) 2022/10/03 16:52:03 fetching corpus: 4750, signal 192340/263310 (executing program) 2022/10/03 16:52:03 fetching corpus: 4800, signal 192702/264182 (executing program) 2022/10/03 16:52:03 fetching corpus: 4850, signal 193098/265076 (executing program) 2022/10/03 16:52:03 fetching corpus: 4900, signal 193486/266047 (executing program) 2022/10/03 16:52:03 fetching corpus: 4950, signal 194069/267076 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/268100 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/268833 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/269568 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/270301 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/271000 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/271693 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/272463 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/273194 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/273949 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/274679 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/275416 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/276172 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/276897 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/277630 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/278363 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/279126 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/279860 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/280584 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/281323 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/281994 (executing program) 2022/10/03 16:52:03 fetching corpus: 5000, signal 194783/282711 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/283431 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/284189 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/284948 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/285668 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/286396 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/287121 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/287832 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/288558 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/289243 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/289981 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/290701 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/291442 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/292182 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/292878 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/293632 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/294347 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/295069 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/295810 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/296508 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/297226 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/297970 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/298759 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/299506 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/300242 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/300966 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/301654 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/302351 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/303075 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/303830 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/304570 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/305289 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/305436 (executing program) 2022/10/03 16:52:04 fetching corpus: 5000, signal 194783/305436 (executing program) 2022/10/03 16:52:07 starting 8 fuzzer processes 16:52:07 executing program 0: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x1, 0x3, 0x5}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x12580, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = dup(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x400) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = accept$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) ioctl$FIONCLEX(r4, 0x5450) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) finit_module(r1, &(0x7f0000000340)='/dev/bsg\x00', 0x2) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x44800, 0x0) write$cgroup_type(r5, &(0x7f00000003c0), 0x9) r6 = socket$inet6(0xa, 0x1, 0x7) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000400)={{0x6, 0x8}, 0x100, './file0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r7, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_genetlink_get_family_id$fou(&(0x7f0000000700), r2) 16:52:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'veth1_vlan\x00', {0x2, 0x0, @initdev}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) sendmsg$inet(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000180)="04ebdde0aa37359feb0ad1b0831e27747572279942761e0817ec7196f3663fb6879c21e6d52d38f9b467b1eb29fd42201f836b456474844636f22e4f8cfd11f18a09e62c1d8d276732f17a25", 0x4c}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="b39c8c381d85e4434123a80ea9f9473b93acfdc3f1cf94f1488cbc19fa5e7733609a571a83ae0d54c38d66c6b2211f75f12d26c9805dfb45ac610ea30008b455e783b75cf105aa7e60c1380c94fd16fa59d2695f62bab6fc62b6bdeedc8855923bcbc9f04a9dbc099a2b3de2545e8f8ee31fd81d50550b730831ad56e6bdead82056dfde3cfa5a8fcd2833c4d10e7f4dd167471c1318f8a9e4f6e3488e012afa0ae60cfd8431ca6ed93ac5c82eb26968a9ebb18251b584969be968ff0c7b8e0a8618722d36ce", 0xc6}], 0x3, &(0x7f0000001340)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0x23, 0xc9, [@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @multicast1, @loopback]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x2, 0xb, "77de079a7f7dc0382b"}, {0x1, 0x11, "f234bd39a72af6fa1161a65512d733"}, {0x0, 0xe, "88a0ae2170626350f5bae1d7"}, {0x1, 0x5, "7e98f0"}]}, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0xf, [{@loopback, 0x9}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x9}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4c75352f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x1f}, {@multicast1, 0x3}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x8000}, {@remote, 0x6}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x82, 0x6, "b36fb1ec"}, @timestamp={0x44, 0x8, 0x5c, 0x0, 0x0, [0x80]}, @timestamp_prespec={0x44, 0x14, 0x13, 0x3, 0xe, [{@local, 0x101}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7fffffff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc01}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @loopback}}}], 0x1c0}, 0x4008044) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000015c0)={'syztnl0\x00', &(0x7f0000001540)={'syztnl0\x00', r1, 0x4, 0x80, 0xff, 0x5, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x7, 0x20, 0x9d91, 0x91}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001600)={r4, 0x1, 0x6}, 0x10) r5 = openat(r2, &(0x7f0000001640)='./file0\x00', 0x480, 0x80) recvmmsg(r0, &(0x7f0000002e40)=[{{&(0x7f0000001680)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f0000001700)=""/206, 0xce}, {&(0x7f0000001800)=""/88, 0x58}, {&(0x7f0000001880)=""/82, 0x52}, {&(0x7f0000001900)=""/104, 0x68}], 0x4, &(0x7f00000019c0)=""/68, 0x44}, 0xa3bede4}, {{&(0x7f0000001a40)=@rc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001ac0)=""/158, 0x9e}, {&(0x7f0000001b80)=""/186, 0xba}, {&(0x7f0000001c40)=""/152, 0x98}, {&(0x7f0000001d00)=""/197, 0xc5}], 0x4, &(0x7f0000001e40)=""/4096, 0x1000}, 0x8}], 0x2, 0x21, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002ec0)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000002f00)={r6, 0x1, 0x6, @broadcast}, 0x10) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002f40)=0x10000, 0xfff) r7 = syz_open_dev$mouse(&(0x7f0000002f80), 0x1, 0x800) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000002fc0)={{r7}, {@void, @actul_num={@val=0x2b, 0x1000000000000, 0x47}}}) r8 = accept4$packet(r7, 0x0, &(0x7f0000003000), 0x80800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r8, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000003040)={'wlan1\x00', {0x2, 0x0, @empty}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000003200)={0x0, 0x1, 0x6, @local}, 0x10) 16:52:07 executing program 2: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x2) r1 = accept4(r0, &(0x7f00000000c0)=@ax25={{0x3, @null}, [@null, @default, @default, @rose, @remote, @null, @default, @default]}, &(0x7f0000000140)=0x80, 0x80800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x1e1200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x54}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "285414c1643c88c682c70d517186bdab"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x48}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x401}, @NL80211_ATTR_PMK={0x14, 0xfe, "56c7cdd5870adb2d3a3513db59073fba"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fe612a8a174c34bed26f1810b73e4676"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMKID={0x14, 0x55, "d012a8ae03a61c3a082a2f069a801195"}]}, 0x9c}}, 0x20000014) r4 = creat(&(0x7f0000000380)='./file0\x00', 0x8) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000004c0)={0x9, 0x18, '\x00', 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0]}) r5 = syz_open_pts(r4, 0x200) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x7ff, 0xed, &(0x7f0000000500)="8fa3dfe5eaaaf91842e7e6f42b7642dbff27046471db662160aeea89a7c30794336613bd001e63dbd657bc4c0d4daa821b40cf34a5e7898da99a2a176e085781ed9b5b80bc843b065b2c655acd59d6fab56f37b1ec1b18285536089f2e69a339fc3025d6c81bfbbdea659b7f3b552b073c518f892fd3cd9ad521d869f47e11511024d96304cf0c8bfc61c8ac4e8cd867d12e5406081501db4aea6e51b93ceb2d701c4df18acd1458d8e3ce343c0d4c0e79ea871addfccd4371fd11825fddac46dcadbe721d2193a17961f41436462f1d16c5eac0a34eb664b961988e89b1995e10c4b9679bf8bd5202234a2776", 0x1, 0x1}, {0x2442, 0xd6, &(0x7f0000000600)="51784ddd2e48582dc0549c4113345a024b489561f557342dfd31809ce71de26fd52e30041efdb58528d12c77a8d9b8de9f631691eddf46a296da03259902e42b1e879dcfc23832c1f041349b5204ad36a3a2f7db4ca98d7d8cdc855b8610feefa1078d40fce9da5c82836900c86aeedc225d4bf2d4c1c39a1f188eef94fdb9678f02d456978044545780590d96b47510b2a70af810703ae38f614149a0459faf527c2eb251d213ac95cbe7c419871173384b4a87269da96d5f189dae2d4debd506dee8e84468131a7830cf809b6f95ea8c539e09f7cf", 0x1, 0x1}]}) r6 = syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000900)=[{&(0x7f0000000800)="a5361f382e5bcb2a74bde37f6b763fd142d7dcf1d990fb9f8c698efb66a383f047f6dad6af75735048c7de0a362b166620456b08ad997bd356aa9e5497e6e174fa21ac9055062837d3a552d5c025bb7f106e8551939617a73d77f3e5102238918a8062c6ac99f23cda8388e18645c2d06573d0b1d2c9ecfe16a56cfe1c630a3a0a6d0c10c4d0ff2142361b4b11389c9af1db659b3c3e7fd5a85f37793d210eeeef8298c716ed3563ac0e27c67c4b769510f5bb0fa3773f551f8a2e1bce6afa68e39e6a152ebcc00ea45d2212a2225b93", 0xd0}], 0x86002, &(0x7f0000000940)={[{@map_normal}, {@mode={'mode', 0x3d, 0x16a0}}, {@map_off}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@euid_gt={'euid>', 0xee00}}]}) close_range(r1, r6, 0x2) r7 = perf_event_open$cgroup(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x3f, 0x40, 0xe8, 0x0, 0x3, 0x20201, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x1}, 0x50120, 0x8, 0x1, 0x1, 0x81, 0xffffffff, 0x4, 0x0, 0x4, 0x0, 0x347bc3c7}, r4, 0x5, 0xffffffffffffffff, 0x1) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a40), 0x0) dup2(r7, r8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'veth1_to_bond\x00'}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007900)=0x1, 0x4) [ 65.923250] audit: type=1400 audit(1664815927.361:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:52:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0d01, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x2, 0x10000}, {0x5, 0x4}, 0x6f9c1fc0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x8, 0x2, 0x7}) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000180), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/121, 0x79}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x78}, 0x12042) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000380)={{0x1, 0x4}, {0x0, 0x1004}}) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x210000, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000400)={'\x00', 0xff, 0x3, 0x8}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x200800, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x800, 0xab) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0xd7c5, 0x7, 0x6, 0x400, 0x9, [{0x0, 0xee, 0xffffffffffffffff}, {0x2, 0x10001, 0x20, '\x00', 0x684}, {0xf406, 0x5, 0xff, '\x00', 0x2180}, {0x3, 0x3, 0x40, '\x00', 0x484}, {0x6, 0x542, 0x7, '\x00', 0x1080}, {0x9, 0x100, 0x3, '\x00', 0x880}, {0xfffffffffffffff7, 0x7, 0x100}, {0x401, 0x0, 0x9, '\x00', 0x800}, {0x1ff, 0x1e3, 0x8, '\x00', 0xcc0}]}) r6 = syz_open_procfs(r2, &(0x7f0000000740)='attr/keycreate\x00') ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, &(0x7f0000000780)={'\x00', 0x5, 0x2, 0x4}) r7 = pidfd_open(r4, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000800)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x703000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000900)={{0x2, 0xfff}, {0x800}}) 16:52:07 executing program 3: sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}}, 0x24008019) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x4, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x880) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r0, 0x226, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9501000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000041) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4811}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "2bfed562"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xa014880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x64}}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004011}, 0x20008044) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x391b786349f3e3f1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc8041}, 0x48880) 16:52:07 executing program 5: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x4}, 0x16, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x76}) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={{}, 0x4, &(0x7f0000000100)=[0x9, 0x9, 0xa3, 0x1], 0x3, 0x6, [0x7, 0x10000, 0x6, 0xffffffffffffec86]}) flock(0xffffffffffffffff, 0xc) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000200)={0x9, 0x18, [0x4, 0x2, 0xfb, 0x5], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000280)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008090}, 0x24000045) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000480)=0x45c, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/consoles\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}}, 0x30000004) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000600)=""/242) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {r5}}, './file1\x00'}) r7 = syz_open_procfs$namespace(r1, &(0x7f0000002300)='ns/cgroup\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002340)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) 16:52:07 executing program 6: ioctl(0xffffffffffffffff, 0x7ff, &(0x7f0000000000)="759559eb472acbb70156b0408cb2eb6ff932136361b65d32a090b5ad926a08ac793bef6a42015f1594c285eee919320992bec3a7151c4d97d8cc048a503e02960060e37b6c424f") syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) ioctl$TUNSETLINK(r3, 0x400454cd, 0x3) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r4 = pidfd_getfd(r3, r0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x138, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10e8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe000000}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x52}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x840) r5 = dup2(r3, r4) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48804}, 0x4094) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9}, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) syncfs(r4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) fadvise64(r6, 0xfffffffffffffffd, 0x0, 0x3) 16:52:07 executing program 7: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc2}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x3b}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xb9}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x10}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xfa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xe6f8}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x100}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe4}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}]}, @NL80211_ATTR_IE={0x97, 0x2a, [@preq={0x82, 0x8e, @ext={{0x1, 0x0, 0x1}, 0x0, 0xf8, 0xff, @device_a, 0x40, @broadcast, 0x80000001, 0x1000, 0xa, [{{0x1}, @device_b, 0xffffffff}, {{}, @broadcast, 0x400}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @broadcast, 0x80}, {{0x1, 0x0, 0x1}, @device_b, 0x800}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0xcc}, {{}, @broadcast, 0x80000000}, {{}, @device_b, 0x4}, {{}, @broadcast, 0xca}]}}, @dsss={0x3, 0x1, 0x34}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48840}, 0x4) r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r1, 0x700, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7d08}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000400)) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000001640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001600)={&(0x7f0000000540)={0x109c, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfe, {0x8}, [@typed={0x7e, 0x8c, 0x0, 0x0, @binary="a4be1cb0e12d806e0ddaaafcc1436549ef00a6735a17f2465e7fd038723d3b6791a4e1f6d38f590a2383110583d27e2365e2d118e021ff3e1c61364c37a84d830f7c48d51ff2f19a6bdb42c047e8515b4255878fe4ddfab1ab2b5d05ae65919569eb0def66cd92970d459cbbf4437077c5dad2d1967ae9637ba6"}, @generic="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", @typed={0x8, 0x23, 0x0, 0x0, @uid=0xee01}]}, 0x109c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$FIONCLEX(r2, 0x5450) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000001680)) signalfd4(r0, &(0x7f00000016c0)={[0x7]}, 0x8, 0x0) r4 = openat(r3, &(0x7f0000001700)='./file0\x00', 0x2000, 0x4) sendmsg$inet6(r2, &(0x7f0000001b40)={&(0x7f0000001740)={0xa, 0x3cb4, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001780)="46f9aaac4a1dd7", 0x7}, {&(0x7f00000017c0)="ec559c4b0ea4ee97d2c4ad07147e4c1f74a64a49b83e802326e760ff5c1f56035677cb7098b543d0d621223f629c1b40af9573fa992db65b0de974a02cb0af6160d8ddc87f0d6c8aede0ae467b8eb424ad", 0x51}, {&(0x7f0000001840)="4e0eb8fceae7723b8fdee485c3a23e52041c28519965912f533b8676000b6a19229142c55b4ec1c77a85fafef0a8f360ca81f339cf1c814b1ecab73649df1ec414f223882c4dbf950035af23eaa7e35f7952469267b87fa7cfa2c50ab6da1c440627206c948809b693f376", 0x6b}, {&(0x7f00000018c0)="74232899a73c7c5b1bda29d769518d68b1e410b5fe2e5c747087bd0a47afebdfe9a40642010b86c7f326da56f071273f646599d98c9d3f327ee7ea95b256f66d8d95531d71b426d30aedf30da17a172198ae2c592d2f486e771704d04e47c8a74175563ff75a53c452aa0696da88736dbc11020bad1038442cb01f810ba0622594ac4b0b1bc93e93d02157f4b874378d60d08a7aff43e7725409d018a1f3529e64ecab24810f128cfd299b8739c708c86b7443eb65661a2b55e34871435fcf259732cca6e61417f763debecd57cd99a0cf9b4758565502a9f8b0631fb4dfda901e3d80d25b57b47dfe5f325fb6996dbc33815aeab6ca8a3915617f316f5a", 0xfe}, {&(0x7f00000019c0)="cc6934bde9f04d7e05a034b8347ad293e2c2cc51e441db2e02baf9b6fb1274e04dc418966fece866f20032a89c1e232f3d3b159e6aa983c908e6c1e9f7ee2daca8f30ad1591cc551bb01f0d4612009efbc4f968110b2ee1cd28a14c0757500cb6aab96ad00ae98f4f745bbb82ad2fd542570712eb021c1c698d95d85af61ca7b772828bc8281e982387dbff71ecfcf2cd0b39205c67689b1a7e49746a4c9d3d86f757911d107947969881c3716999de81c2b2b47a7f6728b5949f18a8f3ed438032987bb3b873d6ab77f63b1f3f4421f30608301f4fd", 0xd6}], 0x5}, 0x4048054) r5 = openat2(r3, &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x90040, 0x0, 0x2}, 0x18) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001c00)) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x5b}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x800}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x70}]}, 0x48}}, 0x4000) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000001d80)) [ 67.148932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.153716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.156352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.160219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.162404] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.164301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.169578] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.277861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.281752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.283273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.286784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.288115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.289855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.291232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.292934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.294469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.299107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.302172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.303355] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.306219] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.309050] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.310194] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.311095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.315958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.316745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.330859] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.346573] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.348061] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.355238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.379741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.383272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.388293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.390350] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.394308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.405084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.406401] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.408722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.415793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.417352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.419265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.421641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.424966] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.429758] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.431998] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.433583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.435733] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.436922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.459361] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.466611] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.239142] Bluetooth: hci0: command 0x0409 tx timeout [ 69.365826] Bluetooth: hci1: command 0x0409 tx timeout [ 69.366671] Bluetooth: hci2: command 0x0409 tx timeout [ 69.366937] Bluetooth: hci3: command 0x0409 tx timeout [ 69.368815] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 69.429722] Bluetooth: hci7: command 0x0409 tx timeout [ 69.493642] Bluetooth: hci5: command 0x0409 tx timeout [ 69.493672] Bluetooth: hci6: command 0x0409 tx timeout [ 71.285578] Bluetooth: hci0: command 0x041b tx timeout [ 71.413583] Bluetooth: hci1: command 0x041b tx timeout [ 71.414609] Bluetooth: hci3: command 0x041b tx timeout [ 71.415246] Bluetooth: hci2: command 0x041b tx timeout [ 71.477598] Bluetooth: hci7: command 0x041b tx timeout [ 71.541580] Bluetooth: hci6: command 0x041b tx timeout [ 71.541600] Bluetooth: hci5: command 0x041b tx timeout [ 73.334568] Bluetooth: hci0: command 0x040f tx timeout [ 73.461618] Bluetooth: hci2: command 0x040f tx timeout [ 73.461655] Bluetooth: hci3: command 0x040f tx timeout [ 73.462398] Bluetooth: hci1: command 0x040f tx timeout [ 73.525593] Bluetooth: hci7: command 0x040f tx timeout [ 73.589598] Bluetooth: hci5: command 0x040f tx timeout [ 73.591454] Bluetooth: hci6: command 0x040f tx timeout [ 75.061589] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 75.381627] Bluetooth: hci0: command 0x0419 tx timeout [ 75.509573] Bluetooth: hci1: command 0x0419 tx timeout [ 75.511007] Bluetooth: hci3: command 0x0419 tx timeout [ 75.511629] Bluetooth: hci2: command 0x0419 tx timeout [ 75.573580] Bluetooth: hci7: command 0x0419 tx timeout [ 75.637592] Bluetooth: hci6: command 0x0419 tx timeout [ 75.638475] Bluetooth: hci5: command 0x0419 tx timeout [ 79.861579] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 84.661590] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 87.234213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.249559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.257629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.264641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.269069] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.271275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.276772] Bluetooth: hci4: HCI_REQ-0x0c1a [ 89.333753] Bluetooth: hci4: command 0x0409 tx timeout [ 91.381533] Bluetooth: hci4: command 0x041b tx timeout [ 93.429572] Bluetooth: hci4: command 0x040f tx timeout [ 95.477560] Bluetooth: hci4: command 0x0419 tx timeout 16:53:04 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0xae, 0x7f, 0x6, 0x0, 0x2, 0x4004, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0xa111}, 0x10408, 0x100000000, 0x8, 0x2, 0x666, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0x9}, r0, 0x5, 0xffffffffffffffff, 0x3) chmod(&(0x7f0000000000)='./file1\x00', 0x0) [ 123.046963] audit: type=1400 audit(1664815984.485:7): avc: denied { open } for pid=3616 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 16:53:04 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0xae, 0x7f, 0x6, 0x0, 0x2, 0x4004, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0xa111}, 0x10408, 0x100000000, 0x8, 0x2, 0x666, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0x9}, r0, 0x5, 0xffffffffffffffff, 0x3) chmod(&(0x7f0000000000)='./file1\x00', 0x0) 16:53:04 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0xae, 0x7f, 0x6, 0x0, 0x2, 0x4004, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0xa111}, 0x10408, 0x100000000, 0x8, 0x2, 0x666, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0x9}, r0, 0x5, 0xffffffffffffffff, 0x3) chmod(&(0x7f0000000000)='./file1\x00', 0x0) 16:53:04 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0xae, 0x7f, 0x6, 0x0, 0x2, 0x4004, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0xa111}, 0x10408, 0x100000000, 0x8, 0x2, 0x666, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0x9}, r0, 0x5, 0xffffffffffffffff, 0x3) chmod(&(0x7f0000000000)='./file1\x00', 0x0) 16:53:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0xae, 0x7f, 0x6, 0x0, 0x2, 0x4004, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0xa111}, 0x10408, 0x100000000, 0x8, 0x2, 0x666, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0x9}, r0, 0x5, 0xffffffffffffffff, 0x3) 16:53:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) getpgrp(0xffffffffffffffff) 16:53:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) 16:53:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) [ 128.703376] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.705754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.707728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.710695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.711961] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 128.713049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.717246] Bluetooth: hci6: HCI_REQ-0x0c1a [ 128.779305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.781358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.783519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.786155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.788050] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 128.789694] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.793281] Bluetooth: hci7: HCI_REQ-0x0c1a [ 130.677543] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 130.741608] Bluetooth: hci6: command 0x0409 tx timeout [ 130.805600] Bluetooth: hci7: command 0x0409 tx timeout [ 132.789577] Bluetooth: hci6: command 0x041b tx timeout [ 132.853557] Bluetooth: hci7: command 0x041b tx timeout [ 132.928205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.930301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.931277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.933114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.934296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.935096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.944893] Bluetooth: hci3: HCI_REQ-0x0c1a [ 134.837629] Bluetooth: hci6: command 0x040f tx timeout [ 134.901635] Bluetooth: hci7: command 0x040f tx timeout [ 134.965638] Bluetooth: hci3: command 0x0409 tx timeout [ 136.885537] Bluetooth: hci6: command 0x0419 tx timeout [ 136.949544] Bluetooth: hci7: command 0x0419 tx timeout [ 137.013579] Bluetooth: hci3: command 0x041b tx timeout [ 139.061560] Bluetooth: hci3: command 0x040f tx timeout [ 141.109578] Bluetooth: hci3: command 0x0419 tx timeout 16:53:46 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='se?\x00\x00\x00el,\x00']) 16:53:46 executing program 0: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r0) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) pkey_alloc(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) 16:53:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1) r2 = io_uring_setup(0x454c, &(0x7f0000000240)) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a111043f9ab3cd82b71275b2aad4f99fce01a0951b7bf59006"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='trusted\x00', 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0) sendfile(r0, r0, 0x0, 0x5f1) openat(r0, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110) 16:53:46 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)="08315b8593ac91b1310c2506b2428bceebf6fefe2e632cc3f7b626ed3e7a1e7364ca1db758f2e76168e9425aa949ec186417bb3301ad4c75070a0950ca051252f2b858b2163e1276c6943c4771e4edec03a8e82cdcc7a9ef6a0654d2405793a2ca4aab4fc39cb0", 0x67, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000180)=""/218, 0xda}], 0x1}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)=""/155, 0x9b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f0000000780)=""/139, 0x8b}], 0x6}}], 0x4, 0x10022, 0x0) 16:53:46 executing program 6: lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) 16:53:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) bind(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @local}, 0x2, 0x2, 0x2, 0x4}}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x40095) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bd995b764602bbbbbbbbbbbb86dd602ddc20001c3a00fc020000000000000000000000000000fe8000000000000000000000000000aa000000000000000087009078200100000000000000000000000000009802a893007bbe6b0f5f50029280277a89ad0120e9346a7159a86ce4e8944007e4d1"], 0x0) 16:53:46 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r0}}, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) gettid() r7 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r5, r4, 0xffffffffffffffff, r7], 0x4) 16:53:46 executing program 5: gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x2, 0x3, 0x7f, 0x0, 0x0, 0x40000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe0c, 0x2, @perf_config_ext={0x400, 0xfff}, 0x4400, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x9, 0x0, 0xe69d}, r2, 0xffffffffffffffff, r1, 0x8) [ 165.291892] audit: type=1400 audit(1664816026.729:8): avc: denied { kernel } for pid=5354 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 165.300422] ------------[ cut here ]------------ [ 165.301332] WARNING: CPU: 0 PID: 3833 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 165.302517] Modules linked in: [ 165.302955] CPU: 0 PID: 3833 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220930 #1 [ 165.303999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 165.305710] RIP: 0010:event_filter_match+0x422/0x660 [ 165.306832] Code: 00 00 00 e9 7c fc ff ff e8 7b 33 f1 ff 65 8b 2d 00 9d ad 7e 31 ff 89 ee e8 1b 30 f1 ff 85 ed 0f 84 ef 00 00 00 e8 5e 33 f1 ff <0f> 0b eb 9f e8 d5 a1 23 00 e9 17 fc ff ff e8 4b 33 f1 ff 48 8d 7b [ 165.309514] RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 [ 165.310211] RAX: 0000000080010003 RBX: ffff888035e285c8 RCX: 0000000000000000 [ 165.311147] RDX: ffff888020450000 RSI: ffffffff8154d8d2 RDI: 0000000000000005 [ 165.312085] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 165.313010] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888035e287e8 [ 165.313932] R13: 0000000000000000 R14: ffff888035e28670 R15: ffff888035e287e8 [ 165.314902] FS: 0000555555e57400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 165.315994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.316785] CR2: 0000001b2d923000 CR3: 0000000040830000 CR4: 0000000000350ef0 [ 165.317750] Call Trace: [ 165.318113] [ 165.318433] merge_sched_in+0x107/0x1110 [ 165.319019] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 165.319852] ? merge_sched_in+0x1110/0x1110 [ 165.320469] ? lock_is_held_type+0xd7/0x130 [ 165.321081] ctx_sched_in+0x2e6/0x770 [ 165.321628] ? lock_acquire+0x1b2/0x530 [ 165.322207] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 165.323078] ? lock_is_held_type+0xd7/0x130 [ 165.323728] perf_event_sched_in+0x75/0x80 [ 165.324333] ctx_resched+0x1ce/0x390 [ 165.324862] __perf_install_in_context+0x285/0x9c0 [ 165.325530] ? ctx_resched+0x390/0x390 [ 165.326091] remote_function+0x125/0x1b0 [ 165.326658] __flush_smp_call_function_queue+0x1df/0x5a0 [ 165.327399] ? perf_duration_warn+0x40/0x40 [ 165.328023] __sysvec_call_function_single+0x92/0x3a0 [ 165.328740] sysvec_call_function_single+0x89/0xc0 [ 165.329405] [ 165.329714] [ 165.330028] asm_sysvec_call_function_single+0x16/0x20 [ 165.330733] RIP: 0010:rcu_lockdep_current_cpu_online+0x30/0x140 [ 165.331572] Code: 7e 81 e2 00 00 f0 00 b8 01 00 00 00 75 0a 8b 15 be 2c 7f 04 85 d2 75 05 e9 2d f8 2e 03 55 53 48 83 ec 08 65 ff 05 60 2b d1 7e 3b ff f3 02 48 c7 c3 40 8c 03 00 48 ba 00 00 00 00 00 fc ff df [ 165.333977] RSP: 0018:ffff88803142f168 EFLAGS: 00000282 [ 165.334671] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 1ffffffff0a1e514 [ 165.335594] RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffffffff850f28a0 [ 165.336530] RBP: ffffffff84e03b60 R08: 0000000000000001 R09: 0000000000000000 [ 165.337457] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 165.338373] R13: 0000000000000000 R14: ffff888008869000 R15: 00007f4fdd910000 [ 165.339325] ? rcu_is_watching+0x11/0xb0 [ 165.339854] rcu_read_lock_sched_held+0x29/0x80 [ 165.340498] trace_ma_write+0x142/0x1f0 [ 165.341043] mas_wr_bnode+0x13a/0x24f0 [ 165.341565] ? lock_downgrade+0x6d0/0x6d0 [ 165.342126] ? unwind_next_frame+0xe06/0x20b0 [ 165.342776] ? mas_spanning_rebalance.isra.0+0x5ce0/0x5ce0 [ 165.343529] ? __is_insn_slot_addr+0x144/0x250 [ 165.344167] ? mark_lock.part.0+0xef/0x2f70 [ 165.344763] ? __lock_acquire+0xbad/0x5e70 [ 165.345377] ? mark_lock.part.0+0xef/0x2f70 [ 165.345972] ? mark_lock.part.0+0xef/0x2f70 [ 165.346576] ? lock_chain_count+0x20/0x20 [ 165.347156] ? lock_chain_count+0x20/0x20 [ 165.347766] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 165.348505] ? stack_trace_save+0x8c/0xc0 [ 165.349098] ? __lock_acquire+0x164d/0x5e70 [ 165.349708] ? __lock_acquire+0xbad/0x5e70 [ 165.350341] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 165.351071] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 165.351815] ? mark_lock.part.0+0xef/0x2f70 [ 165.352446] ? lock_chain_count+0x20/0x20 [ 165.353045] ? lock_is_held_type+0xd7/0x130 [ 165.353638] ? find_held_lock+0x2c/0x110 [ 165.354210] ? lock_release+0x3b2/0x750 [ 165.354765] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 165.355470] ? lock_downgrade+0x6d0/0x6d0 [ 165.356066] ? __lock_acquire+0x164d/0x5e70 [ 165.356704] mas_wr_modify+0x32a/0x1660 [ 165.357251] ? mas_wr_walk+0x84e/0xbd0 [ 165.357818] mas_wr_store_entry.isra.0+0x5c3/0xf90 [ 165.358528] mas_store+0xac/0xf0 [ 165.358999] ? mas_empty_area_rev+0x12d0/0x12d0 [ 165.359650] ? up_write+0x1ac/0x520 [ 165.360174] ? vma_interval_tree_insert_after+0x1dc/0x380 [ 165.360925] dup_mmap+0x7f1/0xfc0 [ 165.361422] ? replace_mm_exe_file+0x4b0/0x4b0 [ 165.362053] ? do_raw_spin_unlock+0x4f/0x220 [ 165.362681] ? lockdep_init_map_type+0x21a/0x7e0 [ 165.363353] ? __init_rwsem+0x129/0x1b0 [ 165.363936] dup_mm+0x91/0x380 [ 165.364387] copy_process+0x6ac6/0x6e20 [ 165.364949] ? lock_is_held_type+0xd7/0x130 [ 165.365612] ? __cleanup_sighand+0xb0/0xb0 [ 165.366253] ? _raw_spin_unlock+0x24/0x40 [ 165.366843] ? do_wp_page+0x1a1/0x2050 [ 165.367437] kernel_clone+0xe7/0x890 [ 165.367990] ? create_io_thread+0xf0/0xf0 [ 165.368594] ? lock_is_held_type+0xd7/0x130 [ 165.369210] ? lock_is_held_type+0xd7/0x130 [ 165.369857] ? find_held_lock+0x2c/0x110 [ 165.370496] ? lock_release+0x3b2/0x750 [ 165.371110] __do_sys_clone+0xba/0x100 [ 165.371689] ? __do_sys_vfork+0xc0/0xc0 [ 165.372305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.373069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.373858] do_syscall_64+0x3b/0x90 [ 165.374422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.375191] RIP: 0033:0x7f4fdd97410b [ 165.375756] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 165.378457] RSP: 002b:00007ffe3e6293c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 165.379575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fdd97410b [ 165.380625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 165.381665] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555e57400 [ 165.382716] R10: 0000555555e576d0 R11: 0000000000000246 R12: 0000000000000001 [ 165.383763] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe3e6294a0 [ 165.384844] [ 165.385184] irq event stamp: 129430 [ 165.385676] hardirqs last enabled at (129429): [] mod_objcg_state+0x3ab/0x9e0 [ 165.386868] hardirqs last disabled at (129430): [] sysvec_call_function_single+0xb/0xc0 [ 165.388185] softirqs last enabled at (129268): [] __irq_exit_rcu+0x11b/0x180 [ 165.389384] softirqs last disabled at (129263): [] __irq_exit_rcu+0x11b/0x180 [ 165.390580] ---[ end trace 0000000000000000 ]--- [ 165.391292] ------------[ cut here ]------------ [ 165.391949] WARNING: CPU: 0 PID: 3833 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 165.393145] Modules linked in: [ 165.393589] CPU: 0 PID: 3833 Comm: syz-executor.4 Tainted: G W 6.0.0-rc7-next-20220930 #1 [ 165.394830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 165.396301] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 165.396951] Code: ff ff e8 08 0e ef ff 65 8b 05 8d 77 ab 7e 31 ff 89 c6 89 04 24 e8 a5 0a ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 e5 0d ef ff <0f> 0b e9 c4 fb ff ff e8 d9 0d ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 165.399299] RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 [ 165.400012] RAX: 0000000080010003 RBX: ffff88806ce3d2c0 RCX: 0000000000000000 [ 165.400977] RDX: ffff888020450000 RSI: ffffffff8156fe4b RDI: 0000000000000005 [ 165.401901] RBP: ffff888035e285c8 R08: 0000000000000005 R09: 0000000000000001 [ 165.402822] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d2c0 [ 165.403746] R13: ffff88806ce00000 R14: ffff888035e28670 R15: ffff888035e287e8 [ 165.404694] FS: 0000555555e57400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 165.405736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.406515] CR2: 0000001b2d923000 CR3: 0000000040830000 CR4: 0000000000350ef0 [ 165.407442] Call Trace: [ 165.407792] [ 165.408123] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 165.408929] ? merge_sched_in+0x1110/0x1110 [ 165.409510] ? lock_is_held_type+0xd7/0x130 [ 165.410104] ctx_sched_in+0x2e6/0x770 [ 165.410628] ? lock_acquire+0x1b2/0x530 [ 165.411173] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 165.411978] ? lock_is_held_type+0xd7/0x130 [ 165.412573] perf_event_sched_in+0x75/0x80 [ 165.413147] ctx_resched+0x1ce/0x390 [ 165.413664] __perf_install_in_context+0x285/0x9c0 [ 165.414311] ? ctx_resched+0x390/0x390 [ 165.414843] remote_function+0x125/0x1b0 [ 165.415393] __flush_smp_call_function_queue+0x1df/0x5a0 [ 165.416145] ? perf_duration_warn+0x40/0x40 [ 165.416727] __sysvec_call_function_single+0x92/0x3a0 [ 165.417410] sysvec_call_function_single+0x89/0xc0 [ 165.418054] [ 165.418365] [ 165.418672] asm_sysvec_call_function_single+0x16/0x20 [ 165.419357] RIP: 0010:rcu_lockdep_current_cpu_online+0x30/0x140 [ 165.420163] Code: 7e 81 e2 00 00 f0 00 b8 01 00 00 00 75 0a 8b 15 be 2c 7f 04 85 d2 75 05 e9 2d f8 2e 03 55 53 48 83 ec 08 65 ff 05 60 2b d1 7e 3b ff f3 02 48 c7 c3 40 8c 03 00 48 ba 00 00 00 00 00 fc ff df [ 165.422485] RSP: 0018:ffff88803142f168 EFLAGS: 00000282 [ 165.423182] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 1ffffffff0a1e514 [ 165.424122] RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffffffff850f28a0 [ 165.425040] RBP: ffffffff84e03b60 R08: 0000000000000001 R09: 0000000000000000 [ 165.425963] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 165.426892] R13: 0000000000000000 R14: ffff888008869000 R15: 00007f4fdd910000 [ 165.427843] ? rcu_is_watching+0x11/0xb0 [ 165.428397] rcu_read_lock_sched_held+0x29/0x80 [ 165.429031] trace_ma_write+0x142/0x1f0 [ 165.429580] mas_wr_bnode+0x13a/0x24f0 [ 165.430104] ? lock_downgrade+0x6d0/0x6d0 [ 165.430670] ? unwind_next_frame+0xe06/0x20b0 [ 165.431284] ? mas_spanning_rebalance.isra.0+0x5ce0/0x5ce0 [ 165.432033] ? __is_insn_slot_addr+0x144/0x250 [ 165.432667] ? mark_lock.part.0+0xef/0x2f70 [ 165.433247] ? __lock_acquire+0xbad/0x5e70 [ 165.433818] ? mark_lock.part.0+0xef/0x2f70 [ 165.434398] ? mark_lock.part.0+0xef/0x2f70 [ 165.434983] ? lock_chain_count+0x20/0x20 [ 165.435550] ? lock_chain_count+0x20/0x20 [ 165.436139] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 165.436842] ? stack_trace_save+0x8c/0xc0 [ 165.437420] ? __lock_acquire+0x164d/0x5e70 [ 165.438006] ? __lock_acquire+0xbad/0x5e70 [ 165.438588] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 165.439320] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 165.440052] ? mark_lock.part.0+0xef/0x2f70 [ 165.440649] ? lock_chain_count+0x20/0x20 [ 165.441224] ? lock_is_held_type+0xd7/0x130 [ 165.441802] ? find_held_lock+0x2c/0x110 [ 165.442377] ? lock_release+0x3b2/0x750 [ 165.442930] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 165.443632] ? lock_downgrade+0x6d0/0x6d0 [ 165.444234] ? __lock_acquire+0x164d/0x5e70 [ 165.444879] mas_wr_modify+0x32a/0x1660 [ 165.445424] ? mas_wr_walk+0x84e/0xbd0 [ 165.446000] mas_wr_store_entry.isra.0+0x5c3/0xf90 [ 165.446666] mas_store+0xac/0xf0 [ 165.447128] ? mas_empty_area_rev+0x12d0/0x12d0 [ 165.447774] ? up_write+0x1ac/0x520 [ 165.448281] ? vma_interval_tree_insert_after+0x1dc/0x380 [ 165.449029] dup_mmap+0x7f1/0xfc0 [ 165.449513] ? replace_mm_exe_file+0x4b0/0x4b0 [ 165.450127] ? do_raw_spin_unlock+0x4f/0x220 [ 165.450758] ? lockdep_init_map_type+0x21a/0x7e0 [ 165.451410] ? __init_rwsem+0x129/0x1b0 [ 165.451969] dup_mm+0x91/0x380 [ 165.452440] copy_process+0x6ac6/0x6e20 [ 165.452993] ? lock_is_held_type+0xd7/0x130 [ 165.453588] ? __cleanup_sighand+0xb0/0xb0 [ 165.454168] ? _raw_spin_unlock+0x24/0x40 [ 165.454725] ? do_wp_page+0x1a1/0x2050 [ 165.455269] kernel_clone+0xe7/0x890 [ 165.455796] ? create_io_thread+0xf0/0xf0 [ 165.456358] ? lock_is_held_type+0xd7/0x130 [ 165.456960] ? lock_is_held_type+0xd7/0x130 [ 165.457537] ? find_held_lock+0x2c/0x110 [ 165.458089] ? lock_release+0x3b2/0x750 [ 165.458643] __do_sys_clone+0xba/0x100 [ 165.459171] ? __do_sys_vfork+0xc0/0xc0 [ 165.459738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.460450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.461157] do_syscall_64+0x3b/0x90 [ 165.461680] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.462362] RIP: 0033:0x7f4fdd97410b [ 165.462874] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 165.465266] RSP: 002b:00007ffe3e6293c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 165.466267] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fdd97410b [ 165.467200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 165.468130] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555e57400 [ 165.469071] R10: 0000555555e576d0 R11: 0000000000000246 R12: 0000000000000001 [ 165.470001] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe3e6294a0 [ 165.470977] [ 165.471301] irq event stamp: 129430 [ 165.471781] hardirqs last enabled at (129429): [] mod_objcg_state+0x3ab/0x9e0 [ 165.472943] hardirqs last disabled at (129430): [] sysvec_call_function_single+0xb/0xc0 [ 165.474177] softirqs last enabled at (129268): [] __irq_exit_rcu+0x11b/0x180 [ 165.475323] softirqs last disabled at (129263): [] __irq_exit_rcu+0x11b/0x180 [ 165.476482] ---[ end trace 0000000000000000 ]--- [ 165.482525] ------------[ cut here ]------------ [ 165.482549] [ 165.482554] ====================================================== [ 165.482558] WARNING: possible circular locking dependency detected [ 165.482563] 6.0.0-rc7-next-20220930 #1 Tainted: G W [ 165.482570] ------------------------------------------------------ [ 165.482574] syz-executor.0/5358 is trying to acquire lock: [ 165.482580] ffffffff853faab8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 165.482623] [ 165.482623] but task is already holding lock: [ 165.482626] ffff88800ede1020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 165.482654] [ 165.482654] which lock already depends on the new lock. [ 165.482654] [ 165.482657] [ 165.482657] the existing dependency chain (in reverse order) is: [ 165.482660] [ 165.482660] -> #3 (&ctx->lock){....}-{2:2}: [ 165.482674] _raw_spin_lock+0x2a/0x40 [ 165.482686] __perf_event_task_sched_out+0x53b/0x18d0 [ 165.482697] __schedule+0xedd/0x2470 [ 165.482711] schedule+0xda/0x1b0 [ 165.482724] futex_wait_queue+0xf5/0x1e0 [ 165.482737] futex_wait+0x28e/0x690 [ 165.482747] do_futex+0x2ff/0x380 [ 165.482756] __x64_sys_futex+0x1c6/0x4d0 [ 165.482766] do_syscall_64+0x3b/0x90 [ 165.482783] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.482796] [ 165.482796] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 165.482810] _raw_spin_lock_nested+0x30/0x40 [ 165.482820] raw_spin_rq_lock_nested+0x1e/0x30 [ 165.482834] task_fork_fair+0x63/0x4d0 [ 165.482851] sched_cgroup_fork+0x3d0/0x540 [ 165.482865] copy_process+0x4183/0x6e20 [ 165.482877] kernel_clone+0xe7/0x890 [ 165.482886] user_mode_thread+0xad/0xf0 [ 165.482896] rest_init+0x24/0x250 [ 165.482908] arch_call_rest_init+0xf/0x14 [ 165.482926] start_kernel+0x4c6/0x4eb [ 165.482941] secondary_startup_64_no_verify+0xe0/0xeb [ 165.482955] [ 165.482955] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 165.482969] _raw_spin_lock_irqsave+0x39/0x60 [ 165.482979] try_to_wake_up+0xab/0x1930 [ 165.482993] up+0x75/0xb0 [ 165.483006] __up_console_sem+0x6e/0x80 [ 165.483023] console_unlock+0x46a/0x590 [ 165.483038] do_con_write+0xc05/0x1d50 [ 165.483050] con_write+0x21/0x40 [ 165.483058] n_tty_write+0x4d4/0xfe0 [ 165.483071] file_tty_write.constprop.0+0x455/0x8a0 [ 165.483082] vfs_write+0x9c3/0xd90 [ 165.483099] ksys_write+0x127/0x250 [ 165.483114] do_syscall_64+0x3b/0x90 [ 165.483131] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.483143] [ 165.483143] -> #0 ((console_sem).lock){-...}-{2:2}: [ 165.483157] __lock_acquire+0x2a02/0x5e70 [ 165.483174] lock_acquire+0x1a2/0x530 [ 165.483190] _raw_spin_lock_irqsave+0x39/0x60 [ 165.483200] down_trylock+0xe/0x70 [ 165.483215] __down_trylock_console_sem+0x3b/0xd0 [ 165.483231] vprintk_emit+0x16b/0x560 [ 165.483247] vprintk+0x84/0xa0 [ 165.483262] _printk+0xba/0xf1 [ 165.483274] report_bug.cold+0x72/0xab [ 165.483290] handle_bug+0x3c/0x70 [ 165.483306] exc_invalid_op+0x14/0x50 [ 165.483323] asm_exc_invalid_op+0x16/0x20 [ 165.483334] group_sched_out.part.0+0x2c7/0x460 [ 165.483352] ctx_sched_out+0x8f1/0xc10 [ 165.483369] __perf_event_task_sched_out+0x6d0/0x18d0 [ 165.483380] __schedule+0xedd/0x2470 [ 165.483393] schedule+0xda/0x1b0 [ 165.483406] futex_wait_queue+0xf5/0x1e0 [ 165.483416] futex_wait+0x28e/0x690 [ 165.483426] do_futex+0x2ff/0x380 [ 165.483436] __x64_sys_futex+0x1c6/0x4d0 [ 165.483445] do_syscall_64+0x3b/0x90 [ 165.483462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.483474] [ 165.483474] other info that might help us debug this: [ 165.483474] [ 165.483477] Chain exists of: [ 165.483477] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 165.483477] [ 165.483492] Possible unsafe locking scenario: [ 165.483492] [ 165.483494] CPU0 CPU1 [ 165.483496] ---- ---- [ 165.483499] lock(&ctx->lock); [ 165.483504] lock(&rq->__lock); [ 165.483511] lock(&ctx->lock); [ 165.483517] lock((console_sem).lock); [ 165.483522] [ 165.483522] *** DEADLOCK *** [ 165.483522] [ 165.483524] 2 locks held by syz-executor.0/5358: [ 165.483531] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 165.483560] #1: ffff88800ede1020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 165.483586] [ 165.483586] stack backtrace: [ 165.483589] CPU: 1 PID: 5358 Comm: syz-executor.0 Tainted: G W 6.0.0-rc7-next-20220930 #1 [ 165.483602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 165.483610] Call Trace: [ 165.483614] [ 165.483618] dump_stack_lvl+0x8b/0xb3 [ 165.483636] check_noncircular+0x263/0x2e0 [ 165.483653] ? format_decode+0x26c/0xb50 [ 165.483669] ? print_circular_bug+0x450/0x450 [ 165.483686] ? simple_strtoul+0x30/0x30 [ 165.483702] ? format_decode+0x26c/0xb50 [ 165.483719] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 165.483736] __lock_acquire+0x2a02/0x5e70 [ 165.483757] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 165.483779] lock_acquire+0x1a2/0x530 [ 165.483796] ? down_trylock+0xe/0x70 [ 165.483813] ? lock_release+0x750/0x750 [ 165.483833] ? vprintk+0x84/0xa0 [ 165.483851] _raw_spin_lock_irqsave+0x39/0x60 [ 165.483862] ? down_trylock+0xe/0x70 [ 165.483885] down_trylock+0xe/0x70 [ 165.483900] ? vprintk+0x84/0xa0 [ 165.483917] __down_trylock_console_sem+0x3b/0xd0 [ 165.483934] vprintk_emit+0x16b/0x560 [ 165.483953] vprintk+0x84/0xa0 [ 165.483970] _printk+0xba/0xf1 [ 165.483981] ? record_print_text.cold+0x16/0x16 [ 165.483997] ? report_bug.cold+0x66/0xab [ 165.484015] ? group_sched_out.part.0+0x2c7/0x460 [ 165.484033] report_bug.cold+0x72/0xab [ 165.484051] handle_bug+0x3c/0x70 [ 165.484068] exc_invalid_op+0x14/0x50 [ 165.484086] asm_exc_invalid_op+0x16/0x20 [ 165.484099] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 165.484120] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 165.484131] RSP: 0018:ffff888040e078f8 EFLAGS: 00010006 [ 165.484140] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 165.484148] RDX: ffff88800feb9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 165.484156] RBP: ffff888035e28000 R08: 0000000000000005 R09: 0000000000000001 [ 165.484163] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ede1000 [ 165.484172] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 165.484182] ? group_sched_out.part.0+0x2c7/0x460 [ 165.484202] ? group_sched_out.part.0+0x2c7/0x460 [ 165.484222] ctx_sched_out+0x8f1/0xc10 [ 165.484241] __perf_event_task_sched_out+0x6d0/0x18d0 [ 165.484255] ? lock_is_held_type+0xd7/0x130 [ 165.484268] ? __perf_cgroup_move+0x160/0x160 [ 165.484279] ? set_next_entity+0x304/0x550 [ 165.484297] ? update_curr+0x267/0x740 [ 165.484315] ? lock_is_held_type+0xd7/0x130 [ 165.484329] __schedule+0xedd/0x2470 [ 165.484346] ? io_schedule_timeout+0x150/0x150 [ 165.484361] ? futex_wait_setup+0x166/0x230 [ 165.484375] schedule+0xda/0x1b0 [ 165.484390] futex_wait_queue+0xf5/0x1e0 [ 165.484402] futex_wait+0x28e/0x690 [ 165.484415] ? futex_wait_setup+0x230/0x230 [ 165.484427] ? lock_is_held_type+0xd7/0x130 [ 165.484440] ? find_held_lock+0x2c/0x110 [ 165.484455] ? futex_hash+0x12/0x200 [ 165.484474] ? futex_wake+0x158/0x490 [ 165.484484] ? fd_install+0x1c7/0x640 [ 165.484503] ? fd_install+0x1f9/0x640 [ 165.484518] do_futex+0x2ff/0x380 [ 165.484529] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 165.484545] __x64_sys_futex+0x1c6/0x4d0 [ 165.484557] ? __x64_sys_futex_time32+0x480/0x480 [ 165.484569] ? trace_rcu_dyntick+0x1a7/0x250 [ 165.484587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.484601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.484616] do_syscall_64+0x3b/0x90 [ 165.484634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.484647] RIP: 0033:0x7fec8247cb19 [ 165.484656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 165.484666] RSP: 002b:00007fec7f9f2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.484677] RAX: ffffffffffffffda RBX: 00007fec8258ff68 RCX: 00007fec8247cb19 [ 165.484685] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fec8258ff68 [ 165.484692] RBP: 00007fec8258ff60 R08: 0000000000000000 R09: 0000000000000000 [ 165.484699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec8258ff6c [ 165.484706] R13: 00007ffeef01c83f R14: 00007fec7f9f2300 R15: 0000000000022000 [ 165.484718] [ 165.545554] WARNING: CPU: 1 PID: 5358 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 165.546249] Modules linked in: [ 165.546490] CPU: 1 PID: 5358 Comm: syz-executor.0 Tainted: G W 6.0.0-rc7-next-20220930 #1 [ 165.547187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 165.548023] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 165.548431] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 165.549778] RSP: 0018:ffff888040e078f8 EFLAGS: 00010006 [ 165.550179] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 165.550707] RDX: ffff88800feb9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 165.551244] RBP: ffff888035e28000 R08: 0000000000000005 R09: 0000000000000001 [ 165.551783] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ede1000 [ 165.552325] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 165.552853] FS: 00007fec7f9f2700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 165.553443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.553886] CR2: 00007fccf780f760 CR3: 000000003a5e2000 CR4: 0000000000350ee0 [ 165.554423] Call Trace: [ 165.554618] [ 165.554793] ctx_sched_out+0x8f1/0xc10 [ 165.555093] __perf_event_task_sched_out+0x6d0/0x18d0 [ 165.555481] ? lock_is_held_type+0xd7/0x130 [ 165.555810] ? __perf_cgroup_move+0x160/0x160 [ 165.556160] ? set_next_entity+0x304/0x550 [ 165.556487] ? update_curr+0x267/0x740 [ 165.556788] ? lock_is_held_type+0xd7/0x130 [ 165.557119] __schedule+0xedd/0x2470 [ 165.557408] ? io_schedule_timeout+0x150/0x150 [ 165.557766] ? futex_wait_setup+0x166/0x230 [ 165.558096] schedule+0xda/0x1b0 [ 165.558357] futex_wait_queue+0xf5/0x1e0 [ 165.558680] futex_wait+0x28e/0x690 [ 165.558956] ? futex_wait_setup+0x230/0x230 [ 165.559284] ? lock_is_held_type+0xd7/0x130 [ 165.559613] ? find_held_lock+0x2c/0x110 [ 165.559929] ? futex_hash+0x12/0x200 [ 165.560216] ? futex_wake+0x158/0x490 [ 165.560503] ? fd_install+0x1c7/0x640 [ 165.560798] ? fd_install+0x1f9/0x640 [ 165.561087] do_futex+0x2ff/0x380 [ 165.561356] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 165.561790] __x64_sys_futex+0x1c6/0x4d0 [ 165.562099] ? __x64_sys_futex_time32+0x480/0x480 [ 165.562463] ? trace_rcu_dyntick+0x1a7/0x250 [ 165.562801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.563195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.563581] do_syscall_64+0x3b/0x90 [ 165.563888] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.564277] RIP: 0033:0x7fec8247cb19 [ 165.564555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 165.565900] RSP: 002b:00007fec7f9f2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.566453] RAX: ffffffffffffffda RBX: 00007fec8258ff68 RCX: 00007fec8247cb19 [ 165.566979] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fec8258ff68 [ 165.567506] RBP: 00007fec8258ff60 R08: 0000000000000000 R09: 0000000000000000 [ 165.568035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec8258ff6c [ 165.568559] R13: 00007ffeef01c83f R14: 00007fec7f9f2300 R15: 0000000000022000 [ 165.569087] [ 165.569263] irq event stamp: 422 [ 165.569515] hardirqs last enabled at (421): [] syscall_enter_from_user_mode+0x1d/0x50 [ 165.570207] hardirqs last disabled at (422): [] __schedule+0x1225/0x2470 [ 165.570855] softirqs last enabled at (304): [] __irq_exit_rcu+0x11b/0x180 [ 165.571481] softirqs last disabled at (295): [] __irq_exit_rcu+0x11b/0x180 [ 165.572107] ---[ end trace 0000000000000000 ]--- 16:53:47 executing program 6: lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) 16:53:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3d0000000000a7ab0000639f7b43896d920ec3560000000000cf62c7bc832ff0f28633d5015b6f01b340dcdb34", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,\x00']) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 16:53:47 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)="08315b8593ac91b1310c2506b2428bceebf6fefe2e632cc3f7b626ed3e7a1e7364ca1db758f2e76168e9425aa949ec186417bb3301ad4c75070a0950ca051252f2b858b2163e1276c6943c4771e4edec03a8e82cdcc7a9ef6a0654d2405793a2ca4aab4fc39cb0", 0x67, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000180)=""/218, 0xda}], 0x1}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)=""/155, 0x9b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f0000000780)=""/139, 0x8b}], 0x6}}], 0x4, 0x10022, 0x0) 16:53:47 executing program 6: lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) 16:53:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @desc4}, &(0x7f0000000ac0)={0x0, "7dd2a7a5b6373bbe7de3b65676cd5ef810a1d9249c749864e6b0dc494786c009286aaf53d60d493f5882f4846f8261c422245093bfdd3abdbbb783c708c751df"}, 0x48, 0x0) keyctl$unlink(0x9, r0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001200)={0x0, 0x0}) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008}, r2, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x0, 0x80, 0x3f, 0x0, 0x100000001, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x10000, 0xff, 0x3ff, 0x4, 0xbfd3, 0x2, 0x3f, 0x0, 0x6}, r2, 0x8, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@keyring) r4 = request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)=',\x00', 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000640)={"19066f6ca8d6dbe88dfd66b3", &(0x7f0000000240)="1967ab9b1ff277efe4a7db14d99acf833e60ef78c2bf74a8f4b619b1", 0x1c, 0x8, &(0x7f0000000500)={0x4, 0x1, 0x8, 0x4, 0x0, 0x1, 0x0, "1f220ee3", 0x2, "37f77a1a", 0xe1, 0xfc, 0x5, "a357f2", "39f20137fd120183b08ad3a65d32e1f6ef76d2dbc978720e64cb5918de03ed6b4a30a9d3e2455aa2fc4142c4c938"}, 0x2, 0x400, 0xe1d9, &(0x7f0000000600)}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "47f4c9a8f7cab58abac08ce00b96009a99a791cd47e0d23c50541577dded42a720532203ea567b8500b0dadf657894fd3fb29f43c0120f9a90d4c6e268cc49ac", 0x19}, 0x48, r4) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r3) add_key(&(0x7f0000000100)='id_resolver\x00', 0x0, &(0x7f0000000200)="dba6665a5bd1e7caad5e80ad860cd319ef6a6b58a8cda3bd0e5f83b509f99f680e0130740e976b81d83eb6b42148bd97d6d470af315e25d4", 0x38, 0xfffffffffffffffa) [ 165.738495] hrtimer: interrupt took 17132 ns 16:53:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1) r2 = io_uring_setup(0x454c, &(0x7f0000000240)) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a111043f9ab3cd82b71275b2aad4f99fce01a0951b7bf59006"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='trusted\x00', 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe) syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0) sendfile(r0, r0, 0x0, 0x5f1) openat(r0, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110) 16:53:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000200)=""/18, 0x12) 16:53:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3d0000000000a7ab0000639f7b43896d920ec3560000000000cf62c7bc832ff0f28633d5015b6f01b340dcdb34", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,\x00']) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) [ 165.856174] tmpfs: Unknown parameter 'se?' [ 165.876569] tmpfs: Unknown parameter 'se?' VM DIAGNOSIS: 16:53:47 Registers: info registers vcpu 0 RAX=0000000000000052 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88806ce095e0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000052 R11=0000000000000001 R12=0000000000000052 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555e57400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d923000 CR3=0000000040830000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 00000000ffffffff YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 0087000000000000 0000aa0000000000 YMM04=0000000000000000 0000000000000000 d1e4074094e8e46c a859716a34e92001 YMM05=0000000000000000 0000000000000000 ad897a2780920250 5f0f6bbe7b0093a8 YMM06=0000000000000000 0000000000000000 0298000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0120789000870000 000000000000aa00 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000028728 RBX=1ffff110081c2f84 RCX=ffffc9000dc3d000 RDX=0000000000040000 RSI=ffffffff813bb183 RDI=0000000000000005 RBP=ffff888040e17cc8 RSP=ffff888040e17bf8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff81460c7c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb671325700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fccf78d7cb0 CR3=000000001a8a6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000