Warning: Permanently added '[localhost]:58770' (ECDSA) to the list of known hosts. 2022/10/04 11:12:44 fuzzer started 2022/10/04 11:12:44 dialing manager at localhost:35095 syzkaller login: [ 46.045791] cgroup: Unknown subsys name 'net' [ 46.141262] cgroup: Unknown subsys name 'rlimit' 2022/10/04 11:13:00 syscalls: 200 2022/10/04 11:13:00 code coverage: enabled 2022/10/04 11:13:00 comparison tracing: enabled 2022/10/04 11:13:00 extra coverage: enabled 2022/10/04 11:13:00 setuid sandbox: enabled 2022/10/04 11:13:00 namespace sandbox: enabled 2022/10/04 11:13:00 Android sandbox: enabled 2022/10/04 11:13:00 fault injection: enabled 2022/10/04 11:13:00 leak checking: enabled 2022/10/04 11:13:00 net packet injection: enabled 2022/10/04 11:13:00 net device setup: enabled 2022/10/04 11:13:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 11:13:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 11:13:00 USB emulation: enabled 2022/10/04 11:13:00 hci packet injection: enabled 2022/10/04 11:13:00 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 11:13:00 802.15.4 emulation: enabled 2022/10/04 11:13:00 fetching corpus: 0, signal 0/0 (executing program) 2022/10/04 11:13:01 starting 8 fuzzer processes 11:13:01 executing program 0: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000000)) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() ptrace$getregs(0xc, r1, 0xfffffffffffffffb, &(0x7f0000000040)=""/246) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x6, &(0x7f0000000140)=""/152) r2 = getpid() ptrace$getregs(0xc, r2, 0x7, &(0x7f0000000200)=""/42) r3 = getpid() migrate_pages(r3, 0xfffffffffffffffd, &(0x7f0000000240)=0x193, &(0x7f0000000280)=0x5) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x10000000) getpid() r4 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000002c0)={{0x2, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0x116, 0x1}, 0x5, 0x0, 0xf41, 0x8, 0x0, r0, 0x3}) ptrace(0x4207, r1) migrate_pages(0xffffffffffffffff, 0x4, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x47) r5 = syz_io_uring_setup(0x753c, &(0x7f00000003c0)={0x0, 0xa332, 0x10, 0x2, 0x1a2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x80010, r5, 0x0) syz_io_uring_setup(0x154d, &(0x7f00000004c0)={0x0, 0xcd46, 0x4, 0x3, 0x229, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)) migrate_pages(r3, 0x10000, &(0x7f00000005c0)=0x1f, &(0x7f0000000600)=0x40) 11:13:01 executing program 1: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) shmctl$SHM_UNLOCK(0x0, 0xc) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x48044) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9fcf063647238317}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc00010}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '}\x10\x80,\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, './}^\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x64040090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r6, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:klogd_exec_t:s0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x42050}, 0x20000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, 0xffffffffffffffff, 0x10000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x114, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xffff}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x64, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xa9a4}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x983489e90650c099}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000080) 11:13:01 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", ""]}, 0x24}}, 0x4000011) r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@caif=@dgm, &(0x7f0000000200)=0x80) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000240)=@req={0x401, 0x9a, 0x8001, 0x1}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x280, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x22}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe29}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbb3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x51) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) r4 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x2, 0x800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c010}, 0x24000830) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r7 = accept$packet(r4, 0x0, &(0x7f00000007c0)) getsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0xea95, 0x6, {{0xd, 0x4, 0x3, 0x4, 0x34, 0x64, 0x0, 0x1, 0x29, 0x0, @local, @private=0xa010100, {[@end, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0xf, [{@broadcast, 0x1}, {@local, 0x6}, {@local, 0x6}]}]}}}}}) 11:13:01 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7, 0x700, 0xb6, 0x7fffffff, {{0x10, 0x4, 0x0, 0x3a, 0x40, 0x65, 0x0, 0x80, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, {[@generic={0x83, 0xb, "bfdd73a83b552c36c0"}, @rr={0x7, 0x1f, 0xf9, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010102, @rand_addr=0x64010100]}]}}}}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={r0, 0x1, 0x6, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r0, 0x29, 0xe6, 0x5, 0x401, 0x4, @private0, @loopback, 0x40, 0x0, 0x400, 0x5}}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x28}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x80c0}, 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) accept4$packet(r3, 0x0, &(0x7f0000000600), 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000880)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=@caif=@util={0x25, "28680e509f6e5366207f2951d0881123"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="5a38f66d52", 0x5}, {&(0x7f0000000700)="f0b498792af905977796dcd1bb5edda3f2314fb8356dacebc6971d3de1c884b3bbb944857e0f4712ea887a84003db83990a7e1a26f43858aedb434ac153ae64571cb21ab733a8f8d7201092613fd449bf1d7b9a3b3ed942a7c18954a6288afaaaf2cd4cbda62313f2bfa046dc7c32b1061af0d6b02bbd1b6cfaf7d9d4c85469ec5cea7f28fc9f5fd5d981851167afc531f3ad687e737b7417f843a082906c71c079a317806e5c4f361a3097eebf2aad05f22ad", 0xb3}], 0x2, &(0x7f0000000800)=[{0x38, 0x111, 0x4, "3442d84e4d8dca92033cebcf3739e51e8142b99a0052837c7e1fd75e92d35bd24917b53c8e36"}], 0x38}, 0x0, 0x4, 0x1}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) r8 = syz_open_dev$vcsu(&(0x7f0000000940), 0x7ff, 0x8000) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x289}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x18014}, 0x40) r9 = syz_io_uring_complete(0x0) sendto$packet(r9, &(0x7f0000000ac0)="df4930cb0b03f1e6d966521b20c6f38c976a445d202bba22c88ea05dc306da601930741d9d0c01febf78523c8ff4fb60c337d41a2a68bf0819473d85b850ac782432670af225ee94a21d02b80e", 0x4d, 0x4000, &(0x7f0000000bc0)={0x11, 0x16, 0x0, 0x1, 0x80, 0x6, @random="0de60258b7e5"}, 0x14) [ 61.849640] audit: type=1400 audit(1664881981.287:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:13:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x80000001, 0x2200) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0xf4, 0x3f, @buffer={0x0, 0xa0, &(0x7f0000000080)=""/160}, &(0x7f0000000140)="1408b00a85fc4ebce3279bc59bac059ec92327f39432e5762cbd5ba689db630094d5a39119bce79375a052c052b8a23e6b736f985b1a5ed7b0a5654399ee1f01d5910e780891dc4468c6f1fb4b533d62b26266ad4a6bc0830dcfc4fcd3bfa4e2c7dc5d618cbb0d6210f072f6218dd3249ffcb899274cc29a7abc52866d993e80c6abc8155e3c48b785031fa25f3700e7fd4ea850d21ca6592fde7fe451929a0dfecac34fff972df70c06e6408a4bb9a72b285b34bd7671a70dfb600343ead7ddc15d883f5faaf8308c8cc951b2483510a8b568a6f92a54b823d8bc784d9c8460d88dd8c098ad0fd388a3942c8c3febb9e386872d", &(0x7f0000000240)=""/177, 0x4, 0x0, 0x1, &(0x7f0000000300)}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000003c0)={0x4b7c, 0x48, "e368fed5b56aad7d8b7ff82f7056656512d3101ca981236a64f9b792726d7a5e80ebd8ff6a63efec708e0ebaf3c0af554c4da121d3f73511f6c7dd896db8fa3a3f735a8cea38dea1"}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xaa) r2 = syz_open_dev$vcsu(&(0x7f0000000480), 0x9, 0x80) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000004c0)) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000500)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000540)=0x1) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000580)=0x4) r3 = accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x80000) accept4$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000006c0)={r4, 0x1, 0x6, @random="2828af772608"}, 0x10) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000700)={0xa}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_io_uring_setup(0x37ab, &(0x7f0000000a40)={0x0, 0xbc44, 0x20, 0x0, 0x297, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_io_uring_complete(r5) 11:13:01 executing program 5: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) r2 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x81, 0x5, 0xff6e, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x20, 0x8000, 0x20}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r4, 0x29, 0xfb, 0x86, 0x4, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x7800, 0x9, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r5, 0x2f, 0x5b, 0xa0, 0x8, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x10, 0x700, 0x47d, 0x2}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000380), &(0x7f00000003c0)=0x14) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x2, 0x3, 0x0, 0x6}]}, 0x10) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000480)) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x3, 0x54, 0x2, 0x6}, {0xb43a, 0x3f, 0x8, 0x4}]}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r7, 0x107, 0xd, &(0x7f0000000540)=""/124, &(0x7f00000005c0)=0x7c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', r4, 0x2f, 0x0, 0x7f, 0x7, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x88, 0x2, 0x1f}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44002}, 0x4048811) setsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f00000007c0)="9fbc4984d8f994b3c663cf8131753fc1c4079d2c0871dc5d5d395f01b972a79e07daa529731445d71454e373205dda35058260ff574f1ab2df1c6607d3b890a341f3fc17d6e88eada9e2fec7d77fdfe7a785f8f8bd57a049ae5e24058f0b8173f18072431d49cbcd09af6f306e7304d25d1e3130715923a27b4a", 0x7a) socket$packet(0x11, 0x2, 0x300) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) 11:13:01 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_KEY={0xe8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b9299081e07578ca42d2505ea55d59ef"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5741b8bfc00f36c6667064db58b22d06"}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x99}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9fe056b3371ffc9b35071effad9e1018"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "06e165a203daaba7c6c9ab2082991904"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "db4df0382fd4371482a9ba5babe924ed"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xc880}, 0x20000000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x1) getrandom(&(0x7f00000003c0), 0x0, 0x2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x91}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x200000c0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000040) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x80}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x85}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}]}, 0x6c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000900), r2) r7 = syz_open_dev$vcsu(&(0x7f0000000940), 0x100000001, 0x323001) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x80, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), r2) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008081) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000c40)="9726df37e0f93d22932bb08d3f2b1317c470081515c98393f26b23b0f19970bfbbb1f9bef9af699bc5126324f95de2c84c1a7cb2896fa9d405a9ccb48e9d3a8673b43976e9cd6eae7ea9ccc5c9c8c017e365bbd45e9857948de4abfea015663951e8acac2c98d63f4f413ad2842becb465f2f2ae14e9f249e28893e3eff075ba507a5fa4f8a04906a5ae88010f8e1907b69bc8df1d5d361aae1d6276f8d38df4811d8aed461e00a0e2ac97648e6cc3230ed1ec555991c568f6bc9be1705c50ac8ed5661b5beb147771e7fd7a70cea696ec13b46f5709509039b9ff316539477de5735fc5be1e789f56da29fec67ebbc529944fd9857002", 0xf7) 11:13:01 executing program 7: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4001044) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) syz_io_uring_setup(0x6935, &(0x7f0000000100)={0x0, 0x9965, 0x1, 0x2, 0x195, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x50, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xc29e}}, 0xfffffff7) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = syz_io_uring_complete(r1) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x9) syz_io_uring_setup(0x765c, &(0x7f0000000240)={0x0, 0x9457, 0x8, 0x3, 0x342, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd=r3, 0x3ff, 0x0, 0x7fff, 0x1f, 0x1}, 0x9) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x80}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CSMA_RETRIES={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xbf}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x454d}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040011}, 0x400) syz_io_uring_setup(0x4a73, &(0x7f00000005c0)={0x0, 0x85a8, 0x1, 0x1, 0x89}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000640), &(0x7f0000000680)) [ 63.144820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.148250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.150618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.163033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.166586] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.169643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.180396] Bluetooth: hci0: HCI_REQ-0x0c1a [ 63.219559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.221503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.224078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.228741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.229889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.231601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.233361] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.234615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.235579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.236567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.236621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.238993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.240240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.242561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.243428] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.244761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.246472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.247361] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.248463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.249451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.252553] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.258387] Bluetooth: hci5: HCI_REQ-0x0c1a [ 63.261892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.261993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.263231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.263999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.266730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.266937] Bluetooth: hci3: HCI_REQ-0x0c1a [ 63.267593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.268791] Bluetooth: hci7: HCI_REQ-0x0c1a [ 63.268803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.276376] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.277363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.279066] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.280566] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.280677] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.289845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.291991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.292050] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.293879] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.296017] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.298041] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.300492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.302306] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 63.305426] Bluetooth: hci1: HCI_REQ-0x0c1a [ 63.307193] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.314919] Bluetooth: hci2: HCI_REQ-0x0c1a [ 63.317403] Bluetooth: hci4: HCI_REQ-0x0c1a [ 63.328550] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.296974] Bluetooth: hci5: command 0x0409 tx timeout [ 65.297004] Bluetooth: hci7: command 0x0409 tx timeout [ 65.297510] Bluetooth: hci3: command 0x0409 tx timeout [ 65.298792] Bluetooth: hci0: command 0x0409 tx timeout [ 65.360277] Bluetooth: hci6: command 0x0409 tx timeout [ 65.360326] Bluetooth: hci2: command 0x0409 tx timeout [ 65.361102] Bluetooth: hci1: command 0x0409 tx timeout [ 65.363511] Bluetooth: hci4: command 0x0409 tx timeout [ 67.344220] Bluetooth: hci0: command 0x041b tx timeout [ 67.345836] Bluetooth: hci3: command 0x041b tx timeout [ 67.346674] Bluetooth: hci5: command 0x041b tx timeout [ 67.347216] Bluetooth: hci7: command 0x041b tx timeout [ 67.408752] Bluetooth: hci1: command 0x041b tx timeout [ 67.409383] Bluetooth: hci2: command 0x041b tx timeout [ 67.409916] Bluetooth: hci4: command 0x041b tx timeout [ 67.410480] Bluetooth: hci6: command 0x041b tx timeout [ 69.393292] Bluetooth: hci7: command 0x040f tx timeout [ 69.393931] Bluetooth: hci5: command 0x040f tx timeout [ 69.394493] Bluetooth: hci3: command 0x040f tx timeout [ 69.395012] Bluetooth: hci0: command 0x040f tx timeout [ 69.456439] Bluetooth: hci6: command 0x040f tx timeout [ 69.456538] Bluetooth: hci4: command 0x040f tx timeout [ 69.458084] Bluetooth: hci2: command 0x040f tx timeout [ 69.458641] Bluetooth: hci1: command 0x040f tx timeout [ 71.440219] Bluetooth: hci0: command 0x0419 tx timeout [ 71.440248] Bluetooth: hci3: command 0x0419 tx timeout [ 71.440799] Bluetooth: hci5: command 0x0419 tx timeout [ 71.441280] Bluetooth: hci7: command 0x0419 tx timeout [ 71.504398] Bluetooth: hci2: command 0x0419 tx timeout [ 71.504435] Bluetooth: hci1: command 0x0419 tx timeout [ 71.504964] Bluetooth: hci4: command 0x0419 tx timeout [ 71.505976] Bluetooth: hci6: command 0x0419 tx timeout [ 125.543839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.549034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.561892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.567441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.570817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 125.572082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.577786] Bluetooth: hci0: HCI_REQ-0x0c1a [ 125.590667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.592387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.613308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.619494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.622439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.623765] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.625958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.627979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.636334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.637190] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.639773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.640039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.641220] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.641981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.642051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.643215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.650700] Bluetooth: hci1: HCI_REQ-0x0c1a [ 125.664675] Bluetooth: hci4: HCI_REQ-0x0c1a [ 125.670591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.671657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.672897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.673875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.677409] Bluetooth: hci5: HCI_REQ-0x0c1a [ 125.691430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.699368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.703386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.705524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.713243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.715004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.716814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.718842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 125.723757] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 125.728254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.728266] Bluetooth: hci2: HCI_REQ-0x0c1a [ 125.734833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 125.739435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.745943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.755954] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.763478] Bluetooth: hci3: HCI_REQ-0x0c1a [ 125.845788] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 125.850776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.865033] Bluetooth: hci7: HCI_REQ-0x0c1a [ 127.633234] Bluetooth: hci0: command 0x0409 tx timeout [ 127.696276] Bluetooth: hci5: command 0x0409 tx timeout [ 127.697108] Bluetooth: hci4: command 0x0409 tx timeout [ 127.697445] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 127.697920] Bluetooth: hci1: command 0x0409 tx timeout [ 127.760566] Bluetooth: hci2: command 0x0409 tx timeout [ 127.825052] Bluetooth: hci3: command 0x0409 tx timeout [ 127.888373] Bluetooth: hci7: command 0x0409 tx timeout [ 129.680247] Bluetooth: hci0: command 0x041b tx timeout [ 129.744337] Bluetooth: hci1: command 0x041b tx timeout [ 129.744908] Bluetooth: hci5: command 0x041b tx timeout [ 129.745506] Bluetooth: hci4: command 0x041b tx timeout [ 129.808305] Bluetooth: hci2: command 0x041b tx timeout [ 129.872369] Bluetooth: hci3: command 0x041b tx timeout [ 129.936315] Bluetooth: hci7: command 0x041b tx timeout [ 131.728231] Bluetooth: hci0: command 0x040f tx timeout [ 131.792243] Bluetooth: hci4: command 0x040f tx timeout [ 131.792279] Bluetooth: hci5: command 0x040f tx timeout [ 131.792831] Bluetooth: hci1: command 0x040f tx timeout [ 131.856233] Bluetooth: hci2: command 0x040f tx timeout [ 131.920862] Bluetooth: hci3: command 0x040f tx timeout [ 131.984218] Bluetooth: hci7: command 0x040f tx timeout [ 132.240249] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 133.776317] Bluetooth: hci0: command 0x0419 tx timeout [ 133.840321] Bluetooth: hci1: command 0x0419 tx timeout [ 133.840883] Bluetooth: hci5: command 0x0419 tx timeout [ 133.841425] Bluetooth: hci4: command 0x0419 tx timeout [ 133.904238] Bluetooth: hci2: command 0x0419 tx timeout [ 133.968350] Bluetooth: hci3: command 0x0419 tx timeout [ 134.032411] Bluetooth: hci7: command 0x0419 tx timeout [ 134.741092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.744113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.746060] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.750011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.751834] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 134.754735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.758646] Bluetooth: hci6: HCI_REQ-0x0c1a [ 136.784368] Bluetooth: hci6: command 0x0409 tx timeout [ 138.832255] Bluetooth: hci6: command 0x041b tx timeout [ 140.880249] Bluetooth: hci6: command 0x040f tx timeout [ 142.928456] Bluetooth: hci6: command 0x0419 tx timeout [ 187.580880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.583586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.584552] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.587715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.588861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.590812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.594068] Bluetooth: hci0: HCI_REQ-0x0c1a [ 187.707861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.709187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.710222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.712271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.713601] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.714535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.728204] Bluetooth: hci1: HCI_REQ-0x0c1a [ 187.822484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.824004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.825989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.828862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.830894] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 187.833727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.842292] Bluetooth: hci4: HCI_REQ-0x0c1a [ 187.901355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.905017] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.905081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.909324] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.934177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.938203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.946134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.950104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.958105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.958962] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.961906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.968440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.974018] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.974733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.975625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.977193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.984518] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.985738] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 187.987663] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 187.988528] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.989214] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.989839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.000288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.001076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.008569] Bluetooth: hci3: HCI_REQ-0x0c1a [ 188.009654] Bluetooth: hci7: HCI_REQ-0x0c1a [ 188.025489] Bluetooth: hci2: HCI_REQ-0x0c1a [ 188.030190] Bluetooth: hci5: HCI_REQ-0x0c1a [ 189.264224] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 189.264949] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.265453] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.266103] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 189.266847] Call Trace: [ 189.267076] [ 189.267312] __schedule+0x893/0x2470 [ 189.267673] ? io_schedule_timeout+0x150/0x150 [ 189.268081] ? do_raw_spin_lock+0x121/0x260 [ 189.268510] ? rwlock_bug.part.0+0x90/0x90 [ 189.268902] schedule+0xda/0x1b0 [ 189.269242] rescuer_thread+0x851/0xdb0 [ 189.269611] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.270057] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.270524] ? lockdep_hardirqs_on+0x79/0x100 [ 189.270930] ? worker_thread+0x1260/0x1260 [ 189.271338] kthread+0x2ed/0x3a0 [ 189.271649] ? kthread_complete_and_exit+0x40/0x40 [ 189.272087] ret_from_fork+0x22/0x30 [ 189.272496] [ 189.272707] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 189.273280] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.273731] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.274402] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 189.275116] Call Trace: [ 189.275366] [ 189.275582] __schedule+0x893/0x2470 [ 189.275943] ? io_schedule_timeout+0x150/0x150 [ 189.276400] ? do_raw_spin_lock+0x121/0x260 [ 189.276792] ? rwlock_bug.part.0+0x90/0x90 [ 189.277208] schedule+0xda/0x1b0 [ 189.277521] rescuer_thread+0x851/0xdb0 [ 189.277883] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.278348] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.278790] ? lockdep_hardirqs_on+0x79/0x100 [ 189.279218] ? worker_thread+0x1260/0x1260 [ 189.279602] kthread+0x2ed/0x3a0 [ 189.279910] ? kthread_complete_and_exit+0x40/0x40 [ 189.280404] ret_from_fork+0x22/0x30 [ 189.280765] [ 189.280976] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 189.281561] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.282014] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.282683] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 189.283414] Call Trace: [ 189.283641] [ 189.288382] __schedule+0x893/0x2470 [ 189.288737] ? io_schedule_timeout+0x150/0x150 [ 189.289169] ? do_raw_spin_lock+0x121/0x260 [ 189.289560] ? rwlock_bug.part.0+0x90/0x90 [ 189.289955] schedule+0xda/0x1b0 [ 189.290293] rescuer_thread+0x851/0xdb0 [ 189.290656] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.291097] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.291578] ? lockdep_hardirqs_on+0x79/0x100 [ 189.291984] ? worker_thread+0x1260/0x1260 [ 189.292435] kthread+0x2ed/0x3a0 [ 189.292745] ? kthread_complete_and_exit+0x40/0x40 [ 189.293209] ret_from_fork+0x22/0x30 [ 189.293568] [ 189.293781] INFO: task netns:6 blocked for more than 143 seconds. [ 189.294320] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.294774] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.295459] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 189.296221] Call Trace: [ 189.296453] [ 189.308368] __schedule+0x893/0x2470 [ 189.308734] ? io_schedule_timeout+0x150/0x150 [ 189.309167] ? do_raw_spin_lock+0x121/0x260 [ 189.309560] ? rwlock_bug.part.0+0x90/0x90 [ 189.309950] schedule+0xda/0x1b0 [ 189.310289] rescuer_thread+0x851/0xdb0 [ 189.310653] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.311093] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.311557] ? lockdep_hardirqs_on+0x79/0x100 [ 189.311956] ? worker_thread+0x1260/0x1260 [ 189.312395] kthread+0x2ed/0x3a0 [ 189.312708] ? kthread_complete_and_exit+0x40/0x40 [ 189.313175] ret_from_fork+0x22/0x30 [ 189.313540] [ 189.313756] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 189.314345] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.314800] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.315468] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 189.316223] Workqueue: 0x0 (kblockd) [ 189.316570] Call Trace: [ 189.316799] [ 189.317009] __schedule+0x893/0x2470 [ 189.317384] ? io_schedule_timeout+0x150/0x150 [ 189.317810] schedule+0xda/0x1b0 [ 189.318123] worker_thread+0x15f/0x1260 [ 189.318531] ? process_one_work+0x16a0/0x16a0 [ 189.318940] kthread+0x2ed/0x3a0 [ 189.319274] ? kthread_complete_and_exit+0x40/0x40 [ 189.319713] ret_from_fork+0x22/0x30 [ 189.320071] [ 189.320328] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 189.320896] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.321371] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.322014] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 189.322746] Call Trace: [ 189.322975] [ 189.323208] __schedule+0x893/0x2470 [ 189.323559] ? io_schedule_timeout+0x150/0x150 [ 189.323964] ? do_raw_spin_lock+0x121/0x260 [ 189.324402] ? rwlock_bug.part.0+0x90/0x90 [ 189.324793] schedule+0xda/0x1b0 [ 189.325105] rescuer_thread+0x851/0xdb0 [ 189.325494] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.325935] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.326401] ? lockdep_hardirqs_on+0x79/0x100 [ 189.326807] ? worker_thread+0x1260/0x1260 [ 189.327216] kthread+0x2ed/0x3a0 [ 189.327526] ? kthread_complete_and_exit+0x40/0x40 [ 189.327964] ret_from_fork+0x22/0x30 [ 189.328370] [ 189.328581] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 189.329196] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.329648] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.330318] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 189.331025] Call Trace: [ 189.331277] [ 189.331489] __schedule+0x893/0x2470 [ 189.331839] ? io_schedule_timeout+0x150/0x150 [ 189.336337] ? mark_held_locks+0x9e/0xe0 [ 189.336718] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.337205] schedule+0xda/0x1b0 [ 189.337527] rcu_tasks_one_gp+0x3db/0xc10 [ 189.337938] rcu_tasks_kthread+0x80/0xa0 [ 189.338341] ? rcu_tasks_postscan+0x10/0x10 [ 189.338734] kthread+0x2ed/0x3a0 [ 189.339050] ? kthread_complete_and_exit+0x40/0x40 [ 189.339519] ret_from_fork+0x22/0x30 [ 189.339885] [ 189.340126] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 189.340744] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.341236] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.341901] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 189.342642] Workqueue: 0x0 (events_highpri) [ 189.343046] Call Trace: [ 189.343305] [ 189.343524] __schedule+0x893/0x2470 [ 189.343879] ? io_schedule_timeout+0x150/0x150 [ 189.344371] schedule+0xda/0x1b0 [ 189.344692] worker_thread+0x15f/0x1260 [ 189.345098] ? process_one_work+0x16a0/0x16a0 [ 189.345546] kthread+0x2ed/0x3a0 [ 189.345860] ? kthread_complete_and_exit+0x40/0x40 [ 189.346330] ret_from_fork+0x22/0x30 [ 189.346693] [ 189.346912] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 189.347524] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.347990] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.348825] task:inet_frag_wq state:I stack:30360 pid:23 ppid:2 flags:0x00004000 [ 189.349578] Call Trace: [ 189.349813] [ 189.350030] __schedule+0x893/0x2470 [ 189.350415] ? io_schedule_timeout+0x150/0x150 [ 189.350828] ? do_raw_spin_lock+0x121/0x260 [ 189.351246] ? rwlock_bug.part.0+0x90/0x90 [ 189.351635] schedule+0xda/0x1b0 [ 189.351954] rescuer_thread+0x851/0xdb0 [ 189.352399] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.352846] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.353324] ? lockdep_hardirqs_on+0x79/0x100 [ 189.353739] ? worker_thread+0x1260/0x1260 [ 189.354125] kthread+0x2ed/0x3a0 [ 189.354484] ? kthread_complete_and_exit+0x40/0x40 [ 189.354928] ret_from_fork+0x22/0x30 [ 189.355314] [ 189.355528] INFO: task writeback:28 blocked for more than 143 seconds. [ 189.356075] Not tainted 6.0.0-rc7-next-20220930 #1 [ 189.360913] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 189.361581] task:writeback state:I stack:30176 pid:28 ppid:2 flags:0x00004000 [ 189.362323] Call Trace: [ 189.362552] [ 189.362764] __schedule+0x893/0x2470 [ 189.363115] ? io_schedule_timeout+0x150/0x150 [ 189.363547] ? do_raw_spin_lock+0x121/0x260 [ 189.363938] ? rwlock_bug.part.0+0x90/0x90 [ 189.364389] schedule+0xda/0x1b0 [ 189.364704] rescuer_thread+0x851/0xdb0 [ 189.365068] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.365533] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 189.365976] ? lockdep_hardirqs_on+0x79/0x100 [ 189.366408] ? worker_thread+0x1260/0x1260 [ 189.366792] kthread+0x2ed/0x3a0 [ 189.367103] ? kthread_complete_and_exit+0x40/0x40 [ 189.367567] ret_from_fork+0x22/0x30 [ 189.367927] [ 189.477090] [ 189.477090] Showing all locks held in the system: [ 189.477738] 2 locks held by kworker/u4:0/9: [ 189.478122] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 189.480804] #1: ffff88800861fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 189.483385] 1 lock held by rcu_tasks_kthre/11: [ 189.484364] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 189.486211] 1 lock held by khungtaskd/25: [ 189.486970] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 189.488886] 2 locks held by kworker/u4:2/33: [ 189.489729] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 189.491637] #1: ffff8880092d7db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 189.494069] 1 lock held by kmemleak/54: [ 189.495049] 1 lock held by in:imklog/188: [ 189.495884] 2 locks held by kworker/u4:5/332: [ 189.496843] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 189.498928] #1: ffff88803663fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 189.501329] 1 lock held by syz-executor.4/5978: [ 189.502301] 1 lock held by syz-executor.7/5979: [ 189.503252] #0: ffffffff85950d28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e5/0xca0 [ 189.505329] 2 locks held by syz-executor.6/5988: [ 189.506310] 2 locks held by syz-executor.0/5989: [ 189.507257] #0: ffffffff85945350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 189.509305] #1: ffffffff85950d28 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x11/0x50 [ 189.511030] 2 locks held by syz-executor.2/5992: [ 189.512029] #0: ffffffff85945350 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 189.514377] #1: ffffffff85950d28 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x11/0x50 [ 189.515169] 1 lock held by modprobe/6093: [ 189.515536] [ 189.515699] ============================================= [ 189.515699] [ 189.648257] Bluetooth: hci0: command 0x0409 tx timeout [ 189.776290] Bluetooth: hci1: command 0x0409 tx timeout [ 189.904335] Bluetooth: hci4: command 0x0409 tx timeout [ 190.032605] Bluetooth: hci3: command 0x0409 tx timeout [ 190.032637] Bluetooth: hci7: command 0x0409 tx timeout [ 190.096294] Bluetooth: hci5: command 0x0409 tx timeout [ 190.096329] Bluetooth: hci2: command 0x0409 tx timeout [ 191.696243] Bluetooth: hci0: command 0x041b tx timeout [ 191.825284] Bluetooth: hci1: command 0x041b tx timeout [ 191.952254] Bluetooth: hci4: command 0x041b tx timeout [ 192.080249] Bluetooth: hci7: command 0x041b tx timeout [ 192.081419] Bluetooth: hci3: command 0x041b tx timeout [ 192.144314] Bluetooth: hci5: command 0x041b tx timeout [ 192.144335] Bluetooth: hci2: command 0x041b tx timeout [ 193.745273] Bluetooth: hci0: command 0x040f tx timeout [ 193.872315] Bluetooth: hci1: command 0x040f tx timeout [ 194.001225] Bluetooth: hci4: command 0x040f tx timeout [ 194.128353] Bluetooth: hci3: command 0x040f tx timeout [ 194.128914] Bluetooth: hci7: command 0x040f tx timeout [ 194.192286] Bluetooth: hci2: command 0x040f tx timeout [ 194.193456] Bluetooth: hci5: command 0x040f tx timeout [ 195.792214] Bluetooth: hci0: command 0x0419 tx timeout [ 195.920353] Bluetooth: hci1: command 0x0419 tx timeout [ 196.048386] Bluetooth: hci4: command 0x0419 tx timeout [ 196.176247] Bluetooth: hci7: command 0x0419 tx timeout [ 196.176857] Bluetooth: hci3: command 0x0419 tx timeout [ 196.240273] Bluetooth: hci5: command 0x0419 tx timeout [ 196.241593] Bluetooth: hci2: command 0x0419 tx timeout [ 196.372644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.375114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.377546] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.381719] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.383895] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 196.385856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.391748] Bluetooth: hci6: HCI_REQ-0x0c1a [ 198.416334] Bluetooth: hci6: command 0x0409 tx timeout VM DIAGNOSIS: 11:15:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880375d1b00 RCX=0000000000010000 RDX=1ffff11006eba393 RSI=00000000000f4240 RDI=ffffffff8486bd60 RBP=ffff888010045040 RSP=ffff88806ce09d90 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000000f4240 R13=0000000000000002 R14=ffff8880375d1c38 R15=dffffc0000000000 RIP=ffffffff84254281 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe76a8ff028 CR3=0000000037a0a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005b R11=0000000000000001 R12=000000000000005b R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6be27a5370 CR3=00000000182dc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 YMM03=0000000000000000 0000000000000000 ff00000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 ff00000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000