Warning: Permanently added '[localhost]:21657' (ECDSA) to the list of known hosts. 2022/10/02 23:09:16 fuzzer started 2022/10/02 23:09:16 dialing manager at localhost:35095 syzkaller login: [ 40.730042] cgroup: Unknown subsys name 'net' [ 40.843576] cgroup: Unknown subsys name 'rlimit' 2022/10/02 23:09:31 syscalls: 2215 2022/10/02 23:09:31 code coverage: enabled 2022/10/02 23:09:31 comparison tracing: enabled 2022/10/02 23:09:31 extra coverage: enabled 2022/10/02 23:09:31 setuid sandbox: enabled 2022/10/02 23:09:31 namespace sandbox: enabled 2022/10/02 23:09:31 Android sandbox: enabled 2022/10/02 23:09:31 fault injection: enabled 2022/10/02 23:09:31 leak checking: enabled 2022/10/02 23:09:31 net packet injection: enabled 2022/10/02 23:09:31 net device setup: enabled 2022/10/02 23:09:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 23:09:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 23:09:31 USB emulation: enabled 2022/10/02 23:09:31 hci packet injection: enabled 2022/10/02 23:09:31 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 23:09:31 802.15.4 emulation: enabled 2022/10/02 23:09:31 fetching corpus: 50, signal 26229/28039 (executing program) 2022/10/02 23:09:31 fetching corpus: 100, signal 41338/44772 (executing program) 2022/10/02 23:09:31 fetching corpus: 150, signal 51968/56856 (executing program) 2022/10/02 23:09:31 fetching corpus: 200, signal 56963/63344 (executing program) 2022/10/02 23:09:31 fetching corpus: 250, signal 63049/70808 (executing program) 2022/10/02 23:09:31 fetching corpus: 300, signal 67422/76553 (executing program) 2022/10/02 23:09:32 fetching corpus: 350, signal 71072/81575 (executing program) 2022/10/02 23:09:32 fetching corpus: 400, signal 74265/86123 (executing program) 2022/10/02 23:09:32 fetching corpus: 450, signal 76672/89852 (executing program) 2022/10/02 23:09:32 fetching corpus: 500, signal 79951/94375 (executing program) 2022/10/02 23:09:32 fetching corpus: 550, signal 85370/100828 (executing program) 2022/10/02 23:09:32 fetching corpus: 600, signal 89431/105956 (executing program) 2022/10/02 23:09:32 fetching corpus: 650, signal 92695/110293 (executing program) 2022/10/02 23:09:32 fetching corpus: 700, signal 95380/114083 (executing program) 2022/10/02 23:09:33 fetching corpus: 750, signal 97792/117599 (executing program) 2022/10/02 23:09:33 fetching corpus: 800, signal 100342/121218 (executing program) 2022/10/02 23:09:33 fetching corpus: 850, signal 104542/126241 (executing program) 2022/10/02 23:09:33 fetching corpus: 900, signal 105909/128725 (executing program) 2022/10/02 23:09:33 fetching corpus: 950, signal 108310/132089 (executing program) 2022/10/02 23:09:33 fetching corpus: 1000, signal 110969/135638 (executing program) 2022/10/02 23:09:33 fetching corpus: 1050, signal 112714/138369 (executing program) 2022/10/02 23:09:33 fetching corpus: 1100, signal 115001/141532 (executing program) 2022/10/02 23:09:34 fetching corpus: 1150, signal 117558/144879 (executing program) 2022/10/02 23:09:34 fetching corpus: 1200, signal 119367/147543 (executing program) 2022/10/02 23:09:34 fetching corpus: 1250, signal 120392/149575 (executing program) 2022/10/02 23:09:34 fetching corpus: 1300, signal 121855/151965 (executing program) 2022/10/02 23:09:34 fetching corpus: 1350, signal 123654/154608 (executing program) 2022/10/02 23:09:34 fetching corpus: 1400, signal 125459/157191 (executing program) 2022/10/02 23:09:34 fetching corpus: 1450, signal 126272/158973 (executing program) 2022/10/02 23:09:34 fetching corpus: 1500, signal 128364/161785 (executing program) 2022/10/02 23:09:34 fetching corpus: 1550, signal 129751/163998 (executing program) 2022/10/02 23:09:35 fetching corpus: 1600, signal 131517/166478 (executing program) 2022/10/02 23:09:35 fetching corpus: 1650, signal 134440/169882 (executing program) 2022/10/02 23:09:35 fetching corpus: 1700, signal 137048/172940 (executing program) 2022/10/02 23:09:35 fetching corpus: 1750, signal 138328/174996 (executing program) 2022/10/02 23:09:35 fetching corpus: 1800, signal 139657/177076 (executing program) 2022/10/02 23:09:35 fetching corpus: 1850, signal 140845/179019 (executing program) 2022/10/02 23:09:35 fetching corpus: 1900, signal 141648/180656 (executing program) 2022/10/02 23:09:35 fetching corpus: 1950, signal 142655/182383 (executing program) 2022/10/02 23:09:35 fetching corpus: 2000, signal 144202/184570 (executing program) 2022/10/02 23:09:36 fetching corpus: 2050, signal 145390/186404 (executing program) 2022/10/02 23:09:36 fetching corpus: 2100, signal 147226/188673 (executing program) 2022/10/02 23:09:36 fetching corpus: 2150, signal 147800/190077 (executing program) 2022/10/02 23:09:36 fetching corpus: 2200, signal 148697/191683 (executing program) 2022/10/02 23:09:36 fetching corpus: 2250, signal 149731/193344 (executing program) 2022/10/02 23:09:36 fetching corpus: 2300, signal 151021/195217 (executing program) 2022/10/02 23:09:36 fetching corpus: 2350, signal 152460/197180 (executing program) 2022/10/02 23:09:36 fetching corpus: 2400, signal 153352/198658 (executing program) 2022/10/02 23:09:36 fetching corpus: 2450, signal 154224/200188 (executing program) 2022/10/02 23:09:37 fetching corpus: 2500, signal 155428/201925 (executing program) 2022/10/02 23:09:37 fetching corpus: 2550, signal 156316/203406 (executing program) 2022/10/02 23:09:37 fetching corpus: 2600, signal 157188/204916 (executing program) 2022/10/02 23:09:37 fetching corpus: 2650, signal 157946/206324 (executing program) 2022/10/02 23:09:37 fetching corpus: 2700, signal 159043/207915 (executing program) 2022/10/02 23:09:37 fetching corpus: 2750, signal 160018/209454 (executing program) 2022/10/02 23:09:37 fetching corpus: 2800, signal 160625/210703 (executing program) 2022/10/02 23:09:37 fetching corpus: 2850, signal 161186/211956 (executing program) 2022/10/02 23:09:37 fetching corpus: 2900, signal 162500/213643 (executing program) 2022/10/02 23:09:38 fetching corpus: 2950, signal 163157/214959 (executing program) 2022/10/02 23:09:38 fetching corpus: 3000, signal 163818/216280 (executing program) 2022/10/02 23:09:38 fetching corpus: 3050, signal 164422/217558 (executing program) 2022/10/02 23:09:38 fetching corpus: 3100, signal 165747/219192 (executing program) 2022/10/02 23:09:38 fetching corpus: 3150, signal 167367/220989 (executing program) 2022/10/02 23:09:38 fetching corpus: 3200, signal 169064/222731 (executing program) 2022/10/02 23:09:38 fetching corpus: 3250, signal 170363/224321 (executing program) 2022/10/02 23:09:38 fetching corpus: 3300, signal 170812/225443 (executing program) 2022/10/02 23:09:39 fetching corpus: 3350, signal 171416/226560 (executing program) 2022/10/02 23:09:39 fetching corpus: 3400, signal 171970/227704 (executing program) 2022/10/02 23:09:39 fetching corpus: 3450, signal 172851/228954 (executing program) 2022/10/02 23:09:39 fetching corpus: 3500, signal 173605/230150 (executing program) 2022/10/02 23:09:39 fetching corpus: 3550, signal 174118/231207 (executing program) 2022/10/02 23:09:39 fetching corpus: 3600, signal 174695/232303 (executing program) 2022/10/02 23:09:39 fetching corpus: 3650, signal 175720/233634 (executing program) 2022/10/02 23:09:39 fetching corpus: 3700, signal 176293/234715 (executing program) 2022/10/02 23:09:39 fetching corpus: 3750, signal 176820/235776 (executing program) 2022/10/02 23:09:40 fetching corpus: 3800, signal 177413/236855 (executing program) 2022/10/02 23:09:40 fetching corpus: 3850, signal 178126/237959 (executing program) 2022/10/02 23:09:40 fetching corpus: 3900, signal 179335/239305 (executing program) 2022/10/02 23:09:40 fetching corpus: 3950, signal 179962/240346 (executing program) 2022/10/02 23:09:40 fetching corpus: 4000, signal 181193/241725 (executing program) 2022/10/02 23:09:40 fetching corpus: 4050, signal 181801/242781 (executing program) 2022/10/02 23:09:40 fetching corpus: 4100, signal 182446/243796 (executing program) 2022/10/02 23:09:40 fetching corpus: 4150, signal 183016/244745 (executing program) 2022/10/02 23:09:40 fetching corpus: 4200, signal 183459/245670 (executing program) 2022/10/02 23:09:41 fetching corpus: 4250, signal 184036/246693 (executing program) 2022/10/02 23:09:41 fetching corpus: 4300, signal 185064/247787 (executing program) 2022/10/02 23:09:41 fetching corpus: 4350, signal 186171/248939 (executing program) 2022/10/02 23:09:41 fetching corpus: 4400, signal 187691/250273 (executing program) 2022/10/02 23:09:41 fetching corpus: 4450, signal 188501/251284 (executing program) 2022/10/02 23:09:41 fetching corpus: 4500, signal 188989/252179 (executing program) 2022/10/02 23:09:41 fetching corpus: 4550, signal 190255/253335 (executing program) 2022/10/02 23:09:41 fetching corpus: 4600, signal 190466/254115 (executing program) 2022/10/02 23:09:42 fetching corpus: 4650, signal 191227/255024 (executing program) 2022/10/02 23:09:42 fetching corpus: 4700, signal 191534/255867 (executing program) 2022/10/02 23:09:42 fetching corpus: 4750, signal 191939/256690 (executing program) 2022/10/02 23:09:42 fetching corpus: 4800, signal 192437/257572 (executing program) 2022/10/02 23:09:42 fetching corpus: 4850, signal 193058/258532 (executing program) 2022/10/02 23:09:42 fetching corpus: 4900, signal 193652/259498 (executing program) 2022/10/02 23:09:42 fetching corpus: 4950, signal 194010/260252 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/261177 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/261851 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/262510 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/263178 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/263830 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/264512 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/265153 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/265793 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/266488 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/267136 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/267795 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/268464 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/269110 (executing program) 2022/10/02 23:09:42 fetching corpus: 4997, signal 194783/269763 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/270428 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/271131 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/271811 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/272464 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/273159 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/273859 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/274519 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/275166 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/275804 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/276444 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/277143 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/277792 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/278450 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/279123 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/279803 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/280442 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/281112 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/281784 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/282408 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/283036 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/283702 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/284369 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/285021 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/285676 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/286324 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/286989 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/287652 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/288319 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/288966 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/289608 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/289821 (executing program) 2022/10/02 23:09:43 fetching corpus: 4997, signal 194783/289821 (executing program) 2022/10/02 23:09:46 starting 8 fuzzer processes 23:09:46 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20}, 0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10b, 0x6, 0xac, 0x137, 0x288, 0x10001, 0x46, 0x2}, "397f5f454ee9d309c87d72e59f68aa8d9510e6518a0bef258d7b0deaccf6f21036f895983b1c1ebe3223cc80d67dc5a3ce4733f0a88c1db23b8d440648ac7724c3440844ade464375ab87babe62b44d2e0b252cd3e69e55d58f797bcc4aff3b4bdbfbf9ec3ed55dcefb453ca56358f18c9e984d575486f93558b5685d7a2d49ebf6b6fc06527191514600db10624baea440e718b658b6b3b5c82dedbd6b1e8aae1732da9691cd3caec36e0d51e88a1d1ccae9eafcaa85442b243f845135a49f14a7fc2383c3c2b02abf74ff34a960b7aea7141b4f53f6b2c1d3fc80a3c96283825b7c02bb0d3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x706) r1 = syz_mount_image$msdos(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x40, 0x6, &(0x7f0000000b40)=[{&(0x7f0000000800)="54e0cf542611000fcd024587c9ac04e692c91ebf442a15d06d9b725c29057d0e34aef0383473bf4e9622806dace4bbc40854b26356638960ff65f46632b9668f36f5e77f4127042c2459f23a798d3061ffaf6c5c0fe9d54180922d9c20234cdcf8ed1462184dadc8d79fae25e289af2d9b79efe8a884529983fe0982a3541d21c0dfff6a", 0x84, 0x1}, {&(0x7f00000008c0)="0ca186f516b7bcb79109587feb061b06d91ef07e786ca552a7098accf32c45017550b43c3c81fa0900ddf3dd2fc9f9e113e7decb727e254427509ba48255dd42c812e9f28ba3cd0554ca3574a0c09a10261accde53ccb8c0363b50eb47f713cf16769811e5665e6cd009c4fd8249df1decd311273214935c", 0x78, 0x6}, {&(0x7f0000000940)="5d3644e43499444431b3c27ae0618cefac84ac264f2c6da7ff89", 0x1a, 0x9}, {&(0x7f0000000980)="16349e4ee5ceec4040161d5404a649a8f3145ec62d07e3c263e8b4d69a75dbfd090401446c7cc876923b708c2ff95e9dd973f8ed75b0e98275248d5bbbe0e93cbb32300a9e6703dc3af0945b9894ce91bf5cda1e4869b898ad1bcc51d37000c4ad51eb870dca4cfdb2", 0x69, 0x8d8}, {&(0x7f0000000a00)="8e39c39c21efecc1d42ad23260d8b9d0434cb7d58aafff002289b7db39b5331073dbff6f4fe5ef9146a785fe89f9ddd063a1e7c795d87cdbf2295af8b2e1887e58b3f1cae71b682a4326a6e554fa6b283e69b85824fb92bd2fc71ea8fb7af7e9c6ba4f833236bd3fa4d2a1d281eeb882b0d7fcbde79e233391b70242644f81c3a76cd68170345eb9cad4ab23fb276f1d680422ad132ca7754788f9b710a23beb5e7a95a23ebeb4d26888a140a66992b3071f567893e603e17393685497edb58186994d4b1c9da33b805a323ee6678577df7f3fcea8c7a03a5dc956534566c0af3e3f4d583c11", 0xe6, 0xff}, {&(0x7f0000000b00), 0x0, 0x3}], 0x93018, &(0x7f0000000c00)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@errors_remount}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_type}, {@fsname={'fsname', 0x3d, '-.)^-$'}}, {@dont_appraise}, {@euid_gt={'euid>', 0xee00}}, {@seclabel}]}) tee(r1, r0, 0xe3, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FIONCLEX(r2, 0x5450) futimesat(r1, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={{0x77359400}, {0x0, 0xea60}}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x3f7, 0x1, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8811}, 0x1) getsockname(r0, &(0x7f0000000e40)=@ax25={{0x3, @bcast}, [@bcast, @bcast, @default, @remote, @rose, @null, @default, @default]}, &(0x7f0000000ec0)=0x80) r3 = syz_mount_image$vfat(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x4, 0xa, &(0x7f0000002440)=[{&(0x7f0000000f80)="6308509c6a45a60a5f7f04a2e83fa22c366e6af8ab24f786794408af66dae94db958febb1776f8766ca61dbd347de43ef9bb01b106a4153f160528", 0x3b, 0x7}, {&(0x7f0000000fc0)="5df75d2aa7c8ed9d73c4bb169bca6a3cd217d508bc717e99d78d28faaae6426fd53af5b659", 0x25, 0x4}, {&(0x7f0000001000)="e87ca28478442e3657809abaff2ea8e8683746", 0x13, 0x7}, {&(0x7f0000001040)="043d73a17041f46c557cc3393126dcf5921961132df110df472693f59127411521f73e65acfaff70c3b7b53d32b7298ce1de760cac5adce89743c470010720480b382f872784f684eaade5fc2a92e2d99a510cb7112cd39e12140c9f7956f14c4db45e98e2584930440732b0f6dac7fb3a6bff538da7ef35c262a46563892ab0694b4d25968b56c9e1cc9b03a3899c1e9e4582e6167ba7f6c32423ec7e447242a216e8442fc00d283420de769a97b6c71f3347571bfd", 0xb6, 0x4}, {&(0x7f0000001100)="45f16d7c27b4d91b4b007304f8c9759683c7c3e4dbae18f10b4f003161a28a92930b6e3dbd73827d17162870049ad68283a089a6c1700bb59dd0e84b23817ff1697023b93db8adf7a211cf386214359ab163150efca7b5cc3ae782ee82cabd2b55a7c4265d779a32c3eae3e49b8d108aa297ea71126b277cf63dac2f37a29fddddc6348c0e65d5bc0867fc06e372f79649bb78cc1b62caf69551796a537b69f1598f23bfd28cd46df8c118a9894d80efc490ce21881e32f26ec7057b5afb7f212a97aadf89e89311cc42b803499ef13528622c22b1ceff7b48f414f65c4755e9bf3c4f0821c5f7b7712a6d819ef60d08", 0xf0, 0x6}, {&(0x7f0000001200)="e13d09edeac6afb31ae8bef51ffd79664e9aaf95a0fd648b45fe717f07cf56b78da486647b549433ba3c8e2742e97e96579337866e9b594daf8a1a84b2456cd95d6765d0816fc0b24d7afa0c2fc37fa4889adcc9a44cd5872407a98728e27611f3556bccf596597160427950", 0x6c, 0x4}, {&(0x7f0000001280)="52bec19a", 0x4, 0x2}, {&(0x7f00000012c0)="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", 0xfe, 0x5}, {&(0x7f00000013c0)="35b3614b2d34d15604e3d18069b6ab061a32ed915806676df6e9f2c57a510a4ebd03b2276c3a4658169ea73a34b0d0f47810e68edbc669d10fbc5df5890df36df029c1eab8023792767fb4bb187cb062bba4cb4d09813f1a4ac430876bc1699e0ec25ed0750afd7f", 0x68, 0x1318}, {&(0x7f0000001440)="bf51e9b4ce3d88c81c2f8bd5ec37323e454acc77ef58a82de946cfe4a3b9c6cf0d2d34f5c8b7f8c3d20b7f8c30e9a8ef9c98d0248cc28248b262d250f6d3bc953698f0779cd18c9954703637f865c4786c42f8f9a6644e32bc87063c6c0b9aa0a09021b4130e3dca076bd8a3587a5f9f12004307f96116b9dd693552f2715c8eab42c43f957cf505944936e25844c45af2c62c834f4846aaf7f146a6a1d7d10caffbb74e55084a4fabddd01b7b8789f29fded301749db969964e152ed4f20ad83a4b74e3cd81f814b82d891b9de90e6a58ee1d40ba83917dbfc1f112452cb1c361b0a0c95ef1746a5450f526deb5757a4f15edd1679c0589e5c1d03449cfb63d2fa6aa685d6ed1c3fcea77dc03bb14fe82c60de974847d449b281a8e7ce264beebd5191b992c798ee7afc5a7ede1f645aeb55d0da78d18e78efffd5e17ec19401cd3e2889d151817dda04f862af29b76352fee61e40224c68fd9e30316bb411deb540d91d047792709e012167aef99d810058bb724b9ae57dccc9647f24c97d645a0e22600598167bfeaa705c4eab7bf56c1b2721a60d1eaf3d72da54b895a1d92af1d88b0bc0d163f09f0d0a14c695ae4411d830bf1a3d4eb444860b56ce66f4de9e3151ab414d50439abe68dfe12069e0862e9097c5eb4a61422528b62a8195a4d16239ee6e42b2f2edd5a48f98dfdf19682f7cd42c2f4d30bfcfb4010a306d2557d5ac7518eca0437cc1ef24c81ddaa69ec027efc150bf8acba6c5513a1a2d9492fdef830e173cea91c877ea5a34f77ed0dab9119e135a76360276391ad444e30f577586cbe9f5250699b6dda4beab626d062cc2403436a7bf53842e7615ac71ee4bc9f6cca41f61aafcf3a48f98768b8cbfdea7875636ed9c4b6cf40bea70644fa536f1d7d81635c59c6309b3b346e15c56ee983a233c9923a9ed88080ee5747384f44a7f9265b290e250a0f02c65f8aa9c4ecfeeeca9e45465ddc3bec0aeb05f6319248bcab40c4e8a1da150cf97090f0dc76306ef13e398b9d58ea8dbe496247f765ff81f2fddcf77a9650bc9adf87d1656be591db1d75d47f321a053df9a8e4d7ff17926ed2a4277882ca0243e5a656f1f781ba25181965a111fc25bb291e4dba847710cd3981c85756637efa91f789ea6289aea135c0bc62b33069050018b66c9d068435859d8a3eddd90bfc593b025c145df6a3612384b26b23177a90608e2ed09ee7ff2de258f8f456e5e420d50858401db1656910a92bb29e07e45d81d4652a64075c123380b297c6866d5d6352a2e087040b8060bb71b34adb5807519d6284019b80d41819659173f7b61e45a81c51686d88003e2c25e14b2dee1a6d1c790b6626f8aab15cc04c7514fd0f76bc1aea41a09878d60bdaed72eb519952b7f135f8972ddce63e50880fa9e37ffbd4615737e974c92a814203f16d4e4afd0f822179fbd0e50e4676cb9c74e97f172cefc9a3ec7eb21b04dce4693a4f2cc8bb71a60b56be5fc400f39f2303c3c38b075736e22bb6e25bd454b9fe7dd848a71a27d046b5decf121a055b412e5b9b820f84af5ffa58418299cb4e81e0de52d796c9ada228fbda2e4277ffec01c2e37d630d2ae5aae0ace84ead0c96f9be2d50b4008922907f0f869727d156ed7fd26b2d657f0b99afc0735ae443450ad49e52dbaa0f9f27575ce9fc284bfe34917ed8b36a86874405fbc9515b4cf2cebfd4020248891ca963a3af0d676edbd395a6e66a06f281c994d26f672b010b1c1a4209c92c3767c203f5d19d3c7628a65a675fc1a174d82c60bf178417d108fe012ab84b1908505e459ed8508b5205b8ccd9f3c1fc810f439a162c6b22b1b8a65fef7548bf38854f2c429bbcdff1f162aae01da532a214fd95f8eb6258dd2de24c250b836d56b8d52993d9d56ba475995d5f190c860c6222d254a4924c1f617e2703805a0f9c41cdcdfd68fa1c9651c4c584a9c88d4b67c8401540cf537324a82be03037e7853ab3e3627440a5118a908ab6b63a168a38c3c53fcbe94b583b5bed9789d7ca6b03411f4c4ab137bd4e416410a0aeef070543897be19c674c6378c5f20d0684096e8672e753c245b132d6ef94dd5b42663b8113734cdbc00575c030177a4c956afadddcc85321fff187797a7e94acaab33c734264b04250865180aeac05c145a20f580079d97c158bc9be1c46d3d59c8175d95e83cbfe31d77ff3d339f56dcd62a708ee4b72edb898c6b6b6d6ac903300d81ec7024e76a951dd43fcfd970edb2a3a42d97c373bea6887116248fa6cdaa5402d9f53141bd95c12c4e35a6e9c2d00083208e09a1a5de8944afd3f307023b388bf80e90144df85d0a0f18e401a6f99a226270415336f7777e76cb7e8876dcab1f1953f36c9faa38e63d831d1de0b5d3f1692d85ad0448c8696f76fa70d862a665c82a1e515ffb99d2d933ba66a5b922f011eb7bd589b544d255b42561b306ab34e325a3601cfdbabf1034048dde564f6ba91990b74ac16f3f4929b44e0cba104a99d4f22376444fc5c17cc5a3ebb4adb94cf2c61d88d4ebae3ff86607048cde71454caca34c8085a88931e481c5eb92ad97c0e91326c0cab159ab9a4fc5f4e2c3cda5db39eeec3b5e1f8bf9fd8c89bc2dc13989f8aecd2f837aa5bbe3983b3579b02f1004e0df266883c1a9313742b0385cb77a3a06edf15de9dd71b6b1d3d44a249344cbdcb168ff4397388efa8a902b4021ca5e035d0e77a810f3472bc8396381e12666e119c59c30d773a56de269fda846f15a16e703debc2f23e57ea6d80126a366aa7f0a50bae9a78cab6aac8f83459eb9c01ab507e62b13c0434b6c35b70165e8710ccbffc78068c793ea16b1d97b0a79adb12596b35a7ba7b5f681d28bcfa5c8356cce872e18c1c730e4bcee223f6e7015af4b385606db87a4a46c18d640fb0c8c825f0c67fd60d8de479b65359fca88d10e6fbde491c707a8b82993a3e4dc9e95137e2cddb2c140539675a2b08042d7eb28f763d2f5f8c6c4a8c040f0540c4daef113d53a6e4b01d04db920c5714db6d16dad7b183cf10f03094ea0462099676d578edd3e8189344e8cdc54632eebb21045592cc45cae503bbf081c8c9b751924f321314e478191e0f9df6c670b4554e51d698adbc0c07e314fb1e533e2e998beffe80342045318e6b58f3a088f20551c89085f009eecbe8ed693287781d5a2f7b877bf16ff1f15773cd58ea82752b91f68843a76930ee14e708525cb3d6e771947fa0bc4467789886bca733bb95552dc7e3537e6950332afa39b22b65c4dcfd001391e0199b1422d6dc76c2ab1ccc09631d721622c22c29bd4f2c0586b432a95cec91ece289654e5ff07954ccd8583e95672bd6607770f4d1da6b03c8582765e3f68bd354fbbacb27946798df31a19c683ecc21532d442166d1c2a76022df0f361f345f45a2182c4ee9bfc381709bc9e2e223026da2bd90a436f902218fa15910c80b73c5056abecb57b25edb6257dc7e222a4bbf403752a1c2f491c861b5a45c433d21e9d7a01b5840fea31eb6d139f9ce135fd2f8619caca99c96e9bd3fc21cdf2079297c76ba91976ce78a94c33b654c6ff6727f256413f764900895db99a292e207b4e06a45f20da72ce123ec88df04bc8c7f36a5d083f43dba9ef200fd1e6dee0219e21aead4c231e6845061dda85191f492569f49d89a38e6d80aa3ddd52219eb1cae3b6bca296dc4b52e4f0ebbb658c7939c04c4b77d18364f295baf0a7eda0c637cea7f40a0bd8efab0598259967ceb410d760411e921cca88ff96ac159044cf860ba299a1d251ca308afeff631fd7d7cb51ca3afe824fd104b59ec01c5afff2f82a8f7f7fe6102074f0e53e987053ad35171b44ad066b89ea03d47edbc76d02f6f5e3b2d33cf4ca6a3cfcc7f33f5c0f1f9c7d1b0424560acb52ca7b2e7a1fc78663d496a71efce84a4de4418afac65440f7f32ab135f369fdb27136d7860536f8b9d35010abdd5455ee42c703b409e14bbc37f401060e65b7aaedb875f39ddd1b0c511287794c5aca343c98da35df8f1e4cb08540749aa04df80dc64244301e683ad12173184ba5b039c996519c9821b0bc323731c86209a9c9fe48e5c739c2e0c358b815eb1d3cba45622925efc435d96a6e5b8f3cb2353d6ad5a96ea77968656304de187abcde874995c87346f260e258a7878c722abd1d6b10bdc871edf07e1047c93293df0d56989ef542c9c0f769f7679d163022a5a2fb4f14a745a5a358d1c9948b16945e9403ca685b9dec9fe7490c40df0da2f6e85b305ebb3933a63092616ba6f05c6d0477e0f89d5ea0f9f35f6e1806374105e26feef0d2322716baecd4b895d713b99f7b7a53698c31f94a6dd3ef8f69c8637fb034070ae5d2a75b4d71bbf3eb47f9c2cb4a8a99bbe0cd6334d71bbc50d7e83ec6560a8ad1d8774679f5da0c0efd33ec81be529d41bb6810ce7c10a7bc28d50379d3e2c47217e638650b5301b49674486257ee94be8f2d2d4dcb880be184fc5cca175908161152678817aa7e9da4f73b5b456ac28de09ec269f09e7196e83d78b526f7fa1208bd54a9054a1e58bd8da20e56dc1344fb17c0ca5bbf9ac5f8c193018946d2e38ff8c611fb7198ff2fddbb3b10d88c7609c68ac912e82697e11d5e2aafeff8a05d62ab99d2be2320d7e381d75a937e9310ff07fadd6fedf6d16122a347fd439d51991472cede0e2667b5f6c7ae776125ef5c2dc62181bef1510dbd63ea461ac69f38ff2e10b72c742432906c78274666e4e243c85875e049f6135c9d4668f4b983672137db7e3aa93922361307e0f54136197f4994a70fff78eae65db895e89278a421e41e9ccc75108eb34640d7a6ce63539270590c69101a4e2f362adde2228b9a297e6052f1584c5f309952f19ee7952faf180d582f193de2ff392197aef2ac48c9a38b63a6bd4ca877325b78849243c97986d037128062675790473c934d07ebeb197271aab802b317053abf3697296963247d8aae5b246d3880e48f7ff5ee7f298f973b52d3766866e3f32336eb014fbb43116f304dede55ea29523155c938f1f5fc41ff3cd0437f9b1989ac71484cb908c1fe51e30dc0aa145ec45cd16d9483df76aac98434ff50187cc45e3f7567671fb7eefc4df6b0c9dd0cb33607a1d1584a5240f764cb70a9b4d95d3c7a5b376c68f4fd1b57bbf1b821503da231c67e0f653f22a8e23b9086660b112122a9bb301f5d39df694d8803ef74d5bbd8975be91143c4cf7b119ed1969b0b489c2effecf009a1ca3d9307b258693edd3676eeb9994e219571c4d2a64ad9bbed96a5abd0745c4232fcf8240124b251ffa9c787c2e74e9e1ebb8f4bad9bf7edbeb127a3529b6a17e533fa45f7d3e6e42c547f990e17adeec2843426fb87deba70d6084b0d91a1e08c24b10ff2d8ddbfd454fa855e8c09d3fc7fddb8fe3a57eb868007454597b1f6ed5ec8ea74982f86b8e470d5aed8bfda8e43e0e8745c21e68cbd6dd540150df81448960ae2fb177c4e6315a020054b992109cc2fce3f86449c681791510520511f647add9ade34ae961193ed7e9956d5e081d31b5e3209c7500027895b727d5b12bef21766c40a6cbe8a1538ae122bd00021ac778fca72e93b2a27bb986e98a1c96fdd4767a5fd2b57e1d3a0126aa7ec4c5ecfb668e3d77893f0970de253e3bf208d00733882d337451420e8ca125e280a8304e45866322dbee5de01aec77815302060713e0f48d510e76bca3b38a0992c69f9ed4f8d02ffd2a6a77a8b8fed2fdf566364198da059a99b9b95e546", 0x1000}], 0x40005, &(0x7f0000002540)={[{@utf8}, {@shortname_win95}, {@shortname_mixed}, {@utf8}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'seclabel'}}]}) name_to_handle_at(r1, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x6, 0xff, 0x6}}, &(0x7f0000002640), 0x1000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20048094) r4 = openat2(r3, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x220701, 0x0, 0x1}, 0x18) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x48, 0x464, 0x400, 0x70bd2c, 0x25dfdbfd, "48946113d9b083a1a42809aef3498df04f466b0a428979d84584f05d35699010d08052796c6baf368b4d52ed29f06bd147fa516060", ["", "", "", "", "", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000002a00)={'ip6_vti0\x00', &(0x7f0000002980)={'sit0\x00', 0x0, 0x2f, 0x4, 0x46, 0x789, 0x4, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x700, 0x9}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0x90, 0x0, 0x200, 0x70bd2b, 0xffffffc1, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r0, {0xffffcd3f}}, './file0\x00'}) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000002bc0)) 23:09:46 executing program 1: r0 = syz_io_uring_setup(0x7ac0, &(0x7f0000000000)={0x0, 0xf3fd, 0x20, 0x1, 0x292}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x394, 0xe, 0x0, {0x0, 0x0, r4}}, 0xff) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x7, 0x41f0830, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x13000)=nil, 0x13000, 0x1, 0x10, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) setxattr$incfs_size(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x7, 0x8, 0x2) ioctl$int_out(r3, 0x3, &(0x7f0000000280)) r7 = syz_io_uring_setup(0x29e9, &(0x7f00000002c0)={0x0, 0xb843, 0x2, 0x0, 0x30b, 0x0, r0}, &(0x7f0000fe6000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f00000003c0)=0x1, 0x0, 0x4) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_submit(r5, r9, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000440)={r10, r11+60000000}, 0x1, 0x1, 0x1}, 0x7) syz_io_uring_submit(0x0, r8, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r4, 0xff, 0x0, 0x58d, 0x1}, 0x488b) syz_io_uring_setup(0x2f45, &(0x7f0000000500)={0x0, 0x5a63, 0x0, 0x1, 0x3a1, 0x0, r7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000600)={0x1f, 0x7, 0x3, 0x3f, 0x1, 0xc3d8, 0x0, 0x7}, &(0x7f0000000640)={0x9, 0x4, 0x0, 0x800, 0x7fff, 0x22, 0x5, 0x80}, &(0x7f0000000680)={0x1, 0x80000000, 0x4, 0x2, 0x7, 0x1, 0x6a2c, 0x40000}, &(0x7f0000000700)={r12, r13+60000000}, &(0x7f0000000780)={&(0x7f0000000740), 0x8}) process_madvise(r4, &(0x7f00000008c0)=[{&(0x7f00000007c0)="5821e34d7a5a4462358847c29f8cd8c0e4c07a", 0x13}, {&(0x7f0000000800)="011b25384be6eda902b884bb8b1ec089ddf615fcf2c7e2db7e71ec8d2efa1108c99f5b605e83d26cfe99ca9dd8892ca15832013c4dfc437ce542691f845ce2e97d619a737876328be859d114e353b198fb0419c5b91ef7b8431f08e6bde168f14aef52ca455d89316a9bebff7bc72d4834ea3187a8bde2467cc744195d31100ab958f178bbd3975bd4fcf3a882b37e85", 0x90}], 0x2, 0x0, 0x0) syz_io_uring_complete(r5) 23:09:46 executing program 7: ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x2, 0x2, 0x5}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0x42db6527, 0x1, 0x401}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x100000001, 0x3}, {0x1000}, 0x1, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000140)={'\x00', 0xfd0, 0x0, 0x938c}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000001c0)={{0x5, 0x12000000}, {0x10001, 0x8001}, 0x800, 0x1}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0xfff, 0x3f}, {0x100000001, 0x8001}, 0x5, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xfffffff7, 0x2, 0x5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x1, 0x5, 0x2ad3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x6, 0x4, 0x1, "8050de0b4d83069c6543be2c970c76be0b20f119369de95cfae32418933562fa13b3fc28759c0cb42879d5c2ffba89d16c5a8c2f8e37e374686d37c559718570", "eeca4b2fc21c12035d3719b2300da1bc02a662ae6b3a23a078507ae404f3a5b6ee5395191ede439e313e15be7420b7e8a1a3d4f2534b0149e529b4c4a39e328f", "4ec210c8783a62f5f235af0e52c84036a10d9af354c14767bb9052ace03f7d8c", [0x4, 0x5]}) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000500)={'\x00', 0x2, 0xccd9e50092a5d922, 0xffff}) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000580)={{0x1, 0x4}, {0x8, 0x988}, 0xe3, 0x1}) r3 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x697, 0x200000) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000600)={0x20, {{0x2, 0x4e20, @remote}}}, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000006c0)={{0x0, 0xff, 0x200, 0x517, 0x5, 0xff, 0x9, 0x1, 0x8, 0x0, 0x7, 0x5, 0x4, 0x7, 0x8001}}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r4 = open_tree(r3, &(0x7f00000016c0)='./file0\x00', 0x8002) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r3, {0xff, 0x81}}, './file0\x00'}) [ 70.342097] audit: type=1400 audit(1664752186.339:6): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:09:46 executing program 4: setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:restorecond_var_run_t:s0\x00', 0x2b, 0x3) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext4\x00', 0x800010, &(0x7f0000000180)='\x00') r0 = accept(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x80) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000002c0)={r1, r2/1000+10000}, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10001, 0x6) r4 = openat(r3, &(0x7f0000000340)='./file0\x00', 0x0, 0xd0) inotify_add_watch(r4, &(0x7f0000000380)='./file0\x00', 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x199}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000400)='./file0\x00', 0x8a, 0x305100, 0x23456}, 0x4) futex(&(0x7f0000000480)=0x2, 0x4, 0x1, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)=0x2, 0x1) removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'system.', 'ext4\x00'}) r6 = accept(r4, &(0x7f00000005c0)=@generic, &(0x7f0000000640)=0x80) r7 = creat(&(0x7f0000000680)='./file0\x00', 0x3) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000740)={0x18000, 0x0, &(0x7f0000000700)=[r6, r7, r9, r0]}, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000009c0), 0x200, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x7, 0x0, 0x0, 0x0, 0x23456}, 0xb814) 23:09:46 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x932, 0x280) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x2, 0x5}, {0x8, 0x44}]}, 0x14, 0x1) write$binfmt_aout(r0, &(0x7f0000000100)={{0xcc, 0x7, 0x0, 0x74, 0x2e6, 0x80000000, 0x2a3, 0x10001}, "89a52d21f1306c3343d42effc0a382f28330b993f31446b24b3d31bf7d90a985440c44c3da6593e36507925c40ea07919600a0f30607d6150e95838a714f16f2f44ebc282f53533c3860ab3cc2236b18b430e00afc807cf8b86f09aa9a58a743f587ff565c8c16daf5ff893fb2320b01166d185e083ed7fd274d77181b854c6a37eeff8e20649baf858e02fc97676dc12ecefb0ad4f421f084a873043288ab55e2143d33f3e9830844c1bcb80b74", ['\x00']}, 0x1ce) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat$incfs(r0, &(0x7f0000001600)='.log\x00', 0x20000, 0x141) io_submit(0x0, 0x5, &(0x7f00000017c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x101, r0, &(0x7f0000000300)="ee659a8fd9bc2dc5195f9b38e4f5060e652d12d9f7c28067e979e3b5358aaf4eba362b22be176734671f0961645d5269d52b6109bd71b3ff8bde7d27c0d6179d2797310f56bf52e1a381b78f7d5409b85bf2af633c4d84955b0e110d0e526556e95209964a9352a02171d1844ee0c5ee98", 0x71, 0xd518, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000400)="5e6932df1880865045d0435cd2d65a6754c4dd1abec0512627a4953b18bc7b8ad85588eeb94ffe4e86a6536ed148dc550d28959ec353ce", 0x37, 0x2, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x401, r2, &(0x7f0000000480)="13f21345cd8399b199e0f5976b2b5d4206a1d72236044b286490c9b84f2ed46cf952beacdc452d1b34a00ce3e6d9e09019ef66d3b8b713c96a6e479789800d20b3b97124938ee699aef3304721e5131c1b345edb05d7bc9342262370a52c0ea7f818a358988722f531ff2993ded39c5d46af6c81a3e8e54db6c32bbf8b17dde863aad734959ce00293b9a01d7b78d69e234ef0182f747014aa2858146ac8762e4f68a9c5fb56fbda1c45531ec926b8f7dcfadb645c8dca141f35d64038ddedc394afe5ab55c0f2192eac6c512751fe144aa59ee0ad9ebb77b5f9a7ab09a88792d04c01b67884af81ddab5f9f5c890630fa368f", 0xf3, 0x4, 0x0, 0x3, r0}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x5, 0x3ff5, r3, &(0x7f0000000600)="51040055fc58b1ba3df8a2d89f81fd138ff183600e1e241427a896989b8ef705f31a9931918a8977607373932ec7e91e6a577ae4264b5648f23a570282b6c33898329dd6f2de5f0766ac3a73d40bf29b1a19ef0c6e15b55e1d8d21579472d12a980a1c4c6cbf25901cdd80b313c4b395a6499c6be111e061f39216fd36555d47d88256149661b8d6697380d220ffcce5127fec56e92d5362712f7ca149e69126f8af2deb85f1b92420fdcc852b1b6d40f8da6dec633ad4736adf8a7c29b44c6d23a157b36396209bf339374db9a3c327f9bfade08e492a472693e87062da4f10a150cf192d7b26f30fc468cd9a684ae730a9fa350310d5fdecebb1b1d0fd528e7ccb42297a41d0c581720756f078316267c8e52a38a3fccbb7c35880c0778bff5c23b44a67e9863894a443efb379fa5c7c03e7189a05c4155b90678685410cb6a1030913c51be2c1744f7d5ea359d8fa3de35a0166bb97ae353a1933c592b7cfe1473523ad7af89b37fd1e3b46fa458ae2acd487bbb456ae102afd336c84e947238ce24a5e1159014707af31329430621e9515993ab9d25e02771b78eac457656c35741d5612c132350e8dc351b567350fddfce3aeb1b0443bfde62f2f034f02ddd9dd01a6045750ec407dadca1acd7be293b601dcbcab8a63696886b56268bf7ef49aca26e268f46edf8ac56a3d3fab9d6b64ee4e03bc5ed0fd88fd7c7f13a0a722c328e26f61fc4eea00fb576ede002d3742f82321edda6d0905d8a2f12faae7164ac2d697435955bef353b64f928b88a50dd39e849ee34d9d60917bda587d2e0d70bcd4db7625eeb6d9751fc4bf8972242adc1241c0ffbba2aa58ccb2f22afe3d3956591776d4a7d812b8b4c3a647c064a84342d18f1f43cd96b9c93dff39a57cdd6611442bb72283bd2cfb55a3539e9d710895b45a4b3c9f0a31e7f5ccc995bb6b077799c1380a3cebef83dd60717f5b41e2330b70dec05765213623e0003f2b2a69a3d341cc22bcb1f9f4e398f64b7a45bf1286664be2023eb3022861a6fd38a84c63959315fee43b898682477b3e6a4b83f87945d923eb81d4acfc63385bcb57eae00828dc5c9d82b418eac00c7b140f2762b6e2cbdbd9672ab0a3dc01a184eba68f43bde013a556be7b6619286995f7d80b00df6aec3e2e562e056033db57be3b4ec577aea8b66bfaf9c5c18927294273cca9d86211a068a97372533b55b54ea51ee2064172c3f99ad1fd1559f2e36872fa56e32d97ff58d32f40c2026a74af0f2dc80924c387bd4a33c49a7c3c8d95786bd55a86488909436d070b4556a8b036247876ce9bbafdad8bc0ef0aacf0bdd1c30e48f672236fb1823bac41b9b47fee5d2ba7a8dcde92ac1b7caec2ac14b3e51df98251f720f01d7edd2abb832ec4a4d16b88ae5391347048338b803c13d1e20535f3958c195c264ddde7b4b0b388a195b9ac7ae8b0afd3891331721557af069b904c64da43cdb2b768ec9ee65816b52cba07cf0c598632447e1fbe955786c7633bce204a7b2c0b20e325971d045f1dbb73f44e4a770499936db1fd9f40460d3f0b2348ab30b3e77a0d6668abea5124e32da6274d119bbf185172807297ae71c70bbc744a779b9b8c01a7fd6f3ca53e0a3eaf39eb8b530e23c2cb4ba878474d93cbac57c1241838258b41c989ad496a53e2fb483d21ff29072c917e698085c377e57831704512c9607deaee48e64716e939e3f0ce85dc247428836da661f8c1c0ed4aeb7673985cea1ab5533f8a7ac42a48b1a5d5b44ceb722131c958f5375a582bb6c54d5dc31c6615fc203ba71a497cc66efdd17809e004ad4e6610f296bbac06986cd24ed1e5f66914719e40c152dadd5d6f208b3dc1954f5f38182b18293c9205e9d24b0c895aa5251df73da4e95cf650cc058505b28d685f640168875897004d1739cc4bb096f7a50cc9f62a271567e880e52ee4cbd13a19e17dbb11b3dbc6f98100b53b4c62f45214045d3e3eb584ebd01aa1361702a52911926615b13feaa89c771ae1811483f5a6a367b496130b7a540d2c1e11fde61468f2cb2115132c450ce9a5ca729b5a67e634b725a3a57e26ebf569e0e4c775d6ddd2b059416ccd677aef27580c64362bede15570258aca110e7233becb208497f2e0d402e69a84cff92edef8b9f37e668772092b5bd3cffa52804a0b4edc551fa910f979de58c5bde02141298b1cb1ef081a90e1f4e654ae754a65faed61a42cc0855225de4c5c2f548f10a9bb9fc00ae266ddcfea94c540597b06bc54bde6256130c920a91e4f8bdde662ac528f751d0f188a091d11447b36c8e89fd5c4c76abb6478fcc6b762ccc2c3b3e09b33bed9003a94713d6ee29506da87e780cb82b3e86c8a25a27983a5364c46ac57fb283d4715f284d0253438f3137cb475eec68195e7ea74f3a136532584c014991f634fc05343f00443ba54931d8565e3c30edbda7ee229ecae62f2716391056de56e72451977ef63801b06530543367cce3082d36629a304f13621d2328b6be356624d20a02a3e55c895cd0d1a2d0800e684fdd008f7cca3404c016b9792146ccbc7446790570f63173bb58c66fd669db39f1e96691251a1e1313f24e8e2c1e40817f86c4a00175027fd010409dbfb1bddd08a62d79d3728164b8b8eb73f232269ba0661094b129c708c4d5d55ef42b000dedb2d02af45b623aab04d8499ce963ed83809fb25cbd6a414d1ec4e007476ea92f7f12b52bdaed073cc6752e7114225f09faa2610738298c950aabb51f93abf5a8d3eaf9d4a1cd0724b72c05f2c4a6d94d34a8b1111895b89b73954698be6d43945cd7b65f7cbca3d3b554859d1c8d71623df38bd20de719a320c1299a808120e8005ac2e292e4e29b77e6de7c44affc4d6253a1abfb60f6b8a2eff519d68c96bcb40ecc14052820da2b6b3e5a0a45b4e6b31882e9b71216737f6d47876dbe1a2a41618e9997c307fb5a5b3bf0acbd3de8d00ebda37dc6bf33fb157a6ade2689f09d9404de6b2d5f7f730e30195ee9a4458fc6b03f90bf7109d0bd8c38eff788964175a82296a622d6d6e9f7e7a5f62f0e6f5bde4a32c0ad21ffab37e862f3a6b99be5b21041833d36960fdf8bc1437f5755dcefa3d517311cd486e0e3ccf284b52d07346ba92d224a6360c68a389afdd6aa5c9b9ba5c604ba9145b5f34f011d74f37c388d8c8ec274c7bec3504bfa5ad397f61eda265ae604416dd30d99d4a8afe8f6a5e5f996116d07e53bff0a3304f5696f830ff4e63861ccbfa225cb3118059bd0fae0d60ed63910fee14eabccc192b1e83dcc6840cd6a1c03c18c863b23629e913b11b49d314d99a88dae55b4a54e8be8e074d199836d2bbe8e93bd8fb56b2f3298fdf28128dc5723dc28a0445b6bfa9037fa2af47a304125eec027b73971561f438a63a57f87b359ded2f5ac7bcf0f46f6ae541a517bad46c051b2eff808650080f86855d4af608dd75638e4632d7e4be73712b1635d8723bf8139ae5c1574dfb0622539dfe9f84879130a6892fac5b1b86e32a1f1f82fb254f19a4678b0a6c540f70de0610992dad29f573c84ae14b5d8f5e7cddbd149b7c61acef529c9f64d21e9b73d97ac896feee72ff8dea3525a0dee0f863b2c08ccf4cfab0febd8e0533424dcfc1aef9dc2b276cc948e4cbe4cf203868eaa59de5797afabef511e6a7837ba791c2482be9190de0a07ad51661a634908ce40620eb3430e2f86aca5a94edb7369c4250b540a3ad343a9cd17bec0ee845ee949dbbc5c3da2b536f11f6ab6b43d225bdea5ab7f7fe905dcadec89e908fa9c8a28fef50ad14c811fc6bd208de09e716c05bbc6d9376d1ef0d8d80722b40ebf1789dfc4eae8b57cb2d500b1731a52546220d66bc74d0e7aedf3dbec350f5121a633b0978471591a82fee4707dd45f145588c8e2279a0af7b954e81c850f83b7bb1250b4cac345830de61083c6c61a7924f471d11933875e3e4c8fa6e5e0f700e84a7c336a53abe9b4adfbaa96b5a70b21d0ae8cdf573d5aa8d686358bfee9ead1b6ac3543c60177da1971c8e6da7e9249037208a1b7e3aa06c2e91479426e156f2065f0819f3aa2b2b796580c006cef2a3b58474ab25d41348c16152c5ec0699235f1baf62ff6045bbf58f8b9b1b49335225adaad9ae96f86c9a2f7a8732c7dffb5eaa96d0c0624393f3c8dc4fabd97ddc7b2a772a93701366e42a60102c237f4c9317a457ce4fcc45bf81aa010a69fe7f3e0f3911388f9d82edfa0f97d4556de9271fc4a8764c5b45f49fb2fbf7306a12de70a7657770586520e2b672c386975c1260fa2895cfaefc1b9f89d7d67e99c5a72de8c10fc39f62b545c7b0dd8dbdc728ba590aa7d35aa53c15f57481620e0d242c4ac8d5e048caf73ad5304f858fd1a0050e1c0e183d3598d4b8672fcda5beb598707e32d4e0c882e3791dcb23c7e2a4d29cecc76d8d3c0b9263662f99bbd0ba9d5ef78cf33815609e055ea0ff31a4644153c0a5d6d2d1d6c6949512bbc7481c3c47d6cec9a82a86da5fabd48434d8f00b2625d46d8b0a5342b3f62fc389282748c4a3b160dd18a9556f10e038be84fd675fa80d8bdbddc078171747c866cf01d3ba518b08eb9ec0ac8f9347f9fd9b3a03d3133d8cfeae799965526af9135743df17c338d4163a0e922f42a5c0d2f9022f1ebc2e886cc43729c1c059da47f31980f471f984dc3c7d8ecac9c3c8f636c1f6dc7319dbf1ef6ecd776dd524b0ca2de42e2af155b29864ff66eb879bc649179c74605a7e103611ff181a2195dd1c60c27fafcb8aad8cb66025b1a2aa7ecac90144a5d762b242d0bf4fdbc45e730effb565d561ab52553679f173d63e1e6293f14298b5273e18d00a0a5fcf531c3b8d3137c7964f643a342f868334c0d7320b7178a7ee4c6a404614470695f9156bf97b26a46074d9b99b9ad6dad886b590873061b84edc8b567e2a1576ded2dc73087112847c20d39c3e133e031ee0ebc5ebb135bab2d1c3e12e4b48abdd7b4c2248e5dd81aa35f999def320981a49f47101d9afd7267b670902eae2db1c239c4d247959b12d41ee50ee9739eee3d827da0abed7c2c0c5c99cbd2790d433c1473446fb071503b75ddeea7d654bc2420ed7eaf28ca5764d9ba73817fb5e1bf1aea5babf02ebd0b3e33019c871dca1b9f1f07d5aea147e7a86c92b4038fc2f3c7026f8b2c3536976c56888986f2c6882269bc859bf0ca9bc518f6b2cee73d6e44c428fdeba1779fef23653a53a59e45f25bc419b4e45dfd485fd0fec96b550d97e8ccb7cefaa7bce14ed23bf32132a5cdbb93d9667ed12edb1e44cff0106749357702de627eeab87f2ecf58389b675107741b55c32b85b4ff1aa63d3a850bfe5290801328804835bfb49bc8df71c2f11533c2e6e0ab2ef353f4cdb92ea505ca3711cb9c57d61370394115f72fbc214daa79ab58321673d091faec906af80b649a829aec50f63cbac638a494cbad7cd305c8238190e44a20265d77750d0cf44d59951b701b6c5798d87a9396859a11eedebb1d4d97c30733d771a5ada88cab7e8ac0b7171cce3995bb60357f60afbc42572311cd526dd2e5a663436ff054451184d537ff783b1625b55b58fd217750f9c2e64df033f14968a3404356cc05ceec27c857fc04a1ad08c603b5e349d3960cea4488e0f22c60d2e10e5ac739af7729d6bda6fa36cc9996543e75e3d72d74592f6ea616f7fdd15ea9fc2f6ffe35809924b0473ec23c908bf8a26d9e956dc11961834797ada7651ee9c425e03938d15447d4db754136b27c8efdbe7b26c", 0x1000, 0xfff, 0x0, 0x2, r4}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x400, r0, &(0x7f0000001680)="ea1839479b2b67d8dc40e1978a941c4475c4bb3b0f2a2e8ba972628d66b293c96ba3dec3b7c949348da863f8742be7ca3dbd0c5ab92d24ea29948c3950b29b4ac7875ff037460c9cfafffd028dcd8a303366bd41e823e1ee10c77abb4ecda6496215e0b3fae069d5c99556568c7b9630cd75d0f49cfb51638b3dd297997d1c9f0379983834342fb01585eaf4af144cb149bc91d586c91b87f9dc0820f3683158c8b72e4f8d9fc132039d8dbd9913709fa6b59023e3b16925564465dbc0019017bdeaf1febbe31f422659d8ad3bdae8b8e0562d8261df7409295430af4f96c52a5dea0c32030c3e80", 0xe8, 0x4, 0x0, 0x1}]) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001800)) fsync(r4) r5 = openat(0xffffffffffffffff, &(0x7f0000001840)='./file0\x00', 0x48c100, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000098c0)={'syztnl0\x00', &(0x7f0000009840)={'ip6gre0\x00', 0x0, 0x29, 0xfc, 0x81, 0x3f, 0x68, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009900)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000009a00)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000009b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000009ac0)={&(0x7f0000009a40)=@report={0x74, 0x20, 0x300, 0x70bd2c, 0x25dfdbfe, {0x3c, {@in=@rand_addr=0x64010100, @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x0, 0x2, 0xa0, 0x20, 0x16, r6, r7}}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @lastused={0xc, 0xf, 0x3ff}]}, 0x74}, 0x1, 0x0, 0x0, 0x41}, 0x4004080) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000009b40), 0x480, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000009b80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000009c00)={r9, 0x6, 0x100}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000009cc0)={{0x1, 0x1, 0x18}, './file0\x00'}) 23:09:46 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x10000, 0xbfa, 0x100, 0x5, 0x6, 0x9, 0xc4, 0x8}, &(0x7f0000000040)={0x4, 0x80, 0x9, 0x8, 0x400, 0x252f, 0x2db, 0x3}, &(0x7f0000000080)={0x5, 0x0, 0x8, 0x9, 0x0, 0x7, 0x483, 0xe63}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_gettime(0x7, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={r0, r1+60000000}, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) io_getevents(r2, 0x5, 0x4, &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000340)={r3, r4+10000000}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000380)={[0xcd]}, &(0x7f00000003c0), &(0x7f0000000480)={r5, r6+60000000}, 0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futex(&(0x7f00000004c0)=0x2, 0xc, 0x0, &(0x7f0000000540)={r7, r8+60000000}, &(0x7f0000000580)=0x1, 0x1) futex(&(0x7f00000005c0), 0x9, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x2, 0x2) clock_gettime(0x2, &(0x7f0000000680)) syz_io_uring_setup(0x1a81, &(0x7f00000006c0)={0x0, 0x575e, 0x0, 0x3, 0x37d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000007c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x20, 0x4, 0x1, {0x1}}, 0x8) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/asound/seq/clients\x00', 0x0, 0x0) epoll_pwait2(r11, &(0x7f0000000840)=[{}], 0x1, &(0x7f0000000880)={0x0, 0x989680}, &(0x7f00000008c0)={[0x5]}, 0x8) futex(&(0x7f0000000900)=0x2, 0x5, 0x1, &(0x7f0000000940), &(0x7f0000000980), 0x0) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x100010, r11, 0x10000000) syz_io_uring_submit(r9, r12, &(0x7f0000000bc0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/16, 0x10}], 0x1, &(0x7f0000000a80)=""/205, 0xcd}, 0x0, 0x2100, 0x0, {0x1}}, 0x9) 23:09:46 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3df1, 0x80}) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x110) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x0, 0x200, 0x70bd26, 0x4, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfba4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5a1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8044}, 0x24008000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r3, 0x21, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040055) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x261a, 0x5f}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008008}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a8951597ea3372520dd9b36a21f59639"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c32235d3b7a72bff0fc71866efd3dcd0"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d616a4af7b02fe7d1815c77d5b534ed8"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "03eb5689ec12ef0afcd13f9eef425151"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "272399997b11cb58f6afa1479c855f82"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2fc2d3b7f86615785582a7cb4dbeb824"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e0bd9e8ea1229a0a15a35ff96923fdd8"}]}, 0xcc}}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x40, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c014}, 0x40) pread64(r2, &(0x7f0000000a00)=""/4096, 0x1000, 0x7c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r1) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r6, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r8 = openat(r7, &(0x7f0000001b80)='./file0\x00', 0x800, 0x90) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000049}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x44) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x80, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xee, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="93495a1a8e5c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="054e5592b5b9"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="267cf6896963"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x80}}, 0x2004000) 23:09:46 executing program 6: r0 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r0}}, './file0\x00'}) r4 = getegid() setregid(r4, r4) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x202000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x0, r3}}, './file0\x00'}) r9 = socket(0x28, 0xa, 0x4) accept$unix(r9, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000240)={{0x0, 0x0, 0xfffffffa, 0x2, 0x8000}}) getsockopt$inet_int(r6, 0x0, 0xd, 0x0, &(0x7f0000000280)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r10, 0x7, r1, &(0x7f0000000300)={r1}) sync() r11 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x1, r8, r5, r2, r12, 0x44, 0x7}, 0x0, 0x0, 0x5, 0x5, 0x0, 0x6, 0x101, 0x9, 0xe7bd, 0x6, r10, r10}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x3, 0x81, 0x8, 0x3, 0x6, 0x7]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x48, 0x9, 0x4, 0x2, 0x5, 0x3, 0x6c, 0x4, 0x5, 0x6c, 0x36, 0x48, 0x3a22ecf6bda9e7c9, 0x2, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x1000, 0x81, 0xfff, 0x7, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x3, 0x6, 0x4, 0x401, 0x5, 0x451]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x14, 0xbe38b85d861938c7, 0x374e8d308b3f8a5d, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x18, 0x18, 0x16, 0x2, 0x1, 0x2, 0xa, 0xb, 0x1a, 0x1b, 0x9, 0x1b, 0x4, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x36, 0xb, 0x9, 0x5, 0x18, 0x4, 0x2, 0x12, 0x5]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x45}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x55}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb0}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc3}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44000001}, 0x44) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x78}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x122}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}], @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_a, @device_b, @random="4aa4d779a61e", {0xf, 0x20}}, @ver_80211n={0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x36, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040080}, 0x40080) [ 71.635049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.636806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.639243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.644339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.647260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.648475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.657489] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.829724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.839706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.841975] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.843594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.845438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.847626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.850974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.853211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.856595] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.861435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.863142] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.865199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.866304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.868038] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.870587] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.872182] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.874975] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.875342] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.886323] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.887535] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.887732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.898665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.900917] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.907257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.908465] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.911798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.914578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.915881] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.921091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.926595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.926660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.929539] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.935320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.938192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.939894] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.944580] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.945934] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.947388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.960743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.961835] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.964457] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.989183] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.719431] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 73.719451] Bluetooth: hci0: command 0x0409 tx timeout [ 73.911414] Bluetooth: hci6: command 0x0409 tx timeout [ 73.911444] Bluetooth: hci4: command 0x0409 tx timeout [ 73.975159] Bluetooth: hci3: command 0x0409 tx timeout [ 73.975831] Bluetooth: hci2: command 0x0409 tx timeout [ 74.040133] Bluetooth: hci5: command 0x0409 tx timeout [ 74.040784] Bluetooth: hci7: command 0x0409 tx timeout [ 75.767177] Bluetooth: hci0: command 0x041b tx timeout [ 75.959149] Bluetooth: hci6: command 0x041b tx timeout [ 75.960136] Bluetooth: hci4: command 0x041b tx timeout [ 76.023121] Bluetooth: hci2: command 0x041b tx timeout [ 76.023597] Bluetooth: hci3: command 0x041b tx timeout [ 76.088181] Bluetooth: hci7: command 0x041b tx timeout [ 76.088651] Bluetooth: hci5: command 0x041b tx timeout [ 76.635596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.642127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.650170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.657412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.662782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.664908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.672780] Bluetooth: hci1: HCI_REQ-0x0c1a [ 77.815265] Bluetooth: hci0: command 0x040f tx timeout [ 78.007171] Bluetooth: hci4: command 0x040f tx timeout [ 78.008121] Bluetooth: hci6: command 0x040f tx timeout [ 78.071245] Bluetooth: hci3: command 0x040f tx timeout [ 78.072115] Bluetooth: hci2: command 0x040f tx timeout [ 78.135154] Bluetooth: hci5: command 0x040f tx timeout [ 78.135952] Bluetooth: hci7: command 0x040f tx timeout [ 78.711294] Bluetooth: hci1: command 0x0409 tx timeout [ 79.863255] Bluetooth: hci0: command 0x0419 tx timeout [ 80.055178] Bluetooth: hci6: command 0x0419 tx timeout [ 80.056017] Bluetooth: hci4: command 0x0419 tx timeout [ 80.119250] Bluetooth: hci2: command 0x0419 tx timeout [ 80.120022] Bluetooth: hci3: command 0x0419 tx timeout [ 80.183221] Bluetooth: hci7: command 0x0419 tx timeout [ 80.184000] Bluetooth: hci5: command 0x0419 tx timeout [ 80.759226] Bluetooth: hci1: command 0x041b tx timeout [ 82.807147] Bluetooth: hci1: command 0x040f tx timeout [ 84.856117] Bluetooth: hci1: command 0x0419 tx timeout 23:10:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0xfe0, 0x483e}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,dots,dots,dmask=000000000000000001736\"1,measur,rootcontext=uncned_u,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00000000000000000025,\x00']) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000001680)={{0xcc, 0x9, 0x1, 0x314, 0x2e7, 0x3, 0x223, 0x9}, "f47f1e09cb1761c7cc719ed40457e1ef945ecbc6b0b0e95891ec08587aad0298fedd178aa5b90191cb5d22ea40a6258f9b761fe7f73a84abf5f13eefef9e633ad365ea1e1bd71e693e3a75c10aaa0b58556ca04ad88163881f134a9da6a3c039a89fccc398e5f097d2e356549d6eaebdeca67493475bcf48c96fdf44e5cdb6aa1569848dcc2ee4d34901d38fab9015955a3527b25b6eca5c04d0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ba) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) [ 128.885854] audit: type=1400 audit(1664752244.883:7): avc: denied { open } for pid=3778 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.887249] audit: type=1400 audit(1664752244.883:8): avc: denied { kernel } for pid=3778 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.906681] ------------[ cut here ]------------ [ 128.906705] [ 128.906709] ====================================================== [ 128.906713] WARNING: possible circular locking dependency detected [ 128.906717] 6.0.0-rc7-next-20220930 #1 Not tainted [ 128.906724] ------------------------------------------------------ [ 128.906727] syz-executor.3/3779 is trying to acquire lock: [ 128.906733] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.906774] [ 128.906774] but task is already holding lock: [ 128.906777] ffff888008c0fc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.906804] [ 128.906804] which lock already depends on the new lock. [ 128.906804] [ 128.906807] [ 128.906807] the existing dependency chain (in reverse order) is: [ 128.906811] [ 128.906811] -> #3 (&ctx->lock){....}-{2:2}: [ 128.906824] _raw_spin_lock+0x2a/0x40 [ 128.906836] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.906847] __schedule+0xedd/0x2470 [ 128.906861] schedule+0xda/0x1b0 [ 128.906874] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.906887] syscall_exit_to_user_mode+0x19/0x40 [ 128.906900] do_syscall_64+0x48/0x90 [ 128.906917] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.906930] [ 128.906930] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.906943] _raw_spin_lock_nested+0x30/0x40 [ 128.906954] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.906967] task_fork_fair+0x63/0x4d0 [ 128.906984] sched_cgroup_fork+0x3d0/0x540 [ 128.906998] copy_process+0x4183/0x6e20 [ 128.907010] kernel_clone+0xe7/0x890 [ 128.907021] user_mode_thread+0xad/0xf0 [ 128.907033] rest_init+0x24/0x250 [ 128.907045] arch_call_rest_init+0xf/0x14 [ 128.907070] start_kernel+0x4c6/0x4eb [ 128.907085] secondary_startup_64_no_verify+0xe0/0xeb [ 128.907100] [ 128.907100] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.907113] _raw_spin_lock_irqsave+0x39/0x60 [ 128.907124] try_to_wake_up+0xab/0x1930 [ 128.907136] up+0x75/0xb0 [ 128.907150] __up_console_sem+0x6e/0x80 [ 128.907166] console_unlock+0x46a/0x590 [ 128.907182] do_con_write+0xc05/0x1d50 [ 128.907193] con_write+0x21/0x40 [ 128.907201] n_tty_write+0x4d4/0xfe0 [ 128.907214] file_tty_write.constprop.0+0x455/0x8a0 [ 128.907225] vfs_write+0x9c3/0xd90 [ 128.907241] ksys_write+0x127/0x250 [ 128.907256] do_syscall_64+0x3b/0x90 [ 128.907273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.907285] [ 128.907285] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.907299] __lock_acquire+0x2a02/0x5e70 [ 128.907315] lock_acquire+0x1a2/0x530 [ 128.907331] _raw_spin_lock_irqsave+0x39/0x60 [ 128.907342] down_trylock+0xe/0x70 [ 128.907356] __down_trylock_console_sem+0x3b/0xd0 [ 128.907372] vprintk_emit+0x16b/0x560 [ 128.907388] vprintk+0x84/0xa0 [ 128.907403] _printk+0xba/0xf1 [ 128.907415] report_bug.cold+0x72/0xab [ 128.907431] handle_bug+0x3c/0x70 [ 128.907447] exc_invalid_op+0x14/0x50 [ 128.907464] asm_exc_invalid_op+0x16/0x20 [ 128.907475] group_sched_out.part.0+0x2c7/0x460 [ 128.907493] ctx_sched_out+0x8f1/0xc10 [ 128.907510] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.907520] __schedule+0xedd/0x2470 [ 128.907534] schedule+0xda/0x1b0 [ 128.907547] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.907557] syscall_exit_to_user_mode+0x19/0x40 [ 128.907570] do_syscall_64+0x48/0x90 [ 128.907586] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.907598] [ 128.907598] other info that might help us debug this: [ 128.907598] [ 128.907601] Chain exists of: [ 128.907601] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.907601] [ 128.907616] Possible unsafe locking scenario: [ 128.907616] [ 128.907618] CPU0 CPU1 [ 128.907620] ---- ---- [ 128.907623] lock(&ctx->lock); [ 128.907628] lock(&rq->__lock); [ 128.907635] lock(&ctx->lock); [ 128.907641] lock((console_sem).lock); [ 128.907647] [ 128.907647] *** DEADLOCK *** [ 128.907647] [ 128.907648] 2 locks held by syz-executor.3/3779: [ 128.907655] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.907684] #1: ffff888008c0fc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.907710] [ 128.907710] stack backtrace: [ 128.907713] CPU: 0 PID: 3779 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 128.907725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.907734] Call Trace: [ 128.907737] [ 128.907742] dump_stack_lvl+0x8b/0xb3 [ 128.907760] check_noncircular+0x263/0x2e0 [ 128.907776] ? format_decode+0x26c/0xb50 [ 128.907793] ? print_circular_bug+0x450/0x450 [ 128.907809] ? simple_strtoul+0x30/0x30 [ 128.907825] ? format_decode+0x26c/0xb50 [ 128.907842] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.907859] __lock_acquire+0x2a02/0x5e70 [ 128.907881] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.907903] lock_acquire+0x1a2/0x530 [ 128.907919] ? down_trylock+0xe/0x70 [ 128.907936] ? lock_release+0x750/0x750 [ 128.907956] ? vprintk+0x84/0xa0 [ 128.907974] _raw_spin_lock_irqsave+0x39/0x60 [ 128.907985] ? down_trylock+0xe/0x70 [ 128.908001] down_trylock+0xe/0x70 [ 128.908017] ? vprintk+0x84/0xa0 [ 128.908033] __down_trylock_console_sem+0x3b/0xd0 [ 128.908050] vprintk_emit+0x16b/0x560 [ 128.908069] vprintk+0x84/0xa0 [ 128.908086] _printk+0xba/0xf1 [ 128.908098] ? record_print_text.cold+0x16/0x16 [ 128.908113] ? report_bug.cold+0x66/0xab [ 128.908131] ? group_sched_out.part.0+0x2c7/0x460 [ 128.908149] report_bug.cold+0x72/0xab [ 128.908167] handle_bug+0x3c/0x70 [ 128.908185] exc_invalid_op+0x14/0x50 [ 128.908202] asm_exc_invalid_op+0x16/0x20 [ 128.908215] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.908236] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.908247] RSP: 0018:ffff888017697c48 EFLAGS: 00010006 [ 128.908256] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.908264] RDX: ffff88802067b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 128.908271] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.908279] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888008c0fc00 [ 128.908286] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 128.908297] ? group_sched_out.part.0+0x2c7/0x460 [ 128.908317] ? group_sched_out.part.0+0x2c7/0x460 [ 128.908336] ctx_sched_out+0x8f1/0xc10 [ 128.908356] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.908370] ? lock_is_held_type+0xd7/0x130 [ 128.908383] ? __perf_cgroup_move+0x160/0x160 [ 128.908394] ? set_next_entity+0x304/0x550 [ 128.908411] ? update_curr+0x267/0x740 [ 128.908429] ? lock_is_held_type+0xd7/0x130 [ 128.908443] __schedule+0xedd/0x2470 [ 128.908460] ? io_schedule_timeout+0x150/0x150 [ 128.908476] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.908497] schedule+0xda/0x1b0 [ 128.908512] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.908524] syscall_exit_to_user_mode+0x19/0x40 [ 128.908537] do_syscall_64+0x48/0x90 [ 128.908555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.908568] RIP: 0033:0x7fa78b131b19 [ 128.908576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.908587] RSP: 002b:00007fa7886a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.908597] RAX: 0000000000000001 RBX: 00007fa78b244f68 RCX: 00007fa78b131b19 [ 128.908604] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa78b244f6c [ 128.908612] RBP: 00007fa78b244f60 R08: 000000000000000e R09: 0000000000000000 [ 128.908619] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fa78b244f6c [ 128.908626] R13: 00007ffe9e67594f R14: 00007fa7886a7300 R15: 0000000000022000 [ 128.908638] [ 128.966678] WARNING: CPU: 0 PID: 3779 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.967398] Modules linked in: [ 128.967645] CPU: 0 PID: 3779 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 128.968261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.969104] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.969522] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.970904] RSP: 0018:ffff888017697c48 EFLAGS: 00010006 [ 128.971323] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.971869] RDX: ffff88802067b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 128.972413] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.972941] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888008c0fc00 [ 128.973492] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 128.974048] FS: 00007fa7886a7700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.974659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.975099] CR2: 00007fbae0caa8e0 CR3: 0000000040090000 CR4: 0000000000350ef0 [ 128.975631] Call Trace: [ 128.975833] [ 128.976022] ctx_sched_out+0x8f1/0xc10 [ 128.976328] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.976733] ? lock_is_held_type+0xd7/0x130 [ 128.977071] ? __perf_cgroup_move+0x160/0x160 [ 128.977418] ? set_next_entity+0x304/0x550 [ 128.977762] ? update_curr+0x267/0x740 [ 128.978072] ? lock_is_held_type+0xd7/0x130 [ 128.978402] __schedule+0xedd/0x2470 [ 128.978695] ? io_schedule_timeout+0x150/0x150 [ 128.979059] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.979441] schedule+0xda/0x1b0 [ 128.979709] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.980092] syscall_exit_to_user_mode+0x19/0x40 [ 128.980468] do_syscall_64+0x48/0x90 [ 128.980766] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.981167] RIP: 0033:0x7fa78b131b19 [ 128.981457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.982826] RSP: 002b:00007fa7886a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.983410] RAX: 0000000000000001 RBX: 00007fa78b244f68 RCX: 00007fa78b131b19 [ 128.983950] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa78b244f6c [ 128.984496] RBP: 00007fa78b244f60 R08: 000000000000000e R09: 0000000000000000 [ 128.985031] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fa78b244f6c [ 128.985583] R13: 00007ffe9e67594f R14: 00007fa7886a7300 R15: 0000000000022000 [ 128.986147] [ 128.986332] irq event stamp: 734 [ 128.986592] hardirqs last enabled at (733): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.987298] hardirqs last disabled at (734): [] __schedule+0x1225/0x2470 [ 128.987919] softirqs last enabled at (488): [] __irq_exit_rcu+0x11b/0x180 [ 128.988571] softirqs last disabled at (451): [] __irq_exit_rcu+0x11b/0x180 [ 128.989227] ---[ end trace 0000000000000000 ]--- 23:10:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/216) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3, 0x8}}, './file1\x00'}) pwrite64(r1, &(0x7f0000000180)="6503cf001aeb7b6685fd5ceb3077db3e3489478466efcc09160d119a4324c3a2dffce064ae91a456d234a343bee47b73ea56ae1150efcb9c81d9402715f3d9d4890c93bc79e0961b", 0x48, 0x2) 23:10:45 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x40080, &(0x7f00000002c0)=ANY=[@ANYBLOB="6a6f75726e616c5f706174683d2e2f66696c65302f66696c65302c64656275675f77616e745f65787472303030303030303030362c757317c2f0fc68c7df36fdb831844431726a71756f74613d2c64696f726561645f6e6f6c6f636b2c649c1ad196d48a50696f726561645f6e6f6c6b636b2c62682c"]) getdents64(r0, &(0x7f0000000040)=""/1, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) r2 = mq_open(&(0x7f00000001c0)='[])+&\x00', 0x2, 0x42, &(0x7f0000000200)={0x1000, 0xf8, 0x1af, 0xffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='aufs\x00', 0x1008, &(0x7f0000000180)='ext4\x00') [ 129.392688] loop3: detected capacity change from 0 to 264192 23:10:45 executing program 5: io_setup(0x40, &(0x7f0000000240)=0x0) r1 = eventfd2(0x8001, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)='unconfined\x00', 0xb, 0x3) read$eventfd(r1, &(0x7f0000000000), 0x8) write(r1, &(0x7f0000001300)="12a6149b0e684fb7", 0x8) 23:10:45 executing program 5: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x4, 0x40, 0x7, 0x0, 0x910e, 0x509, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdb5d, 0x0, @perf_bp={&(0x7f0000000100)}, 0x18884, 0x4, 0x87, 0x6, 0xe94a, 0x401, 0x8, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x1, r1, 0xb) sendfile(r1, r2, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x143182, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0xc79ad000) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f00000007c0)={0x80, 0x40, 0x4, 0x1, 0x8a, 0x8}) [ 129.707326] audit: type=1400 audit(1664752245.704:9): avc: denied { write } for pid=3832 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.757696] loop3: detected capacity change from 0 to 264192 [ 129.824394] syz-executor.5 (3833) used greatest stack depth: 24344 bytes left 23:10:45 executing program 5: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x4, 0x40, 0x7, 0x0, 0x910e, 0x509, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdb5d, 0x0, @perf_bp={&(0x7f0000000100)}, 0x18884, 0x4, 0x87, 0x6, 0xe94a, 0x401, 0x8, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x1, r1, 0xb) sendfile(r1, r2, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x143182, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0xc79ad000) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f00000007c0)={0x80, 0x40, 0x4, 0x1, 0x8a, 0x8}) 23:10:45 executing program 3: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x4, 0x40, 0x7, 0x0, 0x910e, 0x509, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdb5d, 0x0, @perf_bp={&(0x7f0000000100)}, 0x18884, 0x4, 0x87, 0x6, 0xe94a, 0x401, 0x8, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x1, r1, 0xb) sendfile(r1, r2, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x143182, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0xc79ad000) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f00000007c0)={0x80, 0x40, 0x4, 0x1, 0x8a, 0x8}) [ 130.099800] syz-executor.3 (3855) used greatest stack depth: 24296 bytes left 23:10:46 executing program 3: syslog(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x4, 0x40, 0x7, 0x0, 0x910e, 0x509, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdb5d, 0x0, @perf_bp={&(0x7f0000000100)}, 0x18884, 0x4, 0x87, 0x6, 0xe94a, 0x401, 0x8, 0x0, 0x2, 0x0, 0x400}, 0x0, 0x1, r1, 0xb) sendfile(r1, r2, 0x0, 0x10000027f) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x143182, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0xc79ad000) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f00000007c0)={0x80, 0x40, 0x4, 0x1, 0x8a, 0x8}) [ 132.824809] loop2: detected capacity change from 0 to 8 [ 132.845627] loop2: detected capacity change from 0 to 19 [ 132.852788] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.860441] loop2: detected capacity change from 0 to 8 [ 134.967118] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 135.031106] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 135.095139] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 135.159111] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 135.159991] Bluetooth: hci6: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 23:10:45 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888017697690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa7886a7700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbae0caa8e0 CR3=0000000040090000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fa78b2187c0 00007fa78b2187c8 YMM02=0000000000000000 0000000000000000 00007fa78b2187e0 00007fa78b2187c0 YMM03=0000000000000000 0000000000000000 00007fa78b2187c8 00007fa78b2187c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff888009a71c68 RBX=ffff88800ea1b4e0 RCX=0000000000000006 RDX=00000000000001a0 RSI=ffff888009a71c00 RDI=ffff88800843c280 RBP=ffff888008d37af8 RSP=ffff888008d37ac0 R8 =ffff888017713220 R9 =dead0000800f000d R10=fffffbfff0b60dda R11=0000000000000000 R12=ffffea00003a86c0 R13=ffffffff816e8983 R14=0000000000000000 R15=ffff88800843c280 RIP=ffffffff81782b9d RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f38c7a756f4 CR3=0000000010012000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f38c7a84470 00007f38c7a83f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000