Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:49023' (ECDSA) to the list of known hosts. 2022/10/03 12:06:59 fuzzer started 2022/10/03 12:06:59 dialing manager at localhost:35095 syzkaller login: [ 36.236847] cgroup: Unknown subsys name 'net' [ 36.343943] cgroup: Unknown subsys name 'rlimit' 2022/10/03 12:07:15 syscalls: 2215 2022/10/03 12:07:15 code coverage: enabled 2022/10/03 12:07:15 comparison tracing: enabled 2022/10/03 12:07:15 extra coverage: enabled 2022/10/03 12:07:15 setuid sandbox: enabled 2022/10/03 12:07:15 namespace sandbox: enabled 2022/10/03 12:07:15 Android sandbox: enabled 2022/10/03 12:07:15 fault injection: enabled 2022/10/03 12:07:15 leak checking: enabled 2022/10/03 12:07:15 net packet injection: enabled 2022/10/03 12:07:15 net device setup: enabled 2022/10/03 12:07:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 12:07:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 12:07:15 USB emulation: enabled 2022/10/03 12:07:15 hci packet injection: enabled 2022/10/03 12:07:15 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 12:07:15 802.15.4 emulation: enabled 2022/10/03 12:07:15 fetching corpus: 50, signal 24385/26216 (executing program) 2022/10/03 12:07:16 fetching corpus: 100, signal 38337/41817 (executing program) 2022/10/03 12:07:16 fetching corpus: 150, signal 43091/48238 (executing program) 2022/10/03 12:07:16 fetching corpus: 200, signal 50514/57163 (executing program) 2022/10/03 12:07:16 fetching corpus: 250, signal 54689/62910 (executing program) 2022/10/03 12:07:16 fetching corpus: 300, signal 57964/67683 (executing program) 2022/10/03 12:07:16 fetching corpus: 350, signal 64584/75588 (executing program) 2022/10/03 12:07:16 fetching corpus: 400, signal 69596/81915 (executing program) 2022/10/03 12:07:16 fetching corpus: 450, signal 74824/88347 (executing program) 2022/10/03 12:07:17 fetching corpus: 500, signal 80455/95130 (executing program) 2022/10/03 12:07:17 fetching corpus: 550, signal 86453/102162 (executing program) 2022/10/03 12:07:17 fetching corpus: 600, signal 88146/105176 (executing program) 2022/10/03 12:07:17 fetching corpus: 650, signal 90331/108595 (executing program) 2022/10/03 12:07:17 fetching corpus: 700, signal 91956/111508 (executing program) 2022/10/03 12:07:17 fetching corpus: 750, signal 94066/114791 (executing program) 2022/10/03 12:07:17 fetching corpus: 800, signal 97611/119362 (executing program) 2022/10/03 12:07:17 fetching corpus: 850, signal 99514/122358 (executing program) 2022/10/03 12:07:18 fetching corpus: 900, signal 101388/125371 (executing program) 2022/10/03 12:07:18 fetching corpus: 950, signal 104332/129307 (executing program) 2022/10/03 12:07:18 fetching corpus: 1000, signal 106182/132219 (executing program) 2022/10/03 12:07:18 fetching corpus: 1050, signal 107504/134657 (executing program) 2022/10/03 12:07:18 fetching corpus: 1100, signal 109822/137965 (executing program) 2022/10/03 12:07:18 fetching corpus: 1150, signal 111436/140622 (executing program) 2022/10/03 12:07:18 fetching corpus: 1200, signal 114299/144255 (executing program) 2022/10/03 12:07:18 fetching corpus: 1250, signal 115754/146724 (executing program) 2022/10/03 12:07:18 fetching corpus: 1300, signal 119087/150731 (executing program) 2022/10/03 12:07:19 fetching corpus: 1350, signal 120782/153312 (executing program) 2022/10/03 12:07:19 fetching corpus: 1400, signal 122245/155717 (executing program) 2022/10/03 12:07:19 fetching corpus: 1450, signal 123270/157729 (executing program) 2022/10/03 12:07:19 fetching corpus: 1500, signal 124175/159647 (executing program) 2022/10/03 12:07:19 fetching corpus: 1550, signal 125447/161838 (executing program) 2022/10/03 12:07:19 fetching corpus: 1600, signal 127596/164688 (executing program) 2022/10/03 12:07:19 fetching corpus: 1650, signal 129005/166959 (executing program) 2022/10/03 12:07:19 fetching corpus: 1700, signal 132639/170889 (executing program) 2022/10/03 12:07:20 fetching corpus: 1750, signal 133925/173033 (executing program) 2022/10/03 12:07:20 fetching corpus: 1800, signal 135145/175076 (executing program) 2022/10/03 12:07:20 fetching corpus: 1850, signal 136868/177482 (executing program) 2022/10/03 12:07:20 fetching corpus: 1900, signal 137812/179282 (executing program) 2022/10/03 12:07:20 fetching corpus: 1950, signal 139075/181322 (executing program) 2022/10/03 12:07:20 fetching corpus: 2000, signal 140024/183088 (executing program) 2022/10/03 12:07:20 fetching corpus: 2050, signal 140824/184763 (executing program) 2022/10/03 12:07:20 fetching corpus: 2100, signal 141786/186593 (executing program) 2022/10/03 12:07:20 fetching corpus: 2150, signal 142619/188299 (executing program) 2022/10/03 12:07:20 fetching corpus: 2200, signal 143943/190370 (executing program) 2022/10/03 12:07:21 fetching corpus: 2250, signal 144569/191861 (executing program) 2022/10/03 12:07:21 fetching corpus: 2300, signal 145819/193736 (executing program) 2022/10/03 12:07:21 fetching corpus: 2350, signal 147004/195609 (executing program) 2022/10/03 12:07:21 fetching corpus: 2400, signal 147979/197314 (executing program) 2022/10/03 12:07:21 fetching corpus: 2450, signal 149868/199673 (executing program) 2022/10/03 12:07:21 fetching corpus: 2500, signal 150686/201227 (executing program) 2022/10/03 12:07:21 fetching corpus: 2550, signal 152124/203190 (executing program) 2022/10/03 12:07:22 fetching corpus: 2600, signal 153357/204985 (executing program) 2022/10/03 12:07:22 fetching corpus: 2650, signal 154660/206845 (executing program) 2022/10/03 12:07:22 fetching corpus: 2700, signal 155962/208601 (executing program) 2022/10/03 12:07:22 fetching corpus: 2750, signal 156565/209953 (executing program) 2022/10/03 12:07:22 fetching corpus: 2800, signal 157884/211737 (executing program) 2022/10/03 12:07:22 fetching corpus: 2850, signal 159352/213632 (executing program) 2022/10/03 12:07:22 fetching corpus: 2900, signal 160940/215524 (executing program) 2022/10/03 12:07:22 fetching corpus: 2950, signal 161787/216959 (executing program) 2022/10/03 12:07:22 fetching corpus: 3000, signal 162517/218344 (executing program) 2022/10/03 12:07:23 fetching corpus: 3050, signal 163859/220093 (executing program) 2022/10/03 12:07:23 fetching corpus: 3100, signal 165012/221633 (executing program) 2022/10/03 12:07:23 fetching corpus: 3150, signal 166339/223319 (executing program) 2022/10/03 12:07:23 fetching corpus: 3200, signal 167062/224647 (executing program) 2022/10/03 12:07:23 fetching corpus: 3250, signal 167908/225998 (executing program) 2022/10/03 12:07:23 fetching corpus: 3300, signal 168993/227555 (executing program) 2022/10/03 12:07:23 fetching corpus: 3350, signal 170128/229068 (executing program) 2022/10/03 12:07:24 fetching corpus: 3400, signal 170935/230385 (executing program) 2022/10/03 12:07:24 fetching corpus: 3450, signal 172211/231903 (executing program) 2022/10/03 12:07:24 fetching corpus: 3500, signal 173034/233124 (executing program) 2022/10/03 12:07:24 fetching corpus: 3550, signal 173550/234252 (executing program) 2022/10/03 12:07:24 fetching corpus: 3600, signal 174610/235693 (executing program) 2022/10/03 12:07:24 fetching corpus: 3650, signal 175347/236928 (executing program) 2022/10/03 12:07:24 fetching corpus: 3700, signal 176174/238144 (executing program) 2022/10/03 12:07:24 fetching corpus: 3750, signal 176731/239266 (executing program) 2022/10/03 12:07:25 fetching corpus: 3800, signal 177549/240540 (executing program) 2022/10/03 12:07:25 fetching corpus: 3850, signal 178473/241751 (executing program) 2022/10/03 12:07:25 fetching corpus: 3900, signal 179092/242869 (executing program) 2022/10/03 12:07:25 fetching corpus: 3950, signal 180403/244342 (executing program) 2022/10/03 12:07:25 fetching corpus: 4000, signal 181930/245892 (executing program) 2022/10/03 12:07:25 fetching corpus: 4050, signal 182405/246885 (executing program) 2022/10/03 12:07:25 fetching corpus: 4100, signal 183325/248115 (executing program) 2022/10/03 12:07:25 fetching corpus: 4150, signal 183802/249159 (executing program) 2022/10/03 12:07:26 fetching corpus: 4200, signal 184274/250187 (executing program) 2022/10/03 12:07:26 fetching corpus: 4250, signal 184954/251321 (executing program) 2022/10/03 12:07:26 fetching corpus: 4300, signal 185912/252586 (executing program) 2022/10/03 12:07:26 fetching corpus: 4350, signal 186655/253664 (executing program) 2022/10/03 12:07:26 fetching corpus: 4400, signal 187713/254834 (executing program) 2022/10/03 12:07:26 fetching corpus: 4450, signal 188079/255735 (executing program) 2022/10/03 12:07:26 fetching corpus: 4500, signal 188550/256684 (executing program) 2022/10/03 12:07:26 fetching corpus: 4550, signal 188984/257610 (executing program) 2022/10/03 12:07:26 fetching corpus: 4600, signal 189853/258662 (executing program) 2022/10/03 12:07:27 fetching corpus: 4650, signal 190491/259703 (executing program) 2022/10/03 12:07:27 fetching corpus: 4700, signal 191192/260708 (executing program) 2022/10/03 12:07:27 fetching corpus: 4750, signal 191638/261605 (executing program) 2022/10/03 12:07:27 fetching corpus: 4800, signal 192500/262646 (executing program) 2022/10/03 12:07:27 fetching corpus: 4850, signal 193019/263578 (executing program) 2022/10/03 12:07:27 fetching corpus: 4900, signal 193513/264475 (executing program) 2022/10/03 12:07:27 fetching corpus: 4950, signal 194087/265433 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/266402 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/267101 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/267833 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/268533 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/269248 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/269981 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/270679 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/271363 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/272100 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/272802 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/273486 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/274193 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/274914 (executing program) 2022/10/03 12:07:27 fetching corpus: 5000, signal 194783/275615 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/276306 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/276999 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/277749 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/278498 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/279202 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/279923 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/280645 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/281379 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/282082 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/282787 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/283518 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/284211 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/284915 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/285634 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/286374 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/287078 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/287798 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/288487 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/289229 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/289944 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/290706 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/291413 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/292139 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/292864 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/293583 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/294265 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/294985 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/295707 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/296438 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/297155 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/297897 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/298631 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/299334 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/300108 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/300842 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/301541 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/301817 (executing program) 2022/10/03 12:07:28 fetching corpus: 5000, signal 194783/301817 (executing program) 2022/10/03 12:07:31 starting 8 fuzzer processes 12:07:31 executing program 2: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000240)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000280)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000002c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000300)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000340)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000380)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000003c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000400)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000440)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000480)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000004c0)) 12:07:31 executing program 0: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x80000000) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffff) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7152) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x800) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xff) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x40) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6f6c) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7fff) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x100000001) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9ce) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) 12:07:31 executing program 6: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c008810) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x2c0200, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000240)={0xd, 0x80000001}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c8, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x164, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "69494e877560a0299d4653f4d5a082b44429a754f5791fb1cd2c1709015bee85"}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @remote, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$KDADDIO(r2, 0x4b34, 0x0) fadvise64(r2, 0x0, 0x1, 0x2) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000980)={0x2, 0x1, 0x11, 0x17, 0x193, &(0x7f0000000580)="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"}) r4 = signalfd4(r2, &(0x7f00000009c0)={[0x9]}, 0x8, 0x80000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000044) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x571002, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000b40)) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) r6 = accept4$unix(r4, &(0x7f0000000b80), &(0x7f0000000c00)=0x6e, 0x0) fcntl$setstatus(r6, 0x4, 0x4c00) pread64(r5, &(0x7f0000000c40)=""/203, 0xcb, 0x0) io_submit(0x0, 0x5, &(0x7f00000011c0)=[&(0x7f0000000e80)={0x0, 0x0, 0x0, 0x7, 0x1, r4, &(0x7f0000000d40)="5c23535bde899e510b00fb0dbe491705225457fbc5ea0c3d4db8564fb51e861127b54120efc500e782e964803c4fb6433ab8125271ba96fa33d3d080e44529fc2d54088b92c60aa6d046e1f8a3cd772d6945048f5503a1ca8bf8a04659f4451cb48110aeb91ae424638c03ea43e176de4274ccb240ee1abe24e232ac74aab9b461e1fdc0b2dc6521a2e5b8cbd3ca0ba7316b29da2ac4a99c8e790bde8ab6025b6b2132caf925a652be881c35888cd726310712633d1cd5c2c8bb8ca0aa088f71f397bcd967cc2bebb82c3a0e2d6086718ce425d788d24a942c739d9e49a02472799a78145c29dc", 0xe7, 0x6, 0x0, 0x1}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000ec0)="23cfbdc115cc54f668bbe42b54226d8cf5517b75a6f739b5796d980a13beaebefad0870da30fc90e75e1", 0x2a, 0x4}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x3, 0x200, 0xffffffffffffffff, &(0x7f0000000f40)="fab0efd099e47a3a90bb4972454e50347d106c366002c58fe3775c35b843b7a2114f47", 0x23, 0x2, 0x0, 0x0, r2}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x8, 0x7, r6, &(0x7f0000000fc0)="5c4b14534c4a1911d59ae70e6bc18680a9e1596934912f88b8236f04e9d054b6", 0x20, 0x3, 0x0, 0x2}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x5, 0x5, r2, &(0x7f0000001080)="111f82fb1c8d6aca84edad2f3d11fbb9f156a2327494e907fcb2595bedf278d4ae3ce42d687e89ff6320a405fe751be695153d6491cdd0833f64f9ed557c4bc6ce0e6a12583e5872af6a83d908743a6f344206a69f44d91a950c85e07db85c1bcccabb86c6678eb8f2592d4f3c453b5fd8c6fe46ab7c87cd3affd3432894a96547ce0901c894046fba8f37217881f18b90cbfa459938800759558a0026a30a7ebbb8288993ac3ffcec3014db438dd64c6125a284f7e22ef43652e5a2642e0423fd159f4bed9073051bb69b8f7c70", 0xce, 0x4, 0x0, 0x1, r2}]) 12:07:31 executing program 5: sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4081) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4961}, 0x20000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x92c7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x38}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x8001) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff) r4 = syz_open_dev$mouse(&(0x7f0000000740), 0x10001, 0x20c000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x101340, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x8100, 0x0) fsetxattr$security_evm(r6, &(0x7f0000000900), &(0x7f0000000940)=@md5={0x1, "12135e8d4a0c7aa80074b942068f3b5f"}, 0x11, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000980)={'gretap0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(r4, &(0x7f0000000a00)='cpuset.effective_mems\x00', 0x0, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x42000, 0x0) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x11b5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8, 0x1, r9}, {0x8, 0x1, r5}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}}, 0x480) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xac, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc8bc}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r4) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004055}, 0xc000091) [ 67.848974] audit: type=1400 audit(1664798851.487:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:07:31 executing program 3: ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x3300}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0x1]}, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/165, 0xa5}, {&(0x7f0000001240)=""/244, 0xf4}, {&(0x7f0000001340)=""/192, 0xc0}, {&(0x7f0000001400)=""/253, 0xfd}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000002740)=[{&(0x7f00000016c0)=""/100, 0x64}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/146, 0x92}, {&(0x7f0000002940)=""/20, 0x14}, {&(0x7f0000002980)=""/3, 0x3}, {&(0x7f00000029c0)=""/124, 0x7c}], 0x4, &(0x7f0000002a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c00)=""/26, 0x1a}, {&(0x7f0000002c40)=""/97, 0x61}, {&(0x7f0000002cc0)=""/213, 0xd5}, {&(0x7f0000002dc0)=""/95, 0x5f}], 0x4, &(0x7f0000002e80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000002f40)=@abs, 0x6e, &(0x7f0000003380)=[{&(0x7f0000002fc0)=""/240, 0xf0}, {&(0x7f00000030c0)=""/235, 0xeb}, {&(0x7f00000031c0)=""/20, 0x14}, {&(0x7f0000003200)=""/175, 0xaf}, {&(0x7f00000032c0)=""/170, 0xaa}], 0x5}}, {{&(0x7f0000003400), 0x6e, &(0x7f0000003580)=[{&(0x7f0000003480)=""/239, 0xef}], 0x1}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000035c0)=""/166, 0xa6}, {&(0x7f0000003680)=""/105, 0x69}, {&(0x7f0000003700)=""/53, 0x35}], 0x3}}, {{&(0x7f0000003780), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000003800)=""/56, 0x38}, {&(0x7f0000003840)=""/44, 0x2c}, {&(0x7f0000003880)=""/219, 0xdb}, {&(0x7f0000003980)=""/18, 0x12}], 0x4, &(0x7f0000003a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003b40)=""/76, 0x4c}, {&(0x7f0000003bc0)=""/110, 0x6e}, {&(0x7f0000003c40)=""/211, 0xd3}, {&(0x7f0000003d40)}], 0x4, &(0x7f0000003dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003e40), 0x6e, &(0x7f0000004340)=[{&(0x7f0000003ec0)=""/81, 0x51}, {&(0x7f0000003f40)=""/111, 0x6f}, {&(0x7f0000003fc0)=""/85, 0x55}, {&(0x7f0000004040)=""/34, 0x22}, {&(0x7f0000004080)=""/232, 0xe8}, {&(0x7f0000004180)=""/212, 0xd4}, {&(0x7f0000004280)=""/134, 0x86}], 0x7}}], 0xa, 0x4000a143, 0x0) fchown(r0, r3, 0x0) r11 = syz_open_dev$vcsa(&(0x7f0000004640), 0x3c982842, 0x40) signalfd(r11, &(0x7f0000004680)={[0x9de]}, 0x8) r12 = accept4$packet(r10, &(0x7f00000046c0)={0x11, 0x0, 0x0}, &(0x7f0000004700)=0x14, 0x80000) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000004740)={0x0, r2, 0x800, 0xf, 0x4a6, 0x6}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000004800)={'syztnl0\x00', &(0x7f0000004780)={'ip6gre0\x00', r13, 0x4, 0x9, 0x9, 0x1, 0x0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0x8, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000048c0)={'ip6tnl0\x00', &(0x7f0000004840)={'syztnl2\x00', r14, 0x2f, 0xd6, 0x1, 0x68c4, 0x0, @private0, @mcast1, 0x1, 0x700, 0x5, 0x66bd}}) r15 = openat$full(0xffffffffffffff9c, &(0x7f0000004900), 0x400001, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r15, 0x89fb, &(0x7f00000049c0)={'syztnl2\x00', &(0x7f0000004940)={'ip6gre0\x00', r14, 0x2f, 0x81, 0x5, 0x8, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast2, 0x8, 0x8, 0x7f7, 0x80000001}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000004a00)={{0x1, 0x1, 0x18, r7, @out_args}, './file0\x00'}) ioctl$GIO_CMAP(r16, 0x4b70, &(0x7f0000004a40)) r17 = openat$full(0xffffffffffffff9c, &(0x7f0000004a80), 0x80, 0x0) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000004b00), r8) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r17, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x1c, r18, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x80) syncfs(r1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000004c00)={'syzkaller0\x00'}) 12:07:31 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3c28, &(0x7f0000000040)={0x0, 0x9d81, 0x8, 0x3, 0x1e1, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x200600) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x48053, r0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x7ff) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={@remote, 0x7c}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) readlinkat(r6, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/46, 0x2e) r7 = syz_io_uring_setup(0x637f, &(0x7f0000000300)={0x0, 0xe7b4, 0x8, 0x0, 0x29b}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000400)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x20010, r2, 0x0) syz_io_uring_submit(r9, r3, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4000, @fd_index=0x9, 0x6, 0x0, 0x1ff, 0x10}, 0x1) sendfile(0xffffffffffffffff, r6, &(0x7f0000000480)=0x7ff, 0x3f) syz_io_uring_setup(0x7a44, &(0x7f00000004c0)={0x0, 0xfa0c, 0x4, 0x2, 0x32d}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r10, &(0x7f00000005c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1a53, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)=0x0) kcmp(0x0, r12, 0x5, r0, 0xffffffffffffffff) syz_io_uring_submit(r8, 0x0, &(0x7f0000000740)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x1}}, 0x2) 12:07:31 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x14cf}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8002}, 0x4004044) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0xb00, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000081) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x84082}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x44}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x40040) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x2c008805) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000700)={0x0, "dcbd08f76f18b42fa3b7706826da18a8"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x47}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2400804c) pipe(&(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r5) r6 = syz_open_dev$vcsn(&(0x7f00000018c0), 0x8, 0x521000) r7 = openat2(r4, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x711940, 0x40, 0xc}, 0x18) r8 = accept4$packet(r5, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002a80)=0x14, 0x800) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$unix(r6, &(0x7f00000033c0)=[{{&(0x7f0000001900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000001980)="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", 0x1000}], 0x1, &(0x7f0000003280)=[@rights={{0x34, 0x1, 0x1, [r7, r4, r1, r8, r5, r1, r5, r5, r9]}}, @rights={{0x2c, 0x1, 0x1, [r10, r4, 0xffffffffffffffff, r1, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c}}], 0x108, 0x4008011}}], 0x1, 0x40000) 12:07:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x58, 0xf1, 0x5}) renameat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) linkat(r0, &(0x7f0000000280)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) r5 = syz_open_procfs(r4, &(0x7f00000003c0)='net\x00') io_setup(0x6, &(0x7f0000000400)=0x0) r7 = signalfd(r2, &(0x7f0000000500)={[0x6]}, 0x8) r8 = fsopen(&(0x7f00000006c0)='qnx6\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xfffffc01}}, './file0\x00'}) r10 = openat(r5, &(0x7f0000000980)='./file0\x00', 0x80, 0x142) io_submit(r6, 0x5, &(0x7f0000000a00)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0xab, r0, &(0x7f0000000440)="9f07d01aed7d60e8f2a6f472bf57e0a49cbbddf0f9f316d70b8fca7fc65a86e976e165b7dca6b1fdd5037035ca2678d959e40206a05b75b317432378245bc40b0eb1749ee34f6db2621b8adf0ffd8f424d38b85599537f8798bd234bf33c85368de6b389f73427b112f8176fe14b8887873b71b0905cd7f801ad8295ab97f6b91a09da68fba5ed7b0bea517a2143077aa39a4a", 0x93, 0x5, 0x0, 0x1, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x40, r1, &(0x7f0000000580)="ae66ec72e686668ef7371c0cec349de4329f5ea1366c5760777af9e67f8f13789b72e295acd69fd64da5603c5de72f204d3dbb4e2350af8f8ac0a42c7489c72788bd829a78839f92231137ec6ef4e116d2e71174efad5a46e484abc3e27f6c7d602c7497b759da430b43d2e45ae43a2500e511492d176086e26bd726d9f7196b2c9ce18b878b173ae51e591027c40387670c8986d57e792ebaec38a807da2ce9d3b2b354425f778d1a7e2286dc44738ea2d65cea3e947d8d754b1c040e39fc737775ea39fe9d88503ca77d3a27eb54c0c01d9be2cbb55cf677", 0xd9, 0x8, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x8001, r8, &(0x7f0000000700)="b8bf5a7016e1ced3", 0x8, 0xfffffffffffff000, 0x0, 0x1, r9}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0xff4a, r3, &(0x7f00000007c0)="c0c099d217263cf088bc9b4bea39f1d034b20187b7a78e7e02c282cc3824cb70ca99508fd650d904f444f62d3a77344c9f26f4303293124a76ecaf2f941d74e56d71787c72ebee12ccdd44c3b71de3c7c98a5fd129f75475040bfdbeaa2a6b49885ac04105b2579cc3f65ef33b0214d3eb9e5141c10174986c8848d860f3a40f8a4e44e73f3c067408e9e3d1faf194d845dc616b776328ab8402db0d5c2bdd83b9ca111e63a6", 0xa6, 0x85a, 0x0, 0x0, r0}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f00000008c0)="126a2bbaf67aa1c0b3e66ddfede8babdf324803d030d7eca1dc92a02c8dcef63af9cec0894ad9ba9449f015a7409ac71013518231e8a477664745253d8ae5169266618f348f62df0338fa135d6074cafc386acd466e188a15d054cefba5fa9b2ed856286beeeea001f60107e3069cebd55c234b7e617aa93c256a54936e5e19146670485595c1ed2c257709ad5af5cb141184a575e81e43915343b26595fef37e3ab107d92b57120c8e7", 0xaa, 0x1, 0x0, 0x1, r10}]) pipe(&(0x7f0000000a40)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r11, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xeac2, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [""]}, 0x14}}, 0x40001) [ 69.085270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.087098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.088569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.093604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.095319] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.098594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.104104] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.208382] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.210697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.212772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.216016] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.217904] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.219171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.223271] Bluetooth: hci2: HCI_REQ-0x0c1a [ 69.234372] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.241539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.242846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.243672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.245630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.251571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.285775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.289143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.290342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.294135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.295122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.297670] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.301711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.309782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.318005] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.324312] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.326935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.331085] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.332606] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.337684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.341784] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.383648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.402964] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.404317] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.405824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.407242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.412667] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.417583] Bluetooth: hci3: HCI_REQ-0x0c1a [ 69.444127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.446745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.447982] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.448149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.451157] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.452588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.459083] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.461639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.466210] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.467892] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.469298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.470509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.480470] Bluetooth: hci4: HCI_REQ-0x0c1a [ 69.481217] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.170093] Bluetooth: hci0: command 0x0409 tx timeout [ 71.234733] Bluetooth: hci2: command 0x0409 tx timeout [ 71.361570] Bluetooth: hci5: command 0x0409 tx timeout [ 71.362725] Bluetooth: hci1: command 0x0409 tx timeout [ 71.425617] Bluetooth: hci7: command 0x0409 tx timeout [ 71.427003] Bluetooth: hci3: command 0x0409 tx timeout [ 71.553532] Bluetooth: hci4: command 0x0409 tx timeout [ 71.554543] Bluetooth: hci6: command 0x0409 tx timeout [ 73.217455] Bluetooth: hci0: command 0x041b tx timeout [ 73.282451] Bluetooth: hci2: command 0x041b tx timeout [ 73.410502] Bluetooth: hci1: command 0x041b tx timeout [ 73.410952] Bluetooth: hci5: command 0x041b tx timeout [ 73.473467] Bluetooth: hci3: command 0x041b tx timeout [ 73.473893] Bluetooth: hci7: command 0x041b tx timeout [ 73.601488] Bluetooth: hci6: command 0x041b tx timeout [ 73.601934] Bluetooth: hci4: command 0x041b tx timeout [ 75.266469] Bluetooth: hci0: command 0x040f tx timeout [ 75.329459] Bluetooth: hci2: command 0x040f tx timeout [ 75.458445] Bluetooth: hci5: command 0x040f tx timeout [ 75.458925] Bluetooth: hci1: command 0x040f tx timeout [ 75.522498] Bluetooth: hci7: command 0x040f tx timeout [ 75.522939] Bluetooth: hci3: command 0x040f tx timeout [ 75.649510] Bluetooth: hci4: command 0x040f tx timeout [ 75.649985] Bluetooth: hci6: command 0x040f tx timeout [ 77.314546] Bluetooth: hci0: command 0x0419 tx timeout [ 77.378509] Bluetooth: hci2: command 0x0419 tx timeout [ 77.506487] Bluetooth: hci1: command 0x0419 tx timeout [ 77.506940] Bluetooth: hci5: command 0x0419 tx timeout [ 77.570501] Bluetooth: hci3: command 0x0419 tx timeout [ 77.570928] Bluetooth: hci7: command 0x0419 tx timeout [ 77.698521] Bluetooth: hci6: command 0x0419 tx timeout [ 77.698992] Bluetooth: hci4: command 0x0419 tx timeout 12:08:28 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343139313330323700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000541597055415970500000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2a80}, {&(0x7f0000011e00)="ed41000000080000ddf4655fddf4655fddf4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000eb7155bc00000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000af6989a500000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734313931333032372f66696c65302f66696c653000000000000000000000000000000000000000000000725ed7c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000003e5e55c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00b1ba450e386b0d85826628056e04baa73d38c7a00a08690625c6d21231b27a7f73889b37508beefc3bf90679bfd1f798db0ba24cea42d33fba9abb1c3267c600ba5208ffbca1a00e775b8b8db88fb0cc76de316d3eb385d4517ee4e6736819d2f952201b8df4250d55a35f3f3a33a7736f0f31479bf51cc59b85ffb1bdda7b5ea924aa2817397be3ca76089e0d222cb325e3e9187e6a84c6cad9b445e8eda096a9c451ced2de9cc2fb9689030000824747b231bc0db5cf0a9e459336ead4ac7f94ea93"]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) statx(r0, &(0x7f0000000140)='./file0\x00', 0x800, 0x10, &(0x7f0000000640)) [ 125.059444] loop1: detected capacity change from 0 to 2048 [ 125.100946] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.222772] EXT4-fs (loop1): unmounting filesystem. 12:08:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x35b, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff3447c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef819558"], 0x125) [ 125.294852] audit: type=1400 audit(1664798908.933:7): avc: denied { open } for pid=3710 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.296473] audit: type=1400 audit(1664798908.933:8): avc: denied { kernel } for pid=3710 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.313307] ------------[ cut here ]------------ [ 125.313330] [ 125.313334] ====================================================== [ 125.313338] WARNING: possible circular locking dependency detected [ 125.313342] 6.0.0-rc7-next-20220930 #1 Not tainted [ 125.313349] ------------------------------------------------------ [ 125.313352] syz-executor.1/3713 is trying to acquire lock: [ 125.313359] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 125.313402] [ 125.313402] but task is already holding lock: [ 125.313405] ffff88800dc7c420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.313432] [ 125.313432] which lock already depends on the new lock. [ 125.313432] [ 125.313435] [ 125.313435] the existing dependency chain (in reverse order) is: [ 125.313439] [ 125.313439] -> #3 (&ctx->lock){....}-{2:2}: [ 125.313453] _raw_spin_lock+0x2a/0x40 [ 125.313464] __perf_event_task_sched_out+0x53b/0x18d0 [ 125.313475] __schedule+0xedd/0x2470 [ 125.313489] preempt_schedule_common+0x45/0xc0 [ 125.313504] __cond_resched+0x17/0x30 [ 125.313517] __mutex_lock+0xa3/0x14d0 [ 125.313532] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.313543] do_syscall_64+0x3b/0x90 [ 125.313561] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.313574] [ 125.313574] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 125.313587] _raw_spin_lock_nested+0x30/0x40 [ 125.313597] raw_spin_rq_lock_nested+0x1e/0x30 [ 125.313611] task_fork_fair+0x63/0x4d0 [ 125.313628] sched_cgroup_fork+0x3d0/0x540 [ 125.313642] copy_process+0x4183/0x6e20 [ 125.313653] kernel_clone+0xe7/0x890 [ 125.313662] user_mode_thread+0xad/0xf0 [ 125.313672] rest_init+0x24/0x250 [ 125.313684] arch_call_rest_init+0xf/0x14 [ 125.313702] start_kernel+0x4c6/0x4eb [ 125.313717] secondary_startup_64_no_verify+0xe0/0xeb [ 125.313731] [ 125.313731] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 125.313744] _raw_spin_lock_irqsave+0x39/0x60 [ 125.313755] try_to_wake_up+0xab/0x1930 [ 125.313768] up+0x75/0xb0 [ 125.313781] __up_console_sem+0x6e/0x80 [ 125.313797] console_unlock+0x46a/0x590 [ 125.313813] do_con_write+0xc05/0x1d50 [ 125.313824] con_write+0x21/0x40 [ 125.313833] n_tty_write+0x4d4/0xfe0 [ 125.313845] file_tty_write.constprop.0+0x455/0x8a0 [ 125.313856] vfs_write+0x9c3/0xd90 [ 125.313873] ksys_write+0x127/0x250 [ 125.313888] do_syscall_64+0x3b/0x90 [ 125.313905] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.313917] [ 125.313917] -> #0 ((console_sem).lock){....}-{2:2}: [ 125.313930] __lock_acquire+0x2a02/0x5e70 [ 125.313947] lock_acquire+0x1a2/0x530 [ 125.313963] _raw_spin_lock_irqsave+0x39/0x60 [ 125.313973] down_trylock+0xe/0x70 [ 125.313988] __down_trylock_console_sem+0x3b/0xd0 [ 125.314004] vprintk_emit+0x16b/0x560 [ 125.314019] vprintk+0x84/0xa0 [ 125.314035] _printk+0xba/0xf1 [ 125.314047] report_bug.cold+0x72/0xab [ 125.314063] handle_bug+0x3c/0x70 [ 125.314079] exc_invalid_op+0x14/0x50 [ 125.314095] asm_exc_invalid_op+0x16/0x20 [ 125.314107] group_sched_out.part.0+0x2c7/0x460 [ 125.314125] ctx_sched_out+0x8f1/0xc10 [ 125.314141] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.314152] __schedule+0xedd/0x2470 [ 125.314165] preempt_schedule_common+0x45/0xc0 [ 125.314180] __cond_resched+0x17/0x30 [ 125.314194] __mutex_lock+0xa3/0x14d0 [ 125.314208] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.314220] do_syscall_64+0x3b/0x90 [ 125.314236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.314248] [ 125.314248] other info that might help us debug this: [ 125.314248] [ 125.314251] Chain exists of: [ 125.314251] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 125.314251] [ 125.314266] Possible unsafe locking scenario: [ 125.314266] [ 125.314268] CPU0 CPU1 [ 125.314270] ---- ---- [ 125.314273] lock(&ctx->lock); [ 125.314278] lock(&rq->__lock); [ 125.314285] lock(&ctx->lock); [ 125.314291] lock((console_sem).lock); [ 125.314297] [ 125.314297] *** DEADLOCK *** [ 125.314297] [ 125.314299] 2 locks held by syz-executor.1/3713: [ 125.314305] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 125.314334] #1: ffff88800dc7c420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 125.314360] [ 125.314360] stack backtrace: [ 125.314363] CPU: 1 PID: 3713 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.314376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.314384] Call Trace: [ 125.314387] [ 125.314392] dump_stack_lvl+0x8b/0xb3 [ 125.314413] check_noncircular+0x263/0x2e0 [ 125.314432] ? format_decode+0x26c/0xb50 [ 125.314448] ? print_circular_bug+0x450/0x450 [ 125.314465] ? simple_strtoul+0x30/0x30 [ 125.314480] ? lock_release+0x547/0x750 [ 125.314497] ? format_decode+0x26c/0xb50 [ 125.314514] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 125.314531] __lock_acquire+0x2a02/0x5e70 [ 125.314553] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 125.314575] lock_acquire+0x1a2/0x530 [ 125.314591] ? down_trylock+0xe/0x70 [ 125.314608] ? lock_release+0x750/0x750 [ 125.314629] ? vprintk+0x84/0xa0 [ 125.314646] _raw_spin_lock_irqsave+0x39/0x60 [ 125.314657] ? down_trylock+0xe/0x70 [ 125.314673] down_trylock+0xe/0x70 [ 125.314689] ? vprintk+0x84/0xa0 [ 125.314705] __down_trylock_console_sem+0x3b/0xd0 [ 125.314723] vprintk_emit+0x16b/0x560 [ 125.314741] vprintk+0x84/0xa0 [ 125.314758] _printk+0xba/0xf1 [ 125.314770] ? record_print_text.cold+0x16/0x16 [ 125.314786] ? report_bug.cold+0x66/0xab [ 125.314803] ? group_sched_out.part.0+0x2c7/0x460 [ 125.314824] report_bug.cold+0x72/0xab [ 125.314845] handle_bug+0x3c/0x70 [ 125.314862] exc_invalid_op+0x14/0x50 [ 125.314880] asm_exc_invalid_op+0x16/0x20 [ 125.314893] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.314913] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.314925] RSP: 0018:ffff888040a47978 EFLAGS: 00010006 [ 125.314934] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.314941] RDX: ffff88800ec81ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.314949] RBP: ffff888040a48000 R08: 0000000000000005 R09: 0000000000000001 [ 125.314956] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800dc7c400 [ 125.314964] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.314975] ? group_sched_out.part.0+0x2c7/0x460 [ 125.314995] ? group_sched_out.part.0+0x2c7/0x460 [ 125.315015] ctx_sched_out+0x8f1/0xc10 [ 125.315034] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.315048] ? lock_is_held_type+0xd7/0x130 [ 125.315062] ? __perf_cgroup_move+0x160/0x160 [ 125.315072] ? set_next_entity+0x304/0x550 [ 125.315090] ? update_curr+0x267/0x740 [ 125.315108] ? lock_is_held_type+0xd7/0x130 [ 125.315122] __schedule+0xedd/0x2470 [ 125.315139] ? io_schedule_timeout+0x150/0x150 [ 125.315154] ? find_held_lock+0x2c/0x110 [ 125.315170] ? lock_is_held_type+0xd7/0x130 [ 125.315183] ? __cond_resched+0x17/0x30 [ 125.315198] preempt_schedule_common+0x45/0xc0 [ 125.315215] __cond_resched+0x17/0x30 [ 125.315229] __mutex_lock+0xa3/0x14d0 [ 125.315246] ? lock_is_held_type+0xd7/0x130 [ 125.315258] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.315272] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.315288] ? lock_release+0x3b2/0x750 [ 125.315305] ? __up_read+0x192/0x730 [ 125.315320] ? up_write+0x520/0x520 [ 125.315335] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 125.315349] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.315364] ? __up_read+0x192/0x730 [ 125.315377] ? perf_compat_ioctl+0x130/0x130 [ 125.315389] ? up_write+0x520/0x520 [ 125.315407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.315421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.315436] do_syscall_64+0x3b/0x90 [ 125.315454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.315467] RIP: 0033:0x7fb62d280b19 [ 125.315475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.315486] RSP: 002b:00007fb62a7f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.315497] RAX: ffffffffffffffda RBX: 00007fb62d393f60 RCX: 00007fb62d280b19 [ 125.315504] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 125.315512] RBP: 00007fb62d2daf6d R08: 0000000000000000 R09: 0000000000000000 [ 125.315519] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.315526] R13: 00007ffd7aa4aacf R14: 00007fb62a7f6300 R15: 0000000000022000 [ 125.315539] [ 125.376727] WARNING: CPU: 1 PID: 3713 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 125.377433] Modules linked in: [ 125.377681] CPU: 1 PID: 3713 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 125.378288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.379119] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 125.379539] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 125.380895] RSP: 0018:ffff888040a47978 EFLAGS: 00010006 [ 125.381309] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.381838] RDX: ffff88800ec81ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 125.382373] RBP: ffff888040a48000 R08: 0000000000000005 R09: 0000000000000001 [ 125.382908] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800dc7c400 [ 125.383448] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 125.383982] FS: 00007fb62a7f6700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 125.384579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.385024] CR2: 00007f1d4f840000 CR3: 0000000017e1e000 CR4: 0000000000350ee0 [ 125.385564] Call Trace: [ 125.385764] [ 125.385937] ctx_sched_out+0x8f1/0xc10 [ 125.386243] __perf_event_task_sched_out+0x6d0/0x18d0 [ 125.386637] ? lock_is_held_type+0xd7/0x130 [ 125.386967] ? __perf_cgroup_move+0x160/0x160 [ 125.387309] ? set_next_entity+0x304/0x550 [ 125.387641] ? update_curr+0x267/0x740 [ 125.387943] ? lock_is_held_type+0xd7/0x130 [ 125.388272] __schedule+0xedd/0x2470 [ 125.388566] ? io_schedule_timeout+0x150/0x150 [ 125.388922] ? find_held_lock+0x2c/0x110 [ 125.389251] ? lock_is_held_type+0xd7/0x130 [ 125.389579] ? __cond_resched+0x17/0x30 [ 125.389887] preempt_schedule_common+0x45/0xc0 [ 125.390238] __cond_resched+0x17/0x30 [ 125.390533] __mutex_lock+0xa3/0x14d0 [ 125.390828] ? lock_is_held_type+0xd7/0x130 [ 125.391156] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.391543] ? mutex_lock_io_nested+0x1310/0x1310 [ 125.391917] ? lock_release+0x3b2/0x750 [ 125.392223] ? __up_read+0x192/0x730 [ 125.392514] ? up_write+0x520/0x520 [ 125.392799] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 125.393190] __do_sys_perf_event_open+0x1eec/0x32c0 [ 125.393568] ? __up_read+0x192/0x730 [ 125.393860] ? perf_compat_ioctl+0x130/0x130 [ 125.394195] ? up_write+0x520/0x520 [ 125.394486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.394879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 125.395275] do_syscall_64+0x3b/0x90 [ 125.395575] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.395968] RIP: 0033:0x7fb62d280b19 [ 125.396255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 125.397612] RSP: 002b:00007fb62a7f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.398182] RAX: ffffffffffffffda RBX: 00007fb62d393f60 RCX: 00007fb62d280b19 [ 125.398719] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 125.399255] RBP: 00007fb62d2daf6d R08: 0000000000000000 R09: 0000000000000000 [ 125.399781] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.400320] R13: 00007ffd7aa4aacf R14: 00007fb62a7f6300 R15: 0000000000022000 [ 125.400856] [ 125.401050] irq event stamp: 838 [ 125.401304] hardirqs last enabled at (837): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 125.402001] hardirqs last disabled at (838): [] __schedule+0x1225/0x2470 [ 125.402619] softirqs last enabled at (658): [] __irq_exit_rcu+0x11b/0x180 [ 125.403261] softirqs last disabled at (651): [] __irq_exit_rcu+0x11b/0x180 [ 125.403901] ---[ end trace 0000000000000000 ]--- [ 125.982404] hrtimer: interrupt took 19096 ns 12:08:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x35b, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff3447c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef819558"], 0x125) 12:08:30 executing program 1: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="68000000290000000008000000200000000000c48d0091886bc5ff86640f723033c7000000000000000000000007002e2f66696c6530000100ae5b3db83d688d5c000000000000000000000000002100000007002e"], 0x68) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x400080, 0x0) syz_io_uring_setup(0x1304, &(0x7f0000001280)={0x0, 0xfd40, 0x1, 0x2, 0x328, 0x0, r1}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001300), &(0x7f0000001340)) write$P9_RREAD(r1, &(0x7f0000000100)={0xc1, 0x75, 0x1, {0xb6, "f930083b8170ea7fa09b39053be6aa27dbcba0e3b8ee9b1fb06c75ecba93c0fc05de58636315534726f4886f6b0c804351dbb037ccd6007e183c66154829b544730d095a509f025d79b965265dfe2df2fd73732ce85de5a6e59b2ad7e37edbc73c4dd50a115971ae61127fe8c2c83fdbf8b25bc231d14c814826c6cd4c6fde31a08b34c434a5b96562f1a138ce7b85ee17737f9dbca3cc98465ca963027940f1647331c1dcbd988d735a4ed9f4e92931882031b3b428"}}, 0xc1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) 12:08:30 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/97) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0xee01, 0xee01, 0xee00, 0xee01, 0x0, 0x40}, 0x9, 0x1, 0x1, 0x0, 0xffffffffffffffff, r4, 0x8}) rt_tgsigqueueinfo(r4, r1, 0xe, &(0x7f00000003c0)={0x19, 0x3, 0xfffffffb}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7f, 0x4, 0x3e, 0x0, 0x7ff, 0x28, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_config_ext={0x2cd, 0x4}, 0x43002, 0x64b2, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000001}, 0x0, 0xf, r2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r3) r5 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r5, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r5, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 12:08:30 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100098e670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200098e670325132510000e670325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200098e670325132510000e670325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200098e670325132510000e67032510b0064000000", 0x120, 0x4}, {&(0x7f0000010500)="2e20202020202020202020100098e670325132510000e67032510300000000002e2e202020202020202020100098e670325132510000e670325100000000000041660069006c00700030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098e670325132510000e670325104001a040000", 0x80, 0x2800}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1cdf8094}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3800}, {&(0x7f0000010c00)="73797a6b616c6c657273797a6b616c6c657273797a6a616c75000000797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572737923d892471bf556a86dc48780ce337a6b616c6c65727300"/128, 0x80, 0x6800}], 0x0, &(0x7f0000010d00)) openat(r0, &(0x7f0000000140)='./file1\x00', 0x1202c0, 0x5) renameat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') [ 126.733766] loop0: detected capacity change from 0 to 264192 [ 126.759081] FAT-fs (loop0): bogus number of FAT structure [ 126.760201] FAT-fs (loop0): Can't find a valid FAT filesystem 12:08:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e39333832373135313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001f4ebd2e6bb144ba8e000d53fbc5896c010000000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f00000000000004000800000000000000050000000600"/64, 0x40, 0x4100}, {&(0x7f0000012600)="20000000dc5271addc5271ad00000000e0f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="c041000000300000e0f4655fe0f4655fe0f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000e1f4655fe1f4655fe1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f736dadd00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000e1f4655fe1f4655fe1f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f024aad600000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000e1f4655fe1f4655fe1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3933383237313531382f66696c65302f66696c653000000000000000000000000000000000000000000000543a54af00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0064fd3e8e0382bb65339172102c8d4476b425ff20dad0d077eefae58b258d33c271dc145cd3086de55759b8f18482"]) [ 126.920028] loop0: detected capacity change from 0 to 512 [ 126.931848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 12:08:30 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/97) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0xee01, 0xee01, 0xee00, 0xee01, 0x0, 0x40}, 0x9, 0x1, 0x1, 0x0, 0xffffffffffffffff, r4, 0x8}) rt_tgsigqueueinfo(r4, r1, 0xe, &(0x7f00000003c0)={0x19, 0x3, 0xfffffffb}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7f, 0x7f, 0x4, 0x3e, 0x0, 0x7ff, 0x28, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_config_ext={0x2cd, 0x4}, 0x43002, 0x64b2, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000001}, 0x0, 0xf, r2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r3) r5 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r5, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r5, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) [ 127.031514] EXT4-fs (loop0): unmounting filesystem. [ 132.609445] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 132.609471] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 132.610527] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 132.673478] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 132.674341] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 134.859004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.861217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.862730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.865570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.867698] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.869584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.873563] Bluetooth: hci1: HCI_REQ-0x0c1a [ 134.968030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.969243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.970851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.973294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.981618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 134.987625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.992234] Bluetooth: hci2: HCI_REQ-0x0c1a VM DIAGNOSIS: 12:08:29 Registers: info registers vcpu 0 RAX=ffffffff817ce0cf RBX=ffffffff81359c40 RCX=0000000000000000 RDX=1ffff11003785ee5 RSI=ffffffff817ce0cf RDI=ffff88801bc2f798 RBP=ffff88801bc2f768 RSP=ffff88801bc2f6c0 R8 =ffffffff85ee81fc R9 =ffffffff85ee8200 R10=ffffed1003785ee7 R11=ffff88801bc2f710 R12=ffff88801bc2f798 R13=0000000000000000 R14=ffff888018618000 R15=0000000000000000 RIP=ffffffff8460394c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe2f4e1c50 CR3=000000003f5cc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 000000ff00000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888040a473c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000000000d R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb62a7f6700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1d4f840000 CR3=0000000017e1e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000