syzkaller login: [ 44.302017] sshd (242) used greatest stack depth: 24624 bytes left Warning: Permanently added '[localhost]:32749' (ECDSA) to the list of known hosts. 2022/09/12 16:31:24 fuzzer started 2022/09/12 16:31:25 dialing manager at localhost:38027 [ 46.457668] cgroup: Unknown subsys name 'net' [ 46.596110] cgroup: Unknown subsys name 'rlimit' 2022/09/12 16:31:39 syscalls: 2215 2022/09/12 16:31:39 code coverage: enabled 2022/09/12 16:31:39 comparison tracing: enabled 2022/09/12 16:31:39 extra coverage: enabled 2022/09/12 16:31:39 setuid sandbox: enabled 2022/09/12 16:31:39 namespace sandbox: enabled 2022/09/12 16:31:39 Android sandbox: enabled 2022/09/12 16:31:39 fault injection: enabled 2022/09/12 16:31:39 leak checking: enabled 2022/09/12 16:31:39 net packet injection: enabled 2022/09/12 16:31:39 net device setup: enabled 2022/09/12 16:31:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 16:31:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 16:31:39 USB emulation: enabled 2022/09/12 16:31:39 hci packet injection: enabled 2022/09/12 16:31:39 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 16:31:39 802.15.4 emulation: enabled 2022/09/12 16:31:39 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 16:31:39 fetching corpus: 50, signal 28335/31864 (executing program) 2022/09/12 16:31:39 fetching corpus: 100, signal 41342/46313 (executing program) 2022/09/12 16:31:39 fetching corpus: 150, signal 49761/56094 (executing program) 2022/09/12 16:31:39 fetching corpus: 200, signal 62409/69806 (executing program) 2022/09/12 16:31:39 fetching corpus: 250, signal 69400/77939 (executing program) 2022/09/12 16:31:39 fetching corpus: 300, signal 74014/83750 (executing program) 2022/09/12 16:31:40 fetching corpus: 350, signal 79032/89790 (executing program) 2022/09/12 16:31:40 fetching corpus: 400, signal 83906/95682 (executing program) 2022/09/12 16:31:40 fetching corpus: 450, signal 86037/98933 (executing program) 2022/09/12 16:31:40 fetching corpus: 500, signal 89588/103439 (executing program) 2022/09/12 16:31:40 fetching corpus: 550, signal 92161/107043 (executing program) 2022/09/12 16:31:40 fetching corpus: 600, signal 94199/110119 (executing program) 2022/09/12 16:31:40 fetching corpus: 650, signal 98117/114817 (executing program) 2022/09/12 16:31:41 fetching corpus: 700, signal 101997/119394 (executing program) 2022/09/12 16:31:41 fetching corpus: 750, signal 105042/123171 (executing program) 2022/09/12 16:31:41 fetching corpus: 800, signal 106586/125653 (executing program) 2022/09/12 16:31:41 fetching corpus: 850, signal 108898/128755 (executing program) 2022/09/12 16:31:41 fetching corpus: 900, signal 112069/132517 (executing program) 2022/09/12 16:31:41 fetching corpus: 950, signal 114580/135649 (executing program) 2022/09/12 16:31:41 fetching corpus: 1000, signal 117808/139340 (executing program) 2022/09/12 16:31:41 fetching corpus: 1050, signal 120180/142255 (executing program) 2022/09/12 16:31:42 fetching corpus: 1100, signal 122621/145189 (executing program) 2022/09/12 16:31:42 fetching corpus: 1150, signal 124478/147646 (executing program) 2022/09/12 16:31:42 fetching corpus: 1200, signal 126032/149903 (executing program) 2022/09/12 16:31:42 fetching corpus: 1250, signal 128574/152897 (executing program) 2022/09/12 16:31:42 fetching corpus: 1300, signal 130452/155329 (executing program) 2022/09/12 16:31:42 fetching corpus: 1350, signal 132666/158014 (executing program) 2022/09/12 16:31:42 fetching corpus: 1400, signal 134974/160633 (executing program) 2022/09/12 16:31:42 fetching corpus: 1450, signal 136362/162564 (executing program) 2022/09/12 16:31:43 fetching corpus: 1500, signal 138519/165086 (executing program) 2022/09/12 16:31:43 fetching corpus: 1550, signal 140686/167586 (executing program) 2022/09/12 16:31:43 fetching corpus: 1600, signal 142089/169456 (executing program) 2022/09/12 16:31:43 fetching corpus: 1650, signal 144168/171846 (executing program) 2022/09/12 16:31:43 fetching corpus: 1700, signal 145369/173502 (executing program) 2022/09/12 16:31:43 fetching corpus: 1750, signal 147142/175503 (executing program) 2022/09/12 16:31:43 fetching corpus: 1800, signal 148715/177425 (executing program) 2022/09/12 16:31:43 fetching corpus: 1850, signal 150559/179486 (executing program) 2022/09/12 16:31:43 fetching corpus: 1900, signal 152252/181346 (executing program) 2022/09/12 16:31:44 fetching corpus: 1950, signal 153311/182796 (executing program) 2022/09/12 16:31:44 fetching corpus: 2000, signal 155194/184750 (executing program) 2022/09/12 16:31:44 fetching corpus: 2050, signal 156312/186250 (executing program) 2022/09/12 16:31:44 fetching corpus: 2100, signal 157159/187555 (executing program) 2022/09/12 16:31:44 fetching corpus: 2150, signal 158507/189160 (executing program) 2022/09/12 16:31:44 fetching corpus: 2200, signal 159860/190659 (executing program) 2022/09/12 16:31:44 fetching corpus: 2250, signal 161378/192270 (executing program) 2022/09/12 16:31:44 fetching corpus: 2300, signal 162421/193594 (executing program) 2022/09/12 16:31:45 fetching corpus: 2350, signal 163600/195000 (executing program) 2022/09/12 16:31:45 fetching corpus: 2400, signal 164977/196492 (executing program) 2022/09/12 16:31:45 fetching corpus: 2450, signal 166422/198020 (executing program) 2022/09/12 16:31:45 fetching corpus: 2500, signal 167429/199198 (executing program) 2022/09/12 16:31:45 fetching corpus: 2550, signal 168312/200374 (executing program) 2022/09/12 16:31:45 fetching corpus: 2600, signal 169183/201429 (executing program) 2022/09/12 16:31:45 fetching corpus: 2650, signal 170933/203115 (executing program) 2022/09/12 16:31:46 fetching corpus: 2700, signal 172007/204281 (executing program) 2022/09/12 16:31:46 fetching corpus: 2750, signal 172949/205388 (executing program) 2022/09/12 16:31:46 fetching corpus: 2800, signal 173831/206447 (executing program) 2022/09/12 16:31:46 fetching corpus: 2850, signal 174793/207547 (executing program) 2022/09/12 16:31:46 fetching corpus: 2900, signal 175404/208440 (executing program) 2022/09/12 16:31:46 fetching corpus: 2950, signal 176711/209719 (executing program) 2022/09/12 16:31:46 fetching corpus: 3000, signal 178828/211280 (executing program) 2022/09/12 16:31:46 fetching corpus: 3050, signal 179853/212343 (executing program) 2022/09/12 16:31:47 fetching corpus: 3100, signal 180909/213383 (executing program) 2022/09/12 16:31:47 fetching corpus: 3150, signal 182045/214397 (executing program) 2022/09/12 16:31:47 fetching corpus: 3200, signal 183089/215467 (executing program) 2022/09/12 16:31:47 fetching corpus: 3250, signal 184175/216464 (executing program) 2022/09/12 16:31:47 fetching corpus: 3300, signal 184859/217264 (executing program) 2022/09/12 16:31:47 fetching corpus: 3350, signal 186136/218339 (executing program) 2022/09/12 16:31:47 fetching corpus: 3400, signal 186894/219122 (executing program) 2022/09/12 16:31:48 fetching corpus: 3450, signal 188027/220063 (executing program) 2022/09/12 16:31:48 fetching corpus: 3500, signal 189589/221197 (executing program) 2022/09/12 16:31:48 fetching corpus: 3550, signal 190417/222003 (executing program) 2022/09/12 16:31:48 fetching corpus: 3600, signal 191390/222879 (executing program) 2022/09/12 16:31:48 fetching corpus: 3650, signal 192245/223625 (executing program) 2022/09/12 16:31:48 fetching corpus: 3700, signal 192887/224280 (executing program) 2022/09/12 16:31:49 fetching corpus: 3750, signal 193900/225068 (executing program) 2022/09/12 16:31:49 fetching corpus: 3800, signal 194705/225790 (executing program) 2022/09/12 16:31:49 fetching corpus: 3850, signal 195395/226458 (executing program) 2022/09/12 16:31:49 fetching corpus: 3900, signal 196300/227133 (executing program) 2022/09/12 16:31:49 fetching corpus: 3950, signal 197205/227848 (executing program) 2022/09/12 16:31:49 fetching corpus: 4000, signal 197996/228507 (executing program) 2022/09/12 16:31:49 fetching corpus: 4050, signal 198375/228978 (executing program) 2022/09/12 16:31:50 fetching corpus: 4100, signal 199058/229568 (executing program) 2022/09/12 16:31:50 fetching corpus: 4150, signal 199676/230148 (executing program) 2022/09/12 16:31:50 fetching corpus: 4200, signal 200393/230762 (executing program) 2022/09/12 16:31:50 fetching corpus: 4250, signal 201379/231404 (executing program) 2022/09/12 16:31:50 fetching corpus: 4300, signal 202022/231925 (executing program) 2022/09/12 16:31:50 fetching corpus: 4350, signal 202798/232481 (executing program) 2022/09/12 16:31:50 fetching corpus: 4400, signal 203557/233008 (executing program) 2022/09/12 16:31:51 fetching corpus: 4450, signal 204953/233683 (executing program) 2022/09/12 16:31:51 fetching corpus: 4500, signal 205937/234369 (executing program) 2022/09/12 16:31:51 fetching corpus: 4550, signal 206431/234813 (executing program) 2022/09/12 16:31:51 fetching corpus: 4600, signal 207081/235262 (executing program) 2022/09/12 16:31:51 fetching corpus: 4650, signal 207953/235740 (executing program) 2022/09/12 16:31:51 fetching corpus: 4700, signal 208816/236230 (executing program) 2022/09/12 16:31:51 fetching corpus: 4750, signal 209440/236654 (executing program) 2022/09/12 16:31:51 fetching corpus: 4800, signal 210190/237097 (executing program) 2022/09/12 16:31:52 fetching corpus: 4850, signal 210888/237500 (executing program) 2022/09/12 16:31:52 fetching corpus: 4900, signal 211590/237894 (executing program) 2022/09/12 16:31:52 fetching corpus: 4950, signal 212354/238331 (executing program) 2022/09/12 16:31:52 fetching corpus: 5000, signal 212977/238735 (executing program) 2022/09/12 16:31:52 fetching corpus: 5050, signal 213897/239131 (executing program) 2022/09/12 16:31:52 fetching corpus: 5100, signal 214369/239478 (executing program) 2022/09/12 16:31:53 fetching corpus: 5150, signal 214920/239787 (executing program) 2022/09/12 16:31:53 fetching corpus: 5200, signal 215725/240151 (executing program) 2022/09/12 16:31:53 fetching corpus: 5250, signal 216421/240508 (executing program) 2022/09/12 16:31:53 fetching corpus: 5300, signal 216854/240783 (executing program) 2022/09/12 16:31:53 fetching corpus: 5350, signal 217300/241126 (executing program) 2022/09/12 16:31:53 fetching corpus: 5400, signal 217706/241416 (executing program) 2022/09/12 16:31:53 fetching corpus: 5450, signal 218237/241720 (executing program) 2022/09/12 16:31:54 fetching corpus: 5500, signal 219068/242029 (executing program) 2022/09/12 16:31:54 fetching corpus: 5550, signal 219635/242276 (executing program) 2022/09/12 16:31:54 fetching corpus: 5600, signal 220065/242498 (executing program) 2022/09/12 16:31:54 fetching corpus: 5650, signal 220797/242759 (executing program) 2022/09/12 16:31:54 fetching corpus: 5700, signal 222096/243089 (executing program) 2022/09/12 16:31:54 fetching corpus: 5750, signal 222940/243329 (executing program) 2022/09/12 16:31:55 fetching corpus: 5800, signal 223324/243544 (executing program) 2022/09/12 16:31:55 fetching corpus: 5850, signal 223965/243754 (executing program) 2022/09/12 16:31:55 fetching corpus: 5900, signal 224376/243847 (executing program) 2022/09/12 16:31:55 fetching corpus: 5950, signal 224905/243863 (executing program) 2022/09/12 16:31:55 fetching corpus: 6000, signal 225396/243867 (executing program) 2022/09/12 16:31:55 fetching corpus: 6050, signal 225783/243895 (executing program) 2022/09/12 16:31:55 fetching corpus: 6100, signal 226246/243900 (executing program) 2022/09/12 16:31:56 fetching corpus: 6150, signal 227392/243905 (executing program) 2022/09/12 16:31:56 fetching corpus: 6200, signal 228184/243907 (executing program) 2022/09/12 16:31:56 fetching corpus: 6250, signal 228700/243913 (executing program) 2022/09/12 16:31:56 fetching corpus: 6300, signal 229349/243922 (executing program) 2022/09/12 16:31:56 fetching corpus: 6350, signal 229783/243943 (executing program) 2022/09/12 16:31:56 fetching corpus: 6400, signal 230134/243964 (executing program) 2022/09/12 16:31:56 fetching corpus: 6450, signal 230628/243979 (executing program) 2022/09/12 16:31:57 fetching corpus: 6500, signal 231118/243987 (executing program) 2022/09/12 16:31:57 fetching corpus: 6550, signal 231510/244071 (executing program) 2022/09/12 16:31:57 fetching corpus: 6600, signal 232143/244079 (executing program) 2022/09/12 16:31:57 fetching corpus: 6650, signal 232640/244145 (executing program) 2022/09/12 16:31:57 fetching corpus: 6700, signal 233061/244177 (executing program) 2022/09/12 16:31:57 fetching corpus: 6750, signal 233673/244178 (executing program) 2022/09/12 16:31:57 fetching corpus: 6800, signal 234369/244332 (executing program) 2022/09/12 16:31:57 fetching corpus: 6825, signal 234519/244334 (executing program) 2022/09/12 16:31:57 fetching corpus: 6825, signal 234519/244334 (executing program) 2022/09/12 16:32:00 starting 8 fuzzer processes 16:32:00 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd18100000000000000000089"]) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)="ed", 0x1}]) 16:32:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 16:32:00 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) [ 81.969069] audit: type=1400 audit(1663000320.696:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:32:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)="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", 0x14a}, {&(0x7f0000000300)="0df3d0e6086271eba1ef9e65902740ded2df990b21eea393f417ca2bfc2fff1ed8afee436e500d5ebc3d5d7324da8b7f1949e05e81a305c09343b529e226efb0446a01d36155d770828fa79773b1b30fd2e17e3bf0ea2c864f374421fc62071b2f63698fcd1a139d80ea1bae13dc3c0059977bfec8b18553fd45c439ad4a519e10ae9f64c75f185773004c962b6e23859fb9ff83bbe4dcefabf9848836618ae1c5e101f144662637af5423c5c59ea1a6cc89f3290d03b33455d5dc7145fbe916173b5c54", 0xc4}, {&(0x7f0000000080)="72ca97e73a546927fb6ee42fb3adfe2e725aba62cdf33b2b56", 0x19}, {&(0x7f0000000400)="705817196ef0f1fd189a7cfc982b6b57e05cff796d1d7053bc064350d052f6f286264d12825488b9083d15f83647594eae9ede97226c9d3f180e5a667eba391eb1b2942ca55e620073ca47d7f7bdcc6234fa340897a43843a3d937566363d610e65b5322673538a7e4897a314204814da76f759cfb848c2c3dfd88210616f8dc7fd91f216d7d169339eb36f2bd679b04e97ba7d27261e5055e79", 0x9a}, {&(0x7f00000004c0)="10d6c851507bda928e9c27e34763311544f2aac331fadea1eaa424bf45e271df764c659003826ba6d226d3a4d4aee483152575decabb6c31f610a1845afefd18cae598db86e3d44fbcaac01f2c168bea8b2eef44a9bcd2b8e0b12aa0d8d56228c16f22d6e62afa5b108060d55db46a654bdba9f6764889ea2dbc8c071b15249c", 0x80}, {&(0x7f00000000c0)="0faa735ea782f7943312c07c12000068c4df", 0x12}, {&(0x7f0000000540)="5d44e6dcd31188269fb399c529b5cb2b2aebebd6767b0c8534e4aaa4ef373c976411d2f953b35fbcb87be01675f61e4b4e31940d638fef0d6aee3e3e35d4675609e0613dea23f2bc653e67f3e6af03fd6e7cb3168547419068ea55ca6d56df723988068eb0bf59293905b5e4caf03449f5553b6ed543c60a093614757f46c60c19086a6131923c9771f9f143c1f487557b2f08bbdd1648cf07dbc913e77eb543f9de59ed1c11bfb56097ff57af45e4618c0b37d29580e46e6a7eb59b982b93b7a3c11345b82d47560efc5a02e2c1f2debac21aa55595089737e7952f464dccee5d9d80383f508152a5bcbb", 0xeb}, {&(0x7f0000000640)="fa2b135da7b37d5e68d92ec34eb7eb6f149a37f9044f71ad2b8a67fac7d6a90e55c7ea8bb6409736de7b61cb0987e3c4262342435adbc77393a701307cd50f47189997dd7ef06aa67065ff094b320d677c459961b4e9951c982c226325859784830635a002cedb2a3b0016cbbc212d0561b6919b22117886bb0bd83fe11397cf8adaa64120aac7f36233608f6919badbd7909d17bd70a67d284f843a7918f6cded3581b504efed5dcf39209300083c9d7461749c9d86d1714f3306f999", 0xbd}, {&(0x7f0000000700)="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", 0xaff}], 0x9}}], 0x1, 0x0) 16:32:00 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@rr={0x2a, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 16:32:00 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffcfc}, {0x3c, 0xc8, 0x6}}}, 0x38) 16:32:00 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 16:32:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) [ 83.426208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.433254] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.435997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.438166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.440635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.442937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.447960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.450913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.452460] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.453673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.455080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.457456] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.459280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.461429] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.462442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.463654] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.465466] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.466965] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.467902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.468929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.469699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.476528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.477359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.478116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.489336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.490454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.491373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.492213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.493005] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.497393] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.501564] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.502552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.503850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.504803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.506132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.508507] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.509359] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.510615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.511853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.512841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.513878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.515876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.517119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.518033] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.520923] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.522325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.526482] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.544117] Bluetooth: hci2: HCI_REQ-0x0c1a [ 83.546347] Bluetooth: hci1: HCI_REQ-0x0c1a [ 83.548601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.563320] Bluetooth: hci5: HCI_REQ-0x0c1a [ 83.568323] Bluetooth: hci7: HCI_REQ-0x0c1a [ 83.570843] Bluetooth: hci4: HCI_REQ-0x0c1a [ 83.571905] Bluetooth: hci3: HCI_REQ-0x0c1a [ 83.573624] Bluetooth: hci6: HCI_REQ-0x0c1a [ 83.585760] Bluetooth: hci0: HCI_REQ-0x0c1a [ 85.592860] Bluetooth: hci6: command 0x0409 tx timeout [ 85.592870] Bluetooth: hci5: command 0x0409 tx timeout [ 85.595442] Bluetooth: hci2: command 0x0409 tx timeout [ 85.596506] Bluetooth: hci1: command 0x0409 tx timeout [ 85.656061] Bluetooth: hci7: command 0x0409 tx timeout [ 85.659945] Bluetooth: hci0: command 0x0409 tx timeout [ 85.664113] Bluetooth: hci4: command 0x0409 tx timeout [ 85.671848] Bluetooth: hci3: command 0x0409 tx timeout [ 87.640931] Bluetooth: hci1: command 0x041b tx timeout [ 87.643322] Bluetooth: hci2: command 0x041b tx timeout [ 87.644026] Bluetooth: hci6: command 0x041b tx timeout [ 87.644556] Bluetooth: hci5: command 0x041b tx timeout [ 87.703765] Bluetooth: hci3: command 0x041b tx timeout [ 87.704416] Bluetooth: hci4: command 0x041b tx timeout [ 87.706361] Bluetooth: hci0: command 0x041b tx timeout [ 87.707088] Bluetooth: hci7: command 0x041b tx timeout [ 89.688335] Bluetooth: hci5: command 0x040f tx timeout [ 89.689147] Bluetooth: hci6: command 0x040f tx timeout [ 89.689585] Bluetooth: hci2: command 0x040f tx timeout [ 89.691603] Bluetooth: hci1: command 0x040f tx timeout [ 89.751778] Bluetooth: hci7: command 0x040f tx timeout [ 89.752408] Bluetooth: hci0: command 0x040f tx timeout [ 89.754470] Bluetooth: hci4: command 0x040f tx timeout [ 89.755078] Bluetooth: hci3: command 0x040f tx timeout [ 91.735799] Bluetooth: hci1: command 0x0419 tx timeout [ 91.736365] Bluetooth: hci2: command 0x0419 tx timeout [ 91.736908] Bluetooth: hci6: command 0x0419 tx timeout [ 91.737403] Bluetooth: hci5: command 0x0419 tx timeout [ 91.800853] Bluetooth: hci3: command 0x0419 tx timeout [ 91.801490] Bluetooth: hci4: command 0x0419 tx timeout [ 91.803409] Bluetooth: hci0: command 0x0419 tx timeout [ 91.804296] Bluetooth: hci7: command 0x0419 tx timeout [ 145.447713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.449517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.453355] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.455916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.457364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.458301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.462309] Bluetooth: hci0: HCI_REQ-0x0c1a [ 145.650095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.656366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.657633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.667881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.671795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.673573] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.683882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.700619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.702122] Bluetooth: hci2: HCI_REQ-0x0c1a [ 145.702188] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.704395] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.708103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.710111] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.711590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.714551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.716368] Bluetooth: hci7: HCI_REQ-0x0c1a [ 145.717462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.740119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.741579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.747550] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.748933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.750347] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.758056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.759297] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.760379] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.770509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.772486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.777451] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.786022] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.786087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.794123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.801401] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.802559] Bluetooth: hci4: HCI_REQ-0x0c1a [ 145.808763] Bluetooth: hci3: HCI_REQ-0x0c1a [ 145.820227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.835051] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.846621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.859796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.869960] Bluetooth: hci5: HCI_REQ-0x0c1a [ 145.898348] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.900038] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.906635] Bluetooth: hci6: HCI_REQ-0x0c1a [ 147.479817] Bluetooth: hci0: command 0x0409 tx timeout [ 147.671884] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 147.736806] Bluetooth: hci2: command 0x0409 tx timeout [ 147.737370] Bluetooth: hci7: command 0x0409 tx timeout [ 147.864727] Bluetooth: hci3: command 0x0409 tx timeout [ 147.865193] Bluetooth: hci4: command 0x0409 tx timeout [ 147.928044] Bluetooth: hci6: command 0x0409 tx timeout [ 147.929084] Bluetooth: hci5: command 0x0409 tx timeout [ 149.527743] Bluetooth: hci0: command 0x041b tx timeout [ 149.783792] Bluetooth: hci7: command 0x041b tx timeout [ 149.784496] Bluetooth: hci2: command 0x041b tx timeout [ 149.911738] Bluetooth: hci4: command 0x041b tx timeout [ 149.912563] Bluetooth: hci3: command 0x041b tx timeout [ 149.975754] Bluetooth: hci5: command 0x041b tx timeout [ 149.976302] Bluetooth: hci6: command 0x041b tx timeout [ 151.575870] Bluetooth: hci0: command 0x040f tx timeout [ 151.831762] Bluetooth: hci2: command 0x040f tx timeout [ 151.832966] Bluetooth: hci7: command 0x040f tx timeout [ 151.959832] Bluetooth: hci3: command 0x040f tx timeout [ 151.961126] Bluetooth: hci4: command 0x040f tx timeout [ 152.023934] Bluetooth: hci6: command 0x040f tx timeout [ 152.025360] Bluetooth: hci5: command 0x040f tx timeout [ 152.407849] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 153.623783] Bluetooth: hci0: command 0x0419 tx timeout [ 153.879758] Bluetooth: hci7: command 0x0419 tx timeout [ 153.880355] Bluetooth: hci2: command 0x0419 tx timeout [ 154.007751] Bluetooth: hci4: command 0x0419 tx timeout [ 154.008316] Bluetooth: hci3: command 0x0419 tx timeout [ 154.071775] Bluetooth: hci5: command 0x0419 tx timeout [ 154.072356] Bluetooth: hci6: command 0x0419 tx timeout [ 157.207858] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 160.005476] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.015505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.017859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.020620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.023187] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.024486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.029095] Bluetooth: hci1: HCI_REQ-0x0c1a [ 162.071748] Bluetooth: hci1: command 0x0409 tx timeout [ 164.119771] Bluetooth: hci1: command 0x041b tx timeout [ 166.167716] Bluetooth: hci1: command 0x040f tx timeout [ 168.215820] Bluetooth: hci1: command 0x0419 tx timeout 16:33:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:33:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:33:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:33:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:33:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:33:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:33:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:33:55 executing program 1: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) [ 196.650456] audit: type=1400 audit(1663000435.378:7): avc: denied { open } for pid=6609 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 196.652024] audit: type=1400 audit(1663000435.378:8): avc: denied { kernel } for pid=6609 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 196.661352] ------------[ cut here ]------------ [ 196.661376] [ 196.661380] ====================================================== [ 196.661383] WARNING: possible circular locking dependency detected [ 196.661388] 6.0.0-rc5-next-20220912 #1 Not tainted [ 196.661394] ------------------------------------------------------ [ 196.661397] syz-executor.1/6610 is trying to acquire lock: [ 196.661404] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 196.661443] [ 196.661443] but task is already holding lock: [ 196.661446] ffff88800ed73020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 196.661475] [ 196.661475] which lock already depends on the new lock. [ 196.661475] [ 196.661478] [ 196.661478] the existing dependency chain (in reverse order) is: [ 196.661481] [ 196.661481] -> #3 (&ctx->lock){....}-{2:2}: [ 196.661496] _raw_spin_lock+0x2a/0x40 [ 196.661513] __perf_event_task_sched_out+0x53b/0x18d0 [ 196.661525] __schedule+0xedd/0x2470 [ 196.661535] schedule+0xda/0x1b0 [ 196.661544] exit_to_user_mode_prepare+0x114/0x1a0 [ 196.661566] syscall_exit_to_user_mode+0x19/0x40 [ 196.661584] do_syscall_64+0x48/0x90 [ 196.661598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 196.661619] [ 196.661619] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 196.661632] _raw_spin_lock_nested+0x30/0x40 [ 196.661647] raw_spin_rq_lock_nested+0x1e/0x30 [ 196.661661] task_fork_fair+0x63/0x4d0 [ 196.661679] sched_cgroup_fork+0x3d0/0x540 [ 196.661693] copy_process+0x3f9e/0x6df0 [ 196.661704] kernel_clone+0xe7/0x890 [ 196.661714] user_mode_thread+0xad/0xf0 [ 196.661724] rest_init+0x24/0x250 [ 196.661740] arch_call_rest_init+0xf/0x14 [ 196.661760] start_kernel+0x4c1/0x4e6 [ 196.661777] secondary_startup_64_no_verify+0xe0/0xeb [ 196.661792] [ 196.661792] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 196.661806] _raw_spin_lock_irqsave+0x39/0x60 [ 196.661820] try_to_wake_up+0xab/0x1920 [ 196.661834] up+0x75/0xb0 [ 196.661845] __up_console_sem+0x6e/0x80 [ 196.661862] console_unlock+0x46a/0x590 [ 196.661878] do_con_write+0xc05/0x1d50 [ 196.661890] con_write+0x21/0x40 [ 196.661899] n_tty_write+0x4d4/0xfe0 [ 196.661913] file_tty_write.constprop.0+0x49c/0x8f0 [ 196.661925] vfs_write+0x9c3/0xd90 [ 196.661944] ksys_write+0x127/0x250 [ 196.661961] do_syscall_64+0x3b/0x90 [ 196.661974] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 196.661990] [ 196.661990] -> #0 ((console_sem).lock){....}-{2:2}: [ 196.662004] __lock_acquire+0x2a02/0x5e70 [ 196.662021] lock_acquire+0x1a2/0x530 [ 196.662037] _raw_spin_lock_irqsave+0x39/0x60 [ 196.662052] down_trylock+0xe/0x70 [ 196.662064] __down_trylock_console_sem+0x3b/0xd0 [ 196.662081] vprintk_emit+0x16b/0x560 [ 196.662098] vprintk+0x84/0xa0 [ 196.662114] _printk+0xba/0xf1 [ 196.662132] report_bug.cold+0x72/0xab [ 196.662145] handle_bug+0x3c/0x70 [ 196.662157] exc_invalid_op+0x14/0x50 [ 196.662170] asm_exc_invalid_op+0x16/0x20 [ 196.662186] group_sched_out.part.0+0x2c7/0x460 [ 196.662197] ctx_sched_out+0x8f1/0xc10 [ 196.662207] __perf_event_task_sched_out+0x6d0/0x18d0 [ 196.662219] __schedule+0xedd/0x2470 [ 196.662228] schedule+0xda/0x1b0 [ 196.662237] exit_to_user_mode_prepare+0x114/0x1a0 [ 196.662256] syscall_exit_to_user_mode+0x19/0x40 [ 196.662273] do_syscall_64+0x48/0x90 [ 196.662286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 196.662303] [ 196.662303] other info that might help us debug this: [ 196.662303] [ 196.662306] Chain exists of: [ 196.662306] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 196.662306] [ 196.662321] Possible unsafe locking scenario: [ 196.662321] [ 196.662323] CPU0 CPU1 [ 196.662326] ---- ---- [ 196.662328] lock(&ctx->lock); [ 196.662334] lock(&rq->__lock); [ 196.662340] lock(&ctx->lock); [ 196.662346] lock((console_sem).lock); [ 196.662352] [ 196.662352] *** DEADLOCK *** [ 196.662352] [ 196.662354] 2 locks held by syz-executor.1/6610: [ 196.662361] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 196.662386] #1: ffff88800ed73020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 196.662414] [ 196.662414] stack backtrace: [ 196.662417] CPU: 1 PID: 6610 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 196.662429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 196.662438] Call Trace: [ 196.662441] [ 196.662446] dump_stack_lvl+0x8b/0xb3 [ 196.662460] check_noncircular+0x263/0x2e0 [ 196.662477] ? format_decode+0x26c/0xb50 [ 196.662492] ? print_circular_bug+0x450/0x450 [ 196.662509] ? enable_ptr_key_workfn+0x20/0x20 [ 196.662523] ? __lockdep_reset_lock+0x180/0x180 [ 196.662540] ? format_decode+0x26c/0xb50 [ 196.662555] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 196.662573] __lock_acquire+0x2a02/0x5e70 [ 196.662595] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 196.662618] lock_acquire+0x1a2/0x530 [ 196.662635] ? down_trylock+0xe/0x70 [ 196.662650] ? rcu_read_unlock+0x40/0x40 [ 196.662668] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 196.662689] ? vprintk+0x84/0xa0 [ 196.662708] _raw_spin_lock_irqsave+0x39/0x60 [ 196.662723] ? down_trylock+0xe/0x70 [ 196.662737] down_trylock+0xe/0x70 [ 196.662750] ? vprintk+0x84/0xa0 [ 196.662768] __down_trylock_console_sem+0x3b/0xd0 [ 196.662785] vprintk_emit+0x16b/0x560 [ 196.662803] ? lock_downgrade+0x6d0/0x6d0 [ 196.662821] vprintk+0x84/0xa0 [ 196.662839] _printk+0xba/0xf1 [ 196.662857] ? record_print_text.cold+0x16/0x16 [ 196.662877] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 196.662891] ? lock_downgrade+0x6d0/0x6d0 [ 196.662909] ? report_bug.cold+0x66/0xab [ 196.662923] ? group_sched_out.part.0+0x2c7/0x460 [ 196.662934] report_bug.cold+0x72/0xab [ 196.662949] handle_bug+0x3c/0x70 [ 196.662963] exc_invalid_op+0x14/0x50 [ 196.662977] asm_exc_invalid_op+0x16/0x20 [ 196.662994] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 196.663008] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 196.663019] RSP: 0018:ffff8880408afc48 EFLAGS: 00010006 [ 196.663029] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 196.663036] RDX: ffff888019d98000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 196.663044] RBP: ffff888034eb8000 R08: 0000000000000005 R09: 0000000000000001 [ 196.663052] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ed73000 [ 196.663059] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 196.663070] ? group_sched_out.part.0+0x2c7/0x460 [ 196.663083] ? group_sched_out.part.0+0x2c7/0x460 [ 196.663096] ctx_sched_out+0x8f1/0xc10 [ 196.663109] __perf_event_task_sched_out+0x6d0/0x18d0 [ 196.663124] ? lock_is_held_type+0xd7/0x130 [ 196.663143] ? __perf_cgroup_move+0x160/0x160 [ 196.663155] ? set_next_entity+0x304/0x550 [ 196.663173] ? update_curr+0x267/0x740 [ 196.663192] ? lock_is_held_type+0xd7/0x130 [ 196.663210] __schedule+0xedd/0x2470 [ 196.663223] ? io_schedule_timeout+0x150/0x150 [ 196.663235] ? __x64_sys_futex_time32+0x480/0x480 [ 196.663249] schedule+0xda/0x1b0 [ 196.663260] exit_to_user_mode_prepare+0x114/0x1a0 [ 196.663281] syscall_exit_to_user_mode+0x19/0x40 [ 196.663299] do_syscall_64+0x48/0x90 [ 196.663313] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 196.663330] RIP: 0033:0x7f735c786b19 [ 196.663339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.663350] RSP: 002b:00007f7359cfc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.663361] RAX: 0000000000000001 RBX: 00007f735c899f68 RCX: 00007f735c786b19 [ 196.663368] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f735c899f6c [ 196.663376] RBP: 00007f735c899f60 R08: 000000000000000e R09: 0000000000000000 [ 196.663383] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f735c899f6c [ 196.663390] R13: 00007ffc183826bf R14: 00007f7359cfc300 R15: 0000000000022000 [ 196.663403] [ 196.720585] WARNING: CPU: 1 PID: 6610 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 196.721222] Modules linked in: [ 196.721450] CPU: 1 PID: 6610 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 196.722008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 196.722779] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 196.723158] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 196.724419] RSP: 0018:ffff8880408afc48 EFLAGS: 00010006 [ 196.724789] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 196.725278] RDX: ffff888019d98000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 196.725770] RBP: ffff888034eb8000 R08: 0000000000000005 R09: 0000000000000001 [ 196.726266] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ed73000 [ 196.726758] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 196.727256] FS: 00007f7359cfc700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 196.727815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.728228] CR2: 00007f3ca6a471f0 CR3: 000000003ff94000 CR4: 0000000000350ee0 [ 196.728721] Call Trace: [ 196.728905] [ 196.729072] ctx_sched_out+0x8f1/0xc10 [ 196.729352] __perf_event_task_sched_out+0x6d0/0x18d0 [ 196.729717] ? lock_is_held_type+0xd7/0x130 [ 196.730027] ? __perf_cgroup_move+0x160/0x160 [ 196.730348] ? set_next_entity+0x304/0x550 [ 196.730654] ? update_curr+0x267/0x740 [ 196.730944] ? lock_is_held_type+0xd7/0x130 [ 196.731258] __schedule+0xedd/0x2470 [ 196.731524] ? io_schedule_timeout+0x150/0x150 [ 196.731851] ? __x64_sys_futex_time32+0x480/0x480 [ 196.732198] schedule+0xda/0x1b0 [ 196.732449] exit_to_user_mode_prepare+0x114/0x1a0 [ 196.732804] syscall_exit_to_user_mode+0x19/0x40 [ 196.733141] do_syscall_64+0x48/0x90 [ 196.733410] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 196.733779] RIP: 0033:0x7f735c786b19 [ 196.734039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.735286] RSP: 002b:00007f7359cfc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.735815] RAX: 0000000000000001 RBX: 00007f735c899f68 RCX: 00007f735c786b19 [ 196.736316] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f735c899f6c [ 196.736808] RBP: 00007f735c899f60 R08: 000000000000000e R09: 0000000000000000 [ 196.737297] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f735c899f6c [ 196.737792] R13: 00007ffc183826bf R14: 00007f7359cfc300 R15: 0000000000022000 [ 196.738335] [ 196.738509] irq event stamp: 816 [ 196.738762] hardirqs last enabled at (815): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 196.739452] hardirqs last disabled at (816): [] __schedule+0x1225/0x2470 [ 196.740045] softirqs last enabled at (660): [] __irq_exit_rcu+0x11b/0x180 [ 196.740618] softirqs last disabled at (335): [] __irq_exit_rcu+0x11b/0x180 [ 196.741174] ---[ end trace 0000000000000000 ]--- [ 197.270839] Bluetooth: hci4: unexpected event 0x05 length: 53 > 4 16:34:00 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd18100000000000000000089"]) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)="ed", 0x1}]) 16:34:00 executing program 1: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)="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", 0x14a}, {&(0x7f0000000300)="0df3d0e6086271eba1ef9e65902740ded2df990b21eea393f417ca2bfc2fff1ed8afee436e500d5ebc3d5d7324da8b7f1949e05e81a305c09343b529e226efb0446a01d36155d770828fa79773b1b30fd2e17e3bf0ea2c864f374421fc62071b2f63698fcd1a139d80ea1bae13dc3c0059977bfec8b18553fd45c439ad4a519e10ae9f64c75f185773004c962b6e23859fb9ff83bbe4dcefabf9848836618ae1c5e101f144662637af5423c5c59ea1a6cc89f3290d03b33455d5dc7145fbe916173b5c54", 0xc4}, {&(0x7f0000000080)="72ca97e73a546927fb6ee42fb3adfe2e725aba62cdf33b2b56", 0x19}, {&(0x7f0000000400)="705817196ef0f1fd189a7cfc982b6b57e05cff796d1d7053bc064350d052f6f286264d12825488b9083d15f83647594eae9ede97226c9d3f180e5a667eba391eb1b2942ca55e620073ca47d7f7bdcc6234fa340897a43843a3d937566363d610e65b5322673538a7e4897a314204814da76f759cfb848c2c3dfd88210616f8dc7fd91f216d7d169339eb36f2bd679b04e97ba7d27261e5055e79", 0x9a}, {&(0x7f00000004c0)="10d6c851507bda928e9c27e34763311544f2aac331fadea1eaa424bf45e271df764c659003826ba6d226d3a4d4aee483152575decabb6c31f610a1845afefd18cae598db86e3d44fbcaac01f2c168bea8b2eef44a9bcd2b8e0b12aa0d8d56228c16f22d6e62afa5b108060d55db46a654bdba9f6764889ea2dbc8c071b15249c", 0x80}, {&(0x7f00000000c0)="0faa735ea782f7943312c07c12000068c4df", 0x12}, {&(0x7f0000000540)="5d44e6dcd31188269fb399c529b5cb2b2aebebd6767b0c8534e4aaa4ef373c976411d2f953b35fbcb87be01675f61e4b4e31940d638fef0d6aee3e3e35d4675609e0613dea23f2bc653e67f3e6af03fd6e7cb3168547419068ea55ca6d56df723988068eb0bf59293905b5e4caf03449f5553b6ed543c60a093614757f46c60c19086a6131923c9771f9f143c1f487557b2f08bbdd1648cf07dbc913e77eb543f9de59ed1c11bfb56097ff57af45e4618c0b37d29580e46e6a7eb59b982b93b7a3c11345b82d47560efc5a02e2c1f2debac21aa55595089737e7952f464dccee5d9d80383f508152a5bcbb", 0xeb}, {&(0x7f0000000640)="fa2b135da7b37d5e68d92ec34eb7eb6f149a37f9044f71ad2b8a67fac7d6a90e55c7ea8bb6409736de7b61cb0987e3c4262342435adbc77393a701307cd50f47189997dd7ef06aa67065ff094b320d677c459961b4e9951c982c226325859784830635a002cedb2a3b0016cbbc212d0561b6919b22117886bb0bd83fe11397cf8adaa64120aac7f36233608f6919badbd7909d17bd70a67d284f843a7918f6cded3581b504efed5dcf39209300083c9d7461749c9d86d1714f3306f999", 0xbd}, {&(0x7f0000000700)="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", 0xaff}], 0x9}}], 0x1, 0x0) 16:34:00 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 16:34:00 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@rr={0x2a, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 16:34:00 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) 16:34:00 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffcfc}, {0x3c, 0xc8, 0x6}}}, 0x38) 16:34:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) [ 197.279990] Bluetooth: hci4: unexpected event 0x05 length: 53 > 4 16:34:01 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)="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", 0x14a}, {&(0x7f0000000300)="0df3d0e6086271eba1ef9e65902740ded2df990b21eea393f417ca2bfc2fff1ed8afee436e500d5ebc3d5d7324da8b7f1949e05e81a305c09343b529e226efb0446a01d36155d770828fa79773b1b30fd2e17e3bf0ea2c864f374421fc62071b2f63698fcd1a139d80ea1bae13dc3c0059977bfec8b18553fd45c439ad4a519e10ae9f64c75f185773004c962b6e23859fb9ff83bbe4dcefabf9848836618ae1c5e101f144662637af5423c5c59ea1a6cc89f3290d03b33455d5dc7145fbe916173b5c54", 0xc4}, {&(0x7f0000000080)="72ca97e73a546927fb6ee42fb3adfe2e725aba62cdf33b2b56", 0x19}, {&(0x7f0000000400)="705817196ef0f1fd189a7cfc982b6b57e05cff796d1d7053bc064350d052f6f286264d12825488b9083d15f83647594eae9ede97226c9d3f180e5a667eba391eb1b2942ca55e620073ca47d7f7bdcc6234fa340897a43843a3d937566363d610e65b5322673538a7e4897a314204814da76f759cfb848c2c3dfd88210616f8dc7fd91f216d7d169339eb36f2bd679b04e97ba7d27261e5055e79", 0x9a}, {&(0x7f00000004c0)="10d6c851507bda928e9c27e34763311544f2aac331fadea1eaa424bf45e271df764c659003826ba6d226d3a4d4aee483152575decabb6c31f610a1845afefd18cae598db86e3d44fbcaac01f2c168bea8b2eef44a9bcd2b8e0b12aa0d8d56228c16f22d6e62afa5b108060d55db46a654bdba9f6764889ea2dbc8c071b15249c", 0x80}, {&(0x7f00000000c0)="0faa735ea782f7943312c07c12000068c4df", 0x12}, {&(0x7f0000000540)="5d44e6dcd31188269fb399c529b5cb2b2aebebd6767b0c8534e4aaa4ef373c976411d2f953b35fbcb87be01675f61e4b4e31940d638fef0d6aee3e3e35d4675609e0613dea23f2bc653e67f3e6af03fd6e7cb3168547419068ea55ca6d56df723988068eb0bf59293905b5e4caf03449f5553b6ed543c60a093614757f46c60c19086a6131923c9771f9f143c1f487557b2f08bbdd1648cf07dbc913e77eb543f9de59ed1c11bfb56097ff57af45e4618c0b37d29580e46e6a7eb59b982b93b7a3c11345b82d47560efc5a02e2c1f2debac21aa55595089737e7952f464dccee5d9d80383f508152a5bcbb", 0xeb}, {&(0x7f0000000640)="fa2b135da7b37d5e68d92ec34eb7eb6f149a37f9044f71ad2b8a67fac7d6a90e55c7ea8bb6409736de7b61cb0987e3c4262342435adbc77393a701307cd50f47189997dd7ef06aa67065ff094b320d677c459961b4e9951c982c226325859784830635a002cedb2a3b0016cbbc212d0561b6919b22117886bb0bd83fe11397cf8adaa64120aac7f36233608f6919badbd7909d17bd70a67d284f843a7918f6cded3581b504efed5dcf39209300083c9d7461749c9d86d1714f3306f999", 0xbd}, {&(0x7f0000000700)="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", 0xaff}], 0x9}}], 0x1, 0x0) 16:34:01 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) 16:34:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffcfc}, {0x3c, 0xc8, 0x6}}}, 0x38) 16:34:01 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@rr={0x2a, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 16:34:01 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 202.308657] Bluetooth: hci4: unexpected event 0x05 length: 53 > 4 16:34:01 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd18100000000000000000089"]) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)="ed", 0x1}]) 16:34:01 executing program 1: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:01 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0xfffffcfc}, {0x3c, 0xc8, 0x6}}}, 0x38) [ 202.472605] Bluetooth: hci4: unexpected event 0x05 length: 53 > 4 16:34:01 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x8001, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 16:34:01 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @multicast1, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@rr={0x2a, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x2b, 0x0, [@dev, @rand_addr, @private, @loopback, @empty, @remote, @empty, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) 16:34:01 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', 0x0, 0x0) 16:34:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000180)="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", 0x14a}, {&(0x7f0000000300)="0df3d0e6086271eba1ef9e65902740ded2df990b21eea393f417ca2bfc2fff1ed8afee436e500d5ebc3d5d7324da8b7f1949e05e81a305c09343b529e226efb0446a01d36155d770828fa79773b1b30fd2e17e3bf0ea2c864f374421fc62071b2f63698fcd1a139d80ea1bae13dc3c0059977bfec8b18553fd45c439ad4a519e10ae9f64c75f185773004c962b6e23859fb9ff83bbe4dcefabf9848836618ae1c5e101f144662637af5423c5c59ea1a6cc89f3290d03b33455d5dc7145fbe916173b5c54", 0xc4}, {&(0x7f0000000080)="72ca97e73a546927fb6ee42fb3adfe2e725aba62cdf33b2b56", 0x19}, {&(0x7f0000000400)="705817196ef0f1fd189a7cfc982b6b57e05cff796d1d7053bc064350d052f6f286264d12825488b9083d15f83647594eae9ede97226c9d3f180e5a667eba391eb1b2942ca55e620073ca47d7f7bdcc6234fa340897a43843a3d937566363d610e65b5322673538a7e4897a314204814da76f759cfb848c2c3dfd88210616f8dc7fd91f216d7d169339eb36f2bd679b04e97ba7d27261e5055e79", 0x9a}, {&(0x7f00000004c0)="10d6c851507bda928e9c27e34763311544f2aac331fadea1eaa424bf45e271df764c659003826ba6d226d3a4d4aee483152575decabb6c31f610a1845afefd18cae598db86e3d44fbcaac01f2c168bea8b2eef44a9bcd2b8e0b12aa0d8d56228c16f22d6e62afa5b108060d55db46a654bdba9f6764889ea2dbc8c071b15249c", 0x80}, {&(0x7f00000000c0)="0faa735ea782f7943312c07c12000068c4df", 0x12}, {&(0x7f0000000540)="5d44e6dcd31188269fb399c529b5cb2b2aebebd6767b0c8534e4aaa4ef373c976411d2f953b35fbcb87be01675f61e4b4e31940d638fef0d6aee3e3e35d4675609e0613dea23f2bc653e67f3e6af03fd6e7cb3168547419068ea55ca6d56df723988068eb0bf59293905b5e4caf03449f5553b6ed543c60a093614757f46c60c19086a6131923c9771f9f143c1f487557b2f08bbdd1648cf07dbc913e77eb543f9de59ed1c11bfb56097ff57af45e4618c0b37d29580e46e6a7eb59b982b93b7a3c11345b82d47560efc5a02e2c1f2debac21aa55595089737e7952f464dccee5d9d80383f508152a5bcbb", 0xeb}, {&(0x7f0000000640)="fa2b135da7b37d5e68d92ec34eb7eb6f149a37f9044f71ad2b8a67fac7d6a90e55c7ea8bb6409736de7b61cb0987e3c4262342435adbc77393a701307cd50f47189997dd7ef06aa67065ff094b320d677c459961b4e9951c982c226325859784830635a002cedb2a3b0016cbbc212d0561b6919b22117886bb0bd83fe11397cf8adaa64120aac7f36233608f6919badbd7909d17bd70a67d284f843a7918f6cded3581b504efed5dcf39209300083c9d7461749c9d86d1714f3306f999", 0xbd}, {&(0x7f0000000700)="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", 0xaff}], 0x9}}], 0x1, 0x0) [ 202.583770] Bluetooth: hci4: unexpected event 0x05 length: 53 > 4 [ 202.672687] hrtimer: interrupt took 18945 ns 16:34:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:01 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd18100000000000000000089"]) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)="ed", 0x1}]) 16:34:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:01 executing program 2: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:01 executing program 4: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:01 executing program 1: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:01 executing program 6: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:01 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0xf, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:34:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:01 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0xf, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:34:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:01 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0xf, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:34:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:01 executing program 4: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 16:34:01 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0xf, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:34:01 executing program 2: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) [ 203.118262] loop0: detected capacity change from 0 to 40 16:34:01 executing program 6: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) [ 203.239266] syz-executor.0: attempt to access beyond end of device [ 203.239266] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 203.241274] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 203.401599] syz-executor.4 (6949) used greatest stack depth: 24272 bytes left 16:34:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x202, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) 16:34:02 executing program 6: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 16:34:02 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r2, 0x1, 0x0) 16:34:02 executing program 2: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffc, 0x0) sendfile(r0, r0, 0x0, 0x100007) 16:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 16:34:02 executing program 4: msgctl$MSG_INFO(0x0, 0xc, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x871) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x1, "a670184c1f4fc6890daa510de18df0795175f412c2e391f3c943637ee6a3d1498e270f5071fef4ac4d72e544d18cf0ef4a874e96ce7337390bf5db6ecafb58d268a7d42c658977657ee582cf77e69007587a4e7036bacac143d146328901053edc361b"}, 0x6b, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/136}, 0x90, 0x0, 0x0) msgsnd(r1, &(0x7f0000001400)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) sendfile(r0, r2, 0x0, 0x10000027f) 16:34:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 16:34:02 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r2, 0x1, 0x0) 16:34:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 16:34:02 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) keyctl$invalidate(0x15, 0x0) 16:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 16:34:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffc, 0x0) sendfile(r0, r0, 0x0, 0x100007) 16:34:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 16:34:02 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r2, 0x1, 0x0) 16:34:02 executing program 6: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 16:34:02 executing program 4: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f00000005c0)=@isdn, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r6, r7], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r8, 0x0, 0x0, 0x87ffffc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 16:34:02 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 16:34:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 16:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 16:34:02 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r2, 0x1, 0x0) 16:34:02 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) keyctl$invalidate(0x15, 0x0) 16:34:02 executing program 3: r0 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 16:34:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 16:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x3, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/248, 0xf8) 16:34:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffc, 0x0) sendfile(r0, r0, 0x0, 0x100007) 16:34:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 16:34:02 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) keyctl$invalidate(0x15, 0x0) 16:34:02 executing program 3: r0 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 16:34:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000380)=""/98) 16:34:02 executing program 3: r0 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 16:34:03 executing program 6: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 16:34:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000380)=""/98) 16:34:03 executing program 7: syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) 16:34:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffc, 0x0) sendfile(r0, r0, 0x0, 0x100007) 16:34:03 executing program 3: r0 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 16:34:03 executing program 4: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f00000005c0)=@isdn, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r6, r7], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r8, 0x0, 0x0, 0x87ffffc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 16:34:03 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) keyctl$invalidate(0x15, 0x0) 16:34:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='L', 0x1}], 0x1) 16:34:03 executing program 3: setresuid(0xee00, 0xee01, 0xee01) setfsuid(0x0) 16:34:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x541b, 0x0) 16:34:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000380)=""/98) 16:34:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='L', 0x1}], 0x1) 16:34:03 executing program 7: unshare(0x20020400) unshare(0x8000000) unshare(0x4050400) unshare(0x40000000) unshare(0xa040000) unshare(0x60000000) unshare(0x40000) r0 = semget$private(0x0, 0x0, 0x106) unshare(0x20000) unshare(0x10000200) unshare(0x2010000) unshare(0x8000500) unshare(0x20800) unshare(0x400) unshare(0x10000800) unshare(0x3c020700) unshare(0x2000000) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/204) unshare(0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 16:34:04 executing program 3: setresuid(0xee00, 0xee01, 0xee01) setfsuid(0x0) 16:34:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='L', 0x1}], 0x1) 16:34:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000380)=""/98) 16:34:04 executing program 7: unshare(0x20020400) unshare(0x8000000) unshare(0x4050400) unshare(0x40000000) unshare(0xa040000) unshare(0x60000000) unshare(0x40000) r0 = semget$private(0x0, 0x0, 0x106) unshare(0x20000) unshare(0x10000200) unshare(0x2010000) unshare(0x8000500) unshare(0x20800) unshare(0x400) unshare(0x10000800) unshare(0x3c020700) unshare(0x2000000) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/204) unshare(0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 16:34:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) 16:34:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat(r1, &(0x7f0000000080)='./file1\x00', 0x4680, 0x150) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'dummy0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0001008dbf44000000000000000004000000050011801c000000"], 0x1c}], 0x1}, 0x0) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:34:04 executing program 6: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 16:34:04 executing program 4: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f00000005c0)=@isdn, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r6, r7], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r8, 0x0, 0x0, 0x87ffffc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 16:34:04 executing program 3: setresuid(0xee00, 0xee01, 0xee01) setfsuid(0x0) 16:34:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) 16:34:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='L', 0x1}], 0x1) 16:34:04 executing program 0: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) pipe2$9p(&(0x7f0000000180), 0x0) 16:34:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) [ 205.696550] ieee80211 : Selected rate control algorithm 'minstrel_ht' 16:34:04 executing program 3: setresuid(0xee00, 0xee01, 0xee01) setfsuid(0x0) 16:34:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat(r1, &(0x7f0000000080)='./file1\x00', 0x4680, 0x150) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'dummy0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0001008dbf44000000000000000004000000050011801c000000"], 0x1c}], 0x1}, 0x0) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:34:05 executing program 6: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff1) 16:34:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) 16:34:05 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 16:34:05 executing program 4: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f00000005c0)=@isdn, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r6, r7], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r8, 0x0, 0x0, 0x87ffffc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 16:34:05 executing program 7: unshare(0x20020400) unshare(0x8000000) unshare(0x4050400) unshare(0x40000000) unshare(0xa040000) unshare(0x60000000) unshare(0x40000) r0 = semget$private(0x0, 0x0, 0x106) unshare(0x20000) unshare(0x10000200) unshare(0x2010000) unshare(0x8000500) unshare(0x20800) unshare(0x400) unshare(0x10000800) unshare(0x3c020700) unshare(0x2000000) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/204) unshare(0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 16:34:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat(r1, &(0x7f0000000080)='./file1\x00', 0x4680, 0x150) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'dummy0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0001008dbf44000000000000000004000000050011801c000000"], 0x1c}], 0x1}, 0x0) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:34:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f8010020004000000000000000000080002943a05df153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010003ae970325132510000e97032510300000000002e2e20202020202020202010003ae970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020003ae970325132510000e970325104001a040000", 0x80, 0x1600}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1800}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4400}], 0x0, &(0x7f0000010d00)) [ 206.529891] loop5: detected capacity change from 0 to 128 16:34:05 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) [ 206.634060] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' 16:34:05 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 16:34:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat(r1, &(0x7f0000000080)='./file1\x00', 0x4680, 0x150) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'dummy0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0001008dbf44000000000000000004000000050011801c000000"], 0x1c}], 0x1}, 0x0) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) VM DIAGNOSIS: 16:33:56 Registers: info registers vcpu 0 RAX=0000000000000004 RBX=ffff88800ee9c9e8 RCX=0000000000000000 RDX=ffff888019ef5040 RSI=ffffffff8166e94f RDI=ffff88800dfeead0 RBP=dffffc0000000000 RSP=ffff88804256f848 R8 =0000000000000007 R9 =0000000000000000 R10=ffff88800ee9c9e8 R11=0000000000000001 R12=0000000000000004 R13=0000000000000000 R14=ffff8880099cd5d8 R15=ffff88800dfeeab8 RIP=ffffffff8166e968 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f05197f7368 CR3=000000001b3fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff8880408af698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7359cfc700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ca6a471f0 CR3=000000003ff94000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f735c86d7c0 00007f735c86d7c8 YMM02=0000000000000000 0000000000000000 00007f735c86d7e0 00007f735c86d7c0 YMM03=0000000000000000 0000000000000000 00007f735c86d7c8 00007f735c86d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffff00 ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000