Warning: Permanently added '[localhost]:41637' (ECDSA) to the list of known hosts. 2022/09/12 18:16:28 fuzzer started 2022/09/12 18:16:29 dialing manager at localhost:38027 syzkaller login: [ 42.781571] cgroup: Unknown subsys name 'net' [ 42.898186] cgroup: Unknown subsys name 'rlimit' 2022/09/12 18:16:44 syscalls: 2215 2022/09/12 18:16:44 code coverage: enabled 2022/09/12 18:16:44 comparison tracing: enabled 2022/09/12 18:16:44 extra coverage: enabled 2022/09/12 18:16:44 setuid sandbox: enabled 2022/09/12 18:16:44 namespace sandbox: enabled 2022/09/12 18:16:44 Android sandbox: enabled 2022/09/12 18:16:44 fault injection: enabled 2022/09/12 18:16:44 leak checking: enabled 2022/09/12 18:16:44 net packet injection: enabled 2022/09/12 18:16:44 net device setup: enabled 2022/09/12 18:16:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 18:16:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 18:16:44 USB emulation: enabled 2022/09/12 18:16:44 hci packet injection: enabled 2022/09/12 18:16:44 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 18:16:44 802.15.4 emulation: enabled 2022/09/12 18:16:44 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 18:16:44 fetching corpus: 48, signal 27204/30786 (executing program) 2022/09/12 18:16:44 fetching corpus: 98, signal 42738/47754 (executing program) 2022/09/12 18:16:44 fetching corpus: 148, signal 54317/60690 (executing program) 2022/09/12 18:16:45 fetching corpus: 198, signal 62267/69904 (executing program) 2022/09/12 18:16:45 fetching corpus: 248, signal 69052/77913 (executing program) 2022/09/12 18:16:45 fetching corpus: 298, signal 75508/85526 (executing program) 2022/09/12 18:16:45 fetching corpus: 348, signal 81055/92237 (executing program) 2022/09/12 18:16:45 fetching corpus: 398, signal 85666/97968 (executing program) 2022/09/12 18:16:45 fetching corpus: 448, signal 90886/104210 (executing program) 2022/09/12 18:16:45 fetching corpus: 498, signal 93638/108038 (executing program) 2022/09/12 18:16:46 fetching corpus: 548, signal 97397/112821 (executing program) 2022/09/12 18:16:46 fetching corpus: 598, signal 101939/118270 (executing program) 2022/09/12 18:16:46 fetching corpus: 648, signal 105578/122793 (executing program) 2022/09/12 18:16:46 fetching corpus: 697, signal 109347/127326 (executing program) 2022/09/12 18:16:46 fetching corpus: 747, signal 112694/131479 (executing program) 2022/09/12 18:16:46 fetching corpus: 797, signal 115622/135214 (executing program) 2022/09/12 18:16:47 fetching corpus: 847, signal 118503/138843 (executing program) 2022/09/12 18:16:47 fetching corpus: 897, signal 121085/142188 (executing program) 2022/09/12 18:16:47 fetching corpus: 947, signal 123643/145503 (executing program) 2022/09/12 18:16:47 fetching corpus: 997, signal 125617/148254 (executing program) 2022/09/12 18:16:47 fetching corpus: 1047, signal 128244/151518 (executing program) 2022/09/12 18:16:47 fetching corpus: 1097, signal 130355/154294 (executing program) 2022/09/12 18:16:47 fetching corpus: 1146, signal 132831/157357 (executing program) 2022/09/12 18:16:48 fetching corpus: 1196, signal 135359/160463 (executing program) 2022/09/12 18:16:48 fetching corpus: 1246, signal 137309/163027 (executing program) 2022/09/12 18:16:48 fetching corpus: 1296, signal 139607/165819 (executing program) 2022/09/12 18:16:48 fetching corpus: 1346, signal 143274/169773 (executing program) 2022/09/12 18:16:48 fetching corpus: 1396, signal 144569/171709 (executing program) 2022/09/12 18:16:48 fetching corpus: 1446, signal 146785/174419 (executing program) 2022/09/12 18:16:48 fetching corpus: 1496, signal 148574/176790 (executing program) 2022/09/12 18:16:49 fetching corpus: 1546, signal 149837/178718 (executing program) 2022/09/12 18:16:49 fetching corpus: 1596, signal 151206/180684 (executing program) 2022/09/12 18:16:49 fetching corpus: 1646, signal 153478/183303 (executing program) 2022/09/12 18:16:49 fetching corpus: 1696, signal 155523/185750 (executing program) 2022/09/12 18:16:49 fetching corpus: 1746, signal 156711/187461 (executing program) 2022/09/12 18:16:49 fetching corpus: 1796, signal 157903/189139 (executing program) 2022/09/12 18:16:49 fetching corpus: 1846, signal 159230/190958 (executing program) 2022/09/12 18:16:50 fetching corpus: 1896, signal 160377/192656 (executing program) 2022/09/12 18:16:50 fetching corpus: 1946, signal 161632/194324 (executing program) 2022/09/12 18:16:50 fetching corpus: 1996, signal 162986/196072 (executing program) 2022/09/12 18:16:50 fetching corpus: 2046, signal 164426/197854 (executing program) 2022/09/12 18:16:50 fetching corpus: 2096, signal 165753/199526 (executing program) 2022/09/12 18:16:50 fetching corpus: 2146, signal 167719/201645 (executing program) 2022/09/12 18:16:50 fetching corpus: 2196, signal 168999/203290 (executing program) 2022/09/12 18:16:51 fetching corpus: 2246, signal 170246/204895 (executing program) 2022/09/12 18:16:51 fetching corpus: 2296, signal 171036/206156 (executing program) 2022/09/12 18:16:51 fetching corpus: 2346, signal 172482/207832 (executing program) 2022/09/12 18:16:51 fetching corpus: 2396, signal 174150/209599 (executing program) 2022/09/12 18:16:51 fetching corpus: 2446, signal 176176/211596 (executing program) 2022/09/12 18:16:51 fetching corpus: 2496, signal 177822/213322 (executing program) 2022/09/12 18:16:52 fetching corpus: 2546, signal 179559/215130 (executing program) 2022/09/12 18:16:52 fetching corpus: 2596, signal 180891/216623 (executing program) 2022/09/12 18:16:52 fetching corpus: 2646, signal 181995/217916 (executing program) 2022/09/12 18:16:52 fetching corpus: 2696, signal 182874/219122 (executing program) 2022/09/12 18:16:52 fetching corpus: 2746, signal 183735/220303 (executing program) 2022/09/12 18:16:52 fetching corpus: 2796, signal 184721/221529 (executing program) 2022/09/12 18:16:52 fetching corpus: 2846, signal 185678/222757 (executing program) 2022/09/12 18:16:52 fetching corpus: 2896, signal 186836/224075 (executing program) 2022/09/12 18:16:53 fetching corpus: 2946, signal 187833/225203 (executing program) 2022/09/12 18:16:53 fetching corpus: 2996, signal 189516/226749 (executing program) 2022/09/12 18:16:53 fetching corpus: 3046, signal 190570/227922 (executing program) 2022/09/12 18:16:53 fetching corpus: 3096, signal 191494/229028 (executing program) 2022/09/12 18:16:53 fetching corpus: 3146, signal 192995/230446 (executing program) 2022/09/12 18:16:53 fetching corpus: 3196, signal 194284/231691 (executing program) 2022/09/12 18:16:53 fetching corpus: 3246, signal 195371/232853 (executing program) 2022/09/12 18:16:54 fetching corpus: 3296, signal 195985/233741 (executing program) 2022/09/12 18:16:54 fetching corpus: 3346, signal 196939/234754 (executing program) 2022/09/12 18:16:54 fetching corpus: 3396, signal 198042/235847 (executing program) 2022/09/12 18:16:54 fetching corpus: 3446, signal 198876/236839 (executing program) 2022/09/12 18:16:54 fetching corpus: 3496, signal 200028/237946 (executing program) 2022/09/12 18:16:54 fetching corpus: 3546, signal 201074/238954 (executing program) 2022/09/12 18:16:54 fetching corpus: 3596, signal 202149/239960 (executing program) 2022/09/12 18:16:55 fetching corpus: 3646, signal 202659/240701 (executing program) 2022/09/12 18:16:55 fetching corpus: 3696, signal 204159/241996 (executing program) 2022/09/12 18:16:55 fetching corpus: 3746, signal 204879/242853 (executing program) 2022/09/12 18:16:55 fetching corpus: 3796, signal 205758/243729 (executing program) 2022/09/12 18:16:55 fetching corpus: 3846, signal 206717/244654 (executing program) 2022/09/12 18:16:55 fetching corpus: 3896, signal 207450/245467 (executing program) 2022/09/12 18:16:55 fetching corpus: 3946, signal 208143/246248 (executing program) 2022/09/12 18:16:55 fetching corpus: 3996, signal 208923/247004 (executing program) 2022/09/12 18:16:55 fetching corpus: 4046, signal 209580/247779 (executing program) 2022/09/12 18:16:56 fetching corpus: 4096, signal 210145/248458 (executing program) 2022/09/12 18:16:56 fetching corpus: 4146, signal 210954/249202 (executing program) 2022/09/12 18:16:56 fetching corpus: 4196, signal 211668/249900 (executing program) 2022/09/12 18:16:56 fetching corpus: 4246, signal 212259/250585 (executing program) 2022/09/12 18:16:56 fetching corpus: 4296, signal 213047/251312 (executing program) 2022/09/12 18:16:56 fetching corpus: 4346, signal 213729/251995 (executing program) 2022/09/12 18:16:56 fetching corpus: 4396, signal 214571/252802 (executing program) 2022/09/12 18:16:56 fetching corpus: 4446, signal 215313/253484 (executing program) 2022/09/12 18:16:57 fetching corpus: 4496, signal 215798/254076 (executing program) 2022/09/12 18:16:57 fetching corpus: 4546, signal 216449/254692 (executing program) 2022/09/12 18:16:57 fetching corpus: 4596, signal 217013/255253 (executing program) 2022/09/12 18:16:57 fetching corpus: 4646, signal 217848/255918 (executing program) 2022/09/12 18:16:57 fetching corpus: 4696, signal 218573/256537 (executing program) 2022/09/12 18:16:57 fetching corpus: 4746, signal 219022/257102 (executing program) 2022/09/12 18:16:57 fetching corpus: 4796, signal 219558/257646 (executing program) 2022/09/12 18:16:58 fetching corpus: 4846, signal 220204/258183 (executing program) 2022/09/12 18:16:58 fetching corpus: 4896, signal 220794/258789 (executing program) 2022/09/12 18:16:58 fetching corpus: 4946, signal 221852/259419 (executing program) 2022/09/12 18:16:58 fetching corpus: 4996, signal 222468/259935 (executing program) 2022/09/12 18:16:58 fetching corpus: 5046, signal 223251/260529 (executing program) 2022/09/12 18:16:58 fetching corpus: 5096, signal 224108/261136 (executing program) 2022/09/12 18:16:58 fetching corpus: 5146, signal 224934/261669 (executing program) 2022/09/12 18:16:58 fetching corpus: 5196, signal 225489/262181 (executing program) 2022/09/12 18:16:59 fetching corpus: 5246, signal 225946/262660 (executing program) 2022/09/12 18:16:59 fetching corpus: 5296, signal 226795/263280 (executing program) 2022/09/12 18:16:59 fetching corpus: 5346, signal 227398/263703 (executing program) 2022/09/12 18:16:59 fetching corpus: 5396, signal 227975/264144 (executing program) 2022/09/12 18:16:59 fetching corpus: 5445, signal 228688/264603 (executing program) 2022/09/12 18:16:59 fetching corpus: 5495, signal 229280/265096 (executing program) 2022/09/12 18:16:59 fetching corpus: 5545, signal 229651/265471 (executing program) 2022/09/12 18:17:00 fetching corpus: 5595, signal 230148/265887 (executing program) 2022/09/12 18:17:00 fetching corpus: 5645, signal 230605/266281 (executing program) 2022/09/12 18:17:00 fetching corpus: 5695, signal 231355/266730 (executing program) 2022/09/12 18:17:00 fetching corpus: 5745, signal 231775/267087 (executing program) 2022/09/12 18:17:00 fetching corpus: 5795, signal 232384/267490 (executing program) 2022/09/12 18:17:00 fetching corpus: 5845, signal 233000/267877 (executing program) 2022/09/12 18:17:00 fetching corpus: 5895, signal 233658/268317 (executing program) 2022/09/12 18:17:00 fetching corpus: 5945, signal 234260/268693 (executing program) 2022/09/12 18:17:01 fetching corpus: 5995, signal 235044/269095 (executing program) 2022/09/12 18:17:01 fetching corpus: 6045, signal 235496/269448 (executing program) 2022/09/12 18:17:01 fetching corpus: 6095, signal 236225/269814 (executing program) 2022/09/12 18:17:01 fetching corpus: 6145, signal 236769/270141 (executing program) 2022/09/12 18:17:01 fetching corpus: 6195, signal 237214/270436 (executing program) 2022/09/12 18:17:01 fetching corpus: 6245, signal 237710/270757 (executing program) 2022/09/12 18:17:01 fetching corpus: 6295, signal 238071/271041 (executing program) 2022/09/12 18:17:02 fetching corpus: 6345, signal 238565/271311 (executing program) 2022/09/12 18:17:02 fetching corpus: 6395, signal 238924/271633 (executing program) 2022/09/12 18:17:02 fetching corpus: 6445, signal 239777/271930 (executing program) 2022/09/12 18:17:02 fetching corpus: 6495, signal 240624/272210 (executing program) 2022/09/12 18:17:02 fetching corpus: 6545, signal 241225/272474 (executing program) 2022/09/12 18:17:02 fetching corpus: 6595, signal 241582/272680 (executing program) 2022/09/12 18:17:02 fetching corpus: 6645, signal 242249/272734 (executing program) 2022/09/12 18:17:03 fetching corpus: 6695, signal 242596/272737 (executing program) 2022/09/12 18:17:03 fetching corpus: 6745, signal 243116/272774 (executing program) 2022/09/12 18:17:03 fetching corpus: 6795, signal 243707/272780 (executing program) 2022/09/12 18:17:03 fetching corpus: 6845, signal 244192/272809 (executing program) 2022/09/12 18:17:03 fetching corpus: 6895, signal 244708/272826 (executing program) 2022/09/12 18:17:03 fetching corpus: 6945, signal 244993/272843 (executing program) 2022/09/12 18:17:04 fetching corpus: 6995, signal 245602/272851 (executing program) 2022/09/12 18:17:04 fetching corpus: 7045, signal 246008/272863 (executing program) 2022/09/12 18:17:04 fetching corpus: 7095, signal 246322/272894 (executing program) 2022/09/12 18:17:04 fetching corpus: 7145, signal 246725/272904 (executing program) 2022/09/12 18:17:04 fetching corpus: 7195, signal 247216/272904 (executing program) 2022/09/12 18:17:04 fetching corpus: 7245, signal 247657/272912 (executing program) 2022/09/12 18:17:04 fetching corpus: 7295, signal 248181/272920 (executing program) 2022/09/12 18:17:04 fetching corpus: 7345, signal 248632/272927 (executing program) 2022/09/12 18:17:04 fetching corpus: 7395, signal 249070/272928 (executing program) 2022/09/12 18:17:05 fetching corpus: 7445, signal 249881/272938 (executing program) 2022/09/12 18:17:05 fetching corpus: 7495, signal 250629/272982 (executing program) 2022/09/12 18:17:05 fetching corpus: 7545, signal 251057/272996 (executing program) 2022/09/12 18:17:05 fetching corpus: 7595, signal 251484/272998 (executing program) 2022/09/12 18:17:05 fetching corpus: 7645, signal 252059/273055 (executing program) 2022/09/12 18:17:05 fetching corpus: 7695, signal 252426/273057 (executing program) 2022/09/12 18:17:05 fetching corpus: 7745, signal 252872/273057 (executing program) 2022/09/12 18:17:06 fetching corpus: 7795, signal 253338/273166 (executing program) 2022/09/12 18:17:06 fetching corpus: 7845, signal 254063/273180 (executing program) 2022/09/12 18:17:06 fetching corpus: 7895, signal 254331/273186 (executing program) 2022/09/12 18:17:06 fetching corpus: 7945, signal 254858/273190 (executing program) 2022/09/12 18:17:06 fetching corpus: 7995, signal 255355/273223 (executing program) 2022/09/12 18:17:06 fetching corpus: 8045, signal 255900/273233 (executing program) 2022/09/12 18:17:06 fetching corpus: 8095, signal 256548/273274 (executing program) 2022/09/12 18:17:07 fetching corpus: 8145, signal 257070/273283 (executing program) 2022/09/12 18:17:07 fetching corpus: 8195, signal 257390/273287 (executing program) 2022/09/12 18:17:07 fetching corpus: 8245, signal 257764/273307 (executing program) 2022/09/12 18:17:07 fetching corpus: 8295, signal 258193/273307 (executing program) 2022/09/12 18:17:07 fetching corpus: 8345, signal 258574/273318 (executing program) 2022/09/12 18:17:07 fetching corpus: 8395, signal 258822/273320 (executing program) 2022/09/12 18:17:07 fetching corpus: 8445, signal 259230/273336 (executing program) 2022/09/12 18:17:07 fetching corpus: 8495, signal 259626/273349 (executing program) 2022/09/12 18:17:08 fetching corpus: 8545, signal 260289/273367 (executing program) 2022/09/12 18:17:08 fetching corpus: 8595, signal 260672/273372 (executing program) 2022/09/12 18:17:08 fetching corpus: 8645, signal 260951/273404 (executing program) 2022/09/12 18:17:08 fetching corpus: 8695, signal 261294/273424 (executing program) 2022/09/12 18:17:08 fetching corpus: 8745, signal 261497/273432 (executing program) 2022/09/12 18:17:08 fetching corpus: 8795, signal 261734/273438 (executing program) 2022/09/12 18:17:08 fetching corpus: 8845, signal 261974/273447 (executing program) 2022/09/12 18:17:08 fetching corpus: 8895, signal 262613/273523 (executing program) 2022/09/12 18:17:09 fetching corpus: 8928, signal 263032/273537 (executing program) 2022/09/12 18:17:09 fetching corpus: 8928, signal 263032/273537 (executing program) 2022/09/12 18:17:11 starting 8 fuzzer processes 18:17:11 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xc00) 18:17:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x0, 0x0) 18:17:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 18:17:11 executing program 4: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xd, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x0, 0x0, "9215194f0726f4fb53b9cb8225491bc32bc4ef3c596b7dc44f6890fc67d6817727280923ad6b9fedf3bea850aaac8fb0add80305e5f887ff8e3d9aecc310de48e3809bac007463d2de6eebc215337b7f"}, 0xd8) 18:17:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x12, 0x0, 0x410) [ 84.571881] audit: type=1400 audit(1663006631.304:6): avc: denied { execmem } for pid=288 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:17:11 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x4, {0x2, 0x0, @empty}, 'lo\x00'}) 18:17:11 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) 18:17:11 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) [ 85.950914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.951816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.953625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.954557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.955210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.955976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.957069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.958550] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.960025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.960672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.961449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.962294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.962899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.966945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.968077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.968912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.969638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.970767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.975240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.979769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.980360] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.981043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.987227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.988969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.990428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.990721] Bluetooth: hci0: HCI_REQ-0x0c1a [ 86.002772] Bluetooth: hci1: HCI_REQ-0x0c1a [ 86.003219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.004490] Bluetooth: hci3: HCI_REQ-0x0c1a [ 86.004961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.007093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.008754] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.009422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.013237] Bluetooth: hci2: HCI_REQ-0x0c1a [ 86.025551] Bluetooth: hci4: HCI_REQ-0x0c1a [ 86.078182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.080368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.082287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.086336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.095327] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.101353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.115224] Bluetooth: hci5: HCI_REQ-0x0c1a [ 88.016725] Bluetooth: hci0: command 0x0409 tx timeout [ 88.016726] Bluetooth: hci2: command 0x0409 tx timeout [ 88.017866] Bluetooth: hci3: command 0x0409 tx timeout [ 88.018282] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 88.019165] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 88.080280] Bluetooth: hci4: command 0x0409 tx timeout [ 88.081211] Bluetooth: hci1: command 0x0409 tx timeout [ 88.144192] Bluetooth: hci5: command 0x0409 tx timeout [ 90.064999] Bluetooth: hci3: command 0x041b tx timeout [ 90.065662] Bluetooth: hci2: command 0x041b tx timeout [ 90.066061] Bluetooth: hci0: command 0x041b tx timeout [ 90.129214] Bluetooth: hci1: command 0x041b tx timeout [ 90.129866] Bluetooth: hci4: command 0x041b tx timeout [ 90.193250] Bluetooth: hci5: command 0x041b tx timeout [ 91.589893] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.594325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.596075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.598650] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.599791] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.600801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.605127] Bluetooth: hci6: HCI_REQ-0x0c1a [ 91.753526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.768463] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.770039] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.773387] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.774789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.775596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.779665] Bluetooth: hci7: HCI_REQ-0x0c1a [ 92.112410] Bluetooth: hci0: command 0x040f tx timeout [ 92.113227] Bluetooth: hci2: command 0x040f tx timeout [ 92.115207] Bluetooth: hci3: command 0x040f tx timeout [ 92.176639] Bluetooth: hci4: command 0x040f tx timeout [ 92.177890] Bluetooth: hci1: command 0x040f tx timeout [ 92.240285] Bluetooth: hci5: command 0x040f tx timeout [ 93.648275] Bluetooth: hci6: command 0x0409 tx timeout [ 93.840389] Bluetooth: hci7: command 0x0409 tx timeout [ 94.160225] Bluetooth: hci3: command 0x0419 tx timeout [ 94.161043] Bluetooth: hci2: command 0x0419 tx timeout [ 94.161871] Bluetooth: hci0: command 0x0419 tx timeout [ 94.224318] Bluetooth: hci1: command 0x0419 tx timeout [ 94.226201] Bluetooth: hci4: command 0x0419 tx timeout [ 94.288189] Bluetooth: hci5: command 0x0419 tx timeout [ 95.696684] Bluetooth: hci6: command 0x041b tx timeout [ 95.888190] Bluetooth: hci7: command 0x041b tx timeout [ 97.744171] Bluetooth: hci6: command 0x040f tx timeout [ 97.936156] Bluetooth: hci7: command 0x040f tx timeout [ 99.792178] Bluetooth: hci6: command 0x0419 tx timeout [ 99.984196] Bluetooth: hci7: command 0x0419 tx timeout [ 136.743838] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 18:18:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4c0482c098a35075, &(0x7f0000000400)={0x77359400}, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) [ 136.872855] audit: type=1400 audit(1663006683.605:7): avc: denied { open } for pid=3740 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.874512] audit: type=1400 audit(1663006683.605:8): avc: denied { kernel } for pid=3740 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.885532] ------------[ cut here ]------------ [ 136.885554] [ 136.885557] ====================================================== [ 136.885561] WARNING: possible circular locking dependency detected [ 136.885565] 6.0.0-rc5-next-20220912 #1 Not tainted [ 136.885572] ------------------------------------------------------ [ 136.885575] syz-executor.5/3741 is trying to acquire lock: [ 136.885581] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 136.885619] [ 136.885619] but task is already holding lock: [ 136.885621] ffff8880087cd820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 136.885649] [ 136.885649] which lock already depends on the new lock. [ 136.885649] [ 136.885652] [ 136.885652] the existing dependency chain (in reverse order) is: [ 136.885655] [ 136.885655] -> #3 (&ctx->lock){....}-{2:2}: [ 136.885668] _raw_spin_lock+0x2a/0x40 [ 136.885685] __perf_event_task_sched_out+0x53b/0x18d0 [ 136.885698] __schedule+0xedd/0x2470 [ 136.885707] preempt_schedule_common+0x45/0xc0 [ 136.885718] __cond_resched+0x17/0x30 [ 136.885727] __mutex_lock+0xa3/0x14d0 [ 136.885738] __do_sys_perf_event_open+0x1eec/0x32c0 [ 136.885751] do_syscall_64+0x3b/0x90 [ 136.885765] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.885781] [ 136.885781] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 136.885795] _raw_spin_lock_nested+0x30/0x40 [ 136.885810] raw_spin_rq_lock_nested+0x1e/0x30 [ 136.885823] task_fork_fair+0x63/0x4d0 [ 136.885840] sched_cgroup_fork+0x3d0/0x540 [ 136.885854] copy_process+0x3f9e/0x6df0 [ 136.885865] kernel_clone+0xe7/0x890 [ 136.885874] user_mode_thread+0xad/0xf0 [ 136.885885] rest_init+0x24/0x250 [ 136.885901] arch_call_rest_init+0xf/0x14 [ 136.885920] start_kernel+0x4c1/0x4e6 [ 136.885937] secondary_startup_64_no_verify+0xe0/0xeb [ 136.885951] [ 136.885951] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 136.885965] _raw_spin_lock_irqsave+0x39/0x60 [ 136.885980] try_to_wake_up+0xab/0x1920 [ 136.885993] up+0x75/0xb0 [ 136.886005] __up_console_sem+0x6e/0x80 [ 136.886022] console_unlock+0x46a/0x590 [ 136.886038] do_con_write+0xc05/0x1d50 [ 136.886049] con_write+0x21/0x40 [ 136.886059] n_tty_write+0x4d4/0xfe0 [ 136.886071] file_tty_write.constprop.0+0x49c/0x8f0 [ 136.886084] vfs_write+0x9c3/0xd90 [ 136.886105] ksys_write+0x127/0x250 [ 136.886122] do_syscall_64+0x3b/0x90 [ 136.886135] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.886152] [ 136.886152] -> #0 ((console_sem).lock){....}-{2:2}: [ 136.886165] __lock_acquire+0x2a02/0x5e70 [ 136.886182] lock_acquire+0x1a2/0x530 [ 136.886199] _raw_spin_lock_irqsave+0x39/0x60 [ 136.886214] down_trylock+0xe/0x70 [ 136.886226] __down_trylock_console_sem+0x3b/0xd0 [ 136.886243] vprintk_emit+0x16b/0x560 [ 136.886259] vprintk+0x84/0xa0 [ 136.886276] _printk+0xba/0xf1 [ 136.886294] report_bug.cold+0x72/0xab [ 136.886306] handle_bug+0x3c/0x70 [ 136.886318] exc_invalid_op+0x14/0x50 [ 136.886331] asm_exc_invalid_op+0x16/0x20 [ 136.886348] group_sched_out.part.0+0x2c7/0x460 [ 136.886358] ctx_sched_out+0x8f1/0xc10 [ 136.886368] __perf_event_task_sched_out+0x6d0/0x18d0 [ 136.886380] __schedule+0xedd/0x2470 [ 136.886389] preempt_schedule_common+0x45/0xc0 [ 136.886400] __cond_resched+0x17/0x30 [ 136.886410] __mutex_lock+0xa3/0x14d0 [ 136.886420] __do_sys_perf_event_open+0x1eec/0x32c0 [ 136.886433] do_syscall_64+0x3b/0x90 [ 136.886446] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.886463] [ 136.886463] other info that might help us debug this: [ 136.886463] [ 136.886465] Chain exists of: [ 136.886465] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 136.886465] [ 136.886480] Possible unsafe locking scenario: [ 136.886480] [ 136.886482] CPU0 CPU1 [ 136.886484] ---- ---- [ 136.886487] lock(&ctx->lock); [ 136.886492] lock(&rq->__lock); [ 136.886498] lock(&ctx->lock); [ 136.886505] lock((console_sem).lock); [ 136.886510] [ 136.886510] *** DEADLOCK *** [ 136.886510] [ 136.886512] 2 locks held by syz-executor.5/3741: [ 136.886519] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 136.886544] #1: ffff8880087cd820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 136.886572] [ 136.886572] stack backtrace: [ 136.886575] CPU: 1 PID: 3741 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 136.886587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 136.886595] Call Trace: [ 136.886598] [ 136.886603] dump_stack_lvl+0x8b/0xb3 [ 136.886617] check_noncircular+0x263/0x2e0 [ 136.886634] ? format_decode+0x26c/0xb50 [ 136.886649] ? print_circular_bug+0x450/0x450 [ 136.886667] ? enable_ptr_key_workfn+0x20/0x20 [ 136.886682] ? format_decode+0x26c/0xb50 [ 136.886699] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 136.886717] __lock_acquire+0x2a02/0x5e70 [ 136.886741] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 136.886760] ? __mutex_add_waiter+0x120/0x120 [ 136.886779] lock_acquire+0x1a2/0x530 [ 136.886797] ? down_trylock+0xe/0x70 [ 136.886812] ? rcu_read_unlock+0x40/0x40 [ 136.886835] ? vprintk+0x84/0xa0 [ 136.886854] _raw_spin_lock_irqsave+0x39/0x60 [ 136.886869] ? down_trylock+0xe/0x70 [ 136.886883] down_trylock+0xe/0x70 [ 136.886897] ? vprintk+0x84/0xa0 [ 136.886914] __down_trylock_console_sem+0x3b/0xd0 [ 136.886932] vprintk_emit+0x16b/0x560 [ 136.886953] vprintk+0x84/0xa0 [ 136.886971] _printk+0xba/0xf1 [ 136.886989] ? record_print_text.cold+0x16/0x16 [ 136.887012] ? report_bug.cold+0x66/0xab [ 136.887027] ? group_sched_out.part.0+0x2c7/0x460 [ 136.887038] report_bug.cold+0x72/0xab [ 136.887054] handle_bug+0x3c/0x70 [ 136.887067] exc_invalid_op+0x14/0x50 [ 136.887082] asm_exc_invalid_op+0x16/0x20 [ 136.887099] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 136.887113] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 136.887124] RSP: 0018:ffff888042ad7978 EFLAGS: 00010006 [ 136.887133] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 136.887141] RDX: ffff88801c2fd040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 136.887149] RBP: ffff88801d6d0000 R08: 0000000000000005 R09: 0000000000000001 [ 136.887156] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff8880087cd800 [ 136.887164] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 136.887176] ? group_sched_out.part.0+0x2c7/0x460 [ 136.887190] ? group_sched_out.part.0+0x2c7/0x460 [ 136.887203] ctx_sched_out+0x8f1/0xc10 [ 136.887217] __perf_event_task_sched_out+0x6d0/0x18d0 [ 136.887233] ? lock_is_held_type+0xd7/0x130 [ 136.887252] ? __perf_cgroup_move+0x160/0x160 [ 136.887264] ? set_next_entity+0x304/0x550 [ 136.887288] ? update_curr+0x267/0x740 [ 136.887308] ? lock_is_held_type+0xd7/0x130 [ 136.887327] __schedule+0xedd/0x2470 [ 136.887341] ? io_schedule_timeout+0x150/0x150 [ 136.887352] ? find_held_lock+0x2c/0x110 [ 136.887369] ? lock_is_held_type+0xd7/0x130 [ 136.887387] ? __cond_resched+0x17/0x30 [ 136.887398] preempt_schedule_common+0x45/0xc0 [ 136.887411] __cond_resched+0x17/0x30 [ 136.887422] __mutex_lock+0xa3/0x14d0 [ 136.887435] ? lock_is_held_type+0xd7/0x130 [ 136.887452] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 136.887467] ? mutex_lock_io_nested+0x1310/0x1310 [ 136.887480] ? lock_release+0x3b2/0x750 [ 136.887498] ? __up_read+0x192/0x730 [ 136.887514] ? up_write+0x480/0x480 [ 136.887529] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 136.887548] __do_sys_perf_event_open+0x1eec/0x32c0 [ 136.887566] ? __up_read+0x192/0x730 [ 136.887580] ? perf_compat_ioctl+0x130/0x130 [ 136.887593] ? up_write+0x480/0x480 [ 136.887613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 136.887632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 136.887653] do_syscall_64+0x3b/0x90 [ 136.887667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.887685] RIP: 0033:0x7f91be15db19 [ 136.887693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.887704] RSP: 002b:00007f91bb6d3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 136.887715] RAX: ffffffffffffffda RBX: 00007f91be270f60 RCX: 00007f91be15db19 [ 136.887723] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 136.887730] RBP: 00007f91be1b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 136.887737] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 136.887745] R13: 00007ffd8c2d755f R14: 00007f91bb6d3300 R15: 0000000000022000 [ 136.887759] [ 136.947812] WARNING: CPU: 1 PID: 3741 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 136.948423] Modules linked in: [ 136.948640] CPU: 1 PID: 3741 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 136.949167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 136.949898] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 136.950260] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 136.951437] RSP: 0018:ffff888042ad7978 EFLAGS: 00010006 [ 136.951789] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 136.952257] RDX: ffff88801c2fd040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 136.952729] RBP: ffff88801d6d0000 R08: 0000000000000005 R09: 0000000000000001 [ 136.953206] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff8880087cd800 [ 136.953670] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 136.954141] FS: 00007f91bb6d3700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 136.954669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.955055] CR2: 00007fee96f876f4 CR3: 000000001d662000 CR4: 0000000000350ee0 [ 136.955537] Call Trace: [ 136.955715] [ 136.955873] ctx_sched_out+0x8f1/0xc10 [ 136.956146] __perf_event_task_sched_out+0x6d0/0x18d0 [ 136.956499] ? lock_is_held_type+0xd7/0x130 [ 136.956794] ? __perf_cgroup_move+0x160/0x160 [ 136.957100] ? set_next_entity+0x304/0x550 [ 136.957393] ? update_curr+0x267/0x740 [ 136.957672] ? lock_is_held_type+0xd7/0x130 [ 136.958011] __schedule+0xedd/0x2470 [ 136.958310] ? io_schedule_timeout+0x150/0x150 [ 136.958635] ? find_held_lock+0x2c/0x110 [ 136.958915] ? lock_is_held_type+0xd7/0x130 [ 136.959216] ? __cond_resched+0x17/0x30 [ 136.959490] preempt_schedule_common+0x45/0xc0 [ 136.959803] __cond_resched+0x17/0x30 [ 136.960062] __mutex_lock+0xa3/0x14d0 [ 136.960321] ? lock_is_held_type+0xd7/0x130 [ 136.960617] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 136.960967] ? mutex_lock_io_nested+0x1310/0x1310 [ 136.961294] ? lock_release+0x3b2/0x750 [ 136.961569] ? __up_read+0x192/0x730 [ 136.961829] ? up_write+0x480/0x480 [ 136.962085] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 136.962435] __do_sys_perf_event_open+0x1eec/0x32c0 [ 136.962774] ? __up_read+0x192/0x730 [ 136.963028] ? perf_compat_ioctl+0x130/0x130 [ 136.963342] ? up_write+0x480/0x480 [ 136.963601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 136.963955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 136.964310] do_syscall_64+0x3b/0x90 [ 136.964566] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.964916] RIP: 0033:0x7f91be15db19 [ 136.965174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.966522] RSP: 002b:00007f91bb6d3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 136.967085] RAX: ffffffffffffffda RBX: 00007f91be270f60 RCX: 00007f91be15db19 [ 136.967595] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 136.968113] RBP: 00007f91be1b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 136.968619] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 136.969129] R13: 00007ffd8c2d755f R14: 00007f91bb6d3300 R15: 0000000000022000 [ 136.969639] [ 136.969813] irq event stamp: 674 [ 136.970058] hardirqs last enabled at (673): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 136.970727] hardirqs last disabled at (674): [] __schedule+0x1225/0x2470 [ 136.971329] softirqs last enabled at (470): [] __irq_exit_rcu+0x11b/0x180 [ 136.971936] softirqs last disabled at (379): [] __irq_exit_rcu+0x11b/0x180 [ 136.972551] ---[ end trace 0000000000000000 ]--- [ 137.248256] SELinux: Context šE6wEұ֩꺐=0%9*=Gwt?"I9ojs}L cvg is not valid (left unmapped). [ 137.250260] audit: type=1400 audit(1663006683.982:9): avc: denied { relabelto } for pid=3740 comm="syz-executor.5" name="TCP" dev="sockfs" ino=13654 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 trawcon=F4F2C5A1E3AD19DC45C5CC3619AB77BC45F411F5B4B2D2B1CDD6A9EABA908E3DEC3025392A3D477792741BA2DDE63F224903396FC2C36AE7C273EF7DBEF84C206385767F67BEF3B8CE 18:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4c0482c098a35075, &(0x7f0000000400)={0x77359400}, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) 18:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4c0482c098a35075, &(0x7f0000000400)={0x77359400}, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) 18:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4c0482c098a35075, &(0x7f0000000400)={0x77359400}, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) 18:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4c0482c098a35075, &(0x7f0000000400)={0x77359400}, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) 18:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4c0482c098a35075, &(0x7f0000000400)={0x77359400}, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) [ 137.795303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.795754] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2 [ 137.796437] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 137.796971] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 137.797510] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 137.798032] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 137.798570] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 137.799110] Buffer I/O error on dev sr0, logical block 5, lost async page write 18:18:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4c0482c098a35075, &(0x7f0000000400)={0x77359400}, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) [ 137.838846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 137.839328] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2 [ 137.839936] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 137.840486] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 137.841036] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 137.841588] Buffer I/O error on dev sr0, logical block 3, lost async page write 18:18:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 5: io_setup(0x5, &(0x7f00000005c0)=0x0) io_submit(r0, 0x22, 0xfffffffffffffffe) 18:18:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 18:18:06 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) 18:18:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x3b4b, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) lseek(r1, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:18:06 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 18:18:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x12, 0x0, 0x410) 18:18:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 139.389595] audit: type=1400 audit(1663006686.121:10): avc: denied { write } for pid=3973 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:18:06 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) 18:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000600)=0x5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 18:18:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 139.440981] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.441859] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 139.442344] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 139.442784] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 139.443288] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 139.444841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.445230] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.445993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.446443] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.447205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.447595] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.448371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.448737] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.449574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.449935] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.450690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.451051] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.451853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.452255] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.453023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.453788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.454348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.454869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.455459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.455981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.456549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.457071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.457656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.458444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.459033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.461115] hrtimer: interrupt took 19797 ns [ 139.461706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.462270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.462835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.463471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.464749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.465372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.466541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.467063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.467667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.468484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.469045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.469935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.471341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.471899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:18:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x3b4b, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) lseek(r1, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:18:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x12, 0x0, 0x410) 18:18:06 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 18:18:06 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x20}], 0x1}, 0x0) 18:18:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 18:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000600)=0x5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 18:18:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x3b4b, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) lseek(r1, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:18:06 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 18:18:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x12, 0x0, 0x410) [ 139.658355] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.658994] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 139.659496] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 139.659937] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 139.701770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.709274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.711777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.714157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.715688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.719486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.721985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.725054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.726042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.727120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.727697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.728765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.729404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.731298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.731854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.732428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000600)=0x5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 18:18:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 18:18:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x3b4b, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) lseek(r1, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:18:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x3b4b, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) lseek(r1, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:18:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000600)=0x5, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 18:18:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) [ 139.998583] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.999251] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 139.999728] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 140.000171] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 140.001449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.002239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.002768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.003362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.003918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.004529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.005055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.005613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:18:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) [ 140.146911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.157763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.163123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.164120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.165111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.166152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.168130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.169342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:18:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x3b4b, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) lseek(r1, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:18:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x3b4b, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) lseek(r1, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 18:18:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) [ 140.290919] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 140.291669] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 140.292131] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 140.292576] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 140.294047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.294754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.295290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.295946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.297953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.298648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.319455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.360630] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 140.361543] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 140.362187] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 140.362831] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 140.364046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.364718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.365554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.366250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.366952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.368022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.368782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.369507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.370425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.370957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.372355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.372879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.373457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.373986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.374599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.375394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:18:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) [ 140.565736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4081 comm=syz-executor.3 [ 140.566635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4081 comm=syz-executor.3 [ 140.567480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4081 comm=syz-executor.3 18:18:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_DELFLOWTABLE={0x14}, @NFT_MSG_DELFLOWTABLE={0x14}, @NFT_MSG_DELSET={0x14}], {0x14}}, 0x78}}, 0x0) 18:18:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010d0417ffffffffffff0026a15cc87649ee1dabb665995ea853c1"], 0x1b) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x7ff, 0x10, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x18406, 0x144, 0x6, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3f, 0x3f, 0x0, 0x7, 0x0, 0x6, 0x80100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x485c0, 0x0, 0x6, 0x1, 0x5, 0x10040000, 0xffff, 0x0, 0x7, 0x0, 0x2a2}, 0x0, 0xffffffffffffffff, r2, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x0, "267fb66ad5d9d436633c57535ea853c1"}}}, 0x1b) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 18:18:07 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_setup(0x3e69, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000003f40), 0xffffffffffffffff) [ 140.568292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=4081 comm=syz-executor.3 18:18:07 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140), 0x0) 18:18:07 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x80, 0x0, 0x7, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x20000010000}], 0x0, &(0x7f0000000040)=ANY=[]) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x1) r2 = syz_io_uring_complete(0x0) readahead(r2, 0x200, 0x2) chdir(&(0x7f0000000180)='./file0\x00') fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000100)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xc, 0xa0, 0xba, 0x7, 0x0, 0x0, 0x8, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000000000, 0x2bdf}, 0x1000, 0x0, 0x101, 0x4, 0x3, 0x0, 0x3, 0x0, 0xffff, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) fcntl$getflags(0xffffffffffffffff, 0x3) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000200)) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$dupfd(r3, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000001c0)={0xf0000005}) 18:18:07 executing program 2: futex(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0) [ 140.676292] loop3: detected capacity change from 0 to 264192 [ 140.699216] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:18:07 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x80, 0x0, 0x7, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0 VM DIAGNOSIS: 18:18:03 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=00007f341a983000 RCX=0000000000000000 RDX=1ffff11001cd40ea RSI=ffffffff816c6462 RDI=0000000000000005 RBP=ffff88800e6a0750 RSP=ffff88801a64fc50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888008525400 R13=0000000000000000 R14=0000000000000000 R15=ffff88801a64fce0 RIP=ffffffff816c6477 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f341ab818e0 CR3=0000000039a5a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888042ad73c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f91bb6d3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fee96f876f4 CR3=000000001d662000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000ffff00000000 000000000000ffff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 000000ff00000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000