Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:14713' (ECDSA) to the list of known hosts. 2022/11/30 11:46:05 fuzzer started 2022/11/30 11:46:05 dialing manager at localhost:35581 syzkaller login: [ 46.771180] cgroup: Unknown subsys name 'net' [ 46.882242] cgroup: Unknown subsys name 'rlimit' 2022/11/30 11:46:23 syscalls: 2217 2022/11/30 11:46:23 code coverage: enabled 2022/11/30 11:46:23 comparison tracing: enabled 2022/11/30 11:46:23 extra coverage: enabled 2022/11/30 11:46:23 setuid sandbox: enabled 2022/11/30 11:46:23 namespace sandbox: enabled 2022/11/30 11:46:23 Android sandbox: enabled 2022/11/30 11:46:23 fault injection: enabled 2022/11/30 11:46:23 leak checking: enabled 2022/11/30 11:46:23 net packet injection: enabled 2022/11/30 11:46:23 net device setup: enabled 2022/11/30 11:46:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/30 11:46:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/30 11:46:23 USB emulation: enabled 2022/11/30 11:46:23 hci packet injection: enabled 2022/11/30 11:46:23 wifi device emulation: enabled 2022/11/30 11:46:23 802.15.4 emulation: enabled 2022/11/30 11:46:23 fetching corpus: 0, signal 0/2000 (executing program) 2022/11/30 11:46:23 fetching corpus: 33, signal 29295/32922 (executing program) 2022/11/30 11:46:23 fetching corpus: 71, signal 41821/46982 (executing program) 2022/11/30 11:46:23 fetching corpus: 121, signal 57524/63977 (executing program) 2022/11/30 11:46:23 fetching corpus: 171, signal 64120/71989 (executing program) 2022/11/30 11:46:24 fetching corpus: 221, signal 71068/80246 (executing program) 2022/11/30 11:46:24 fetching corpus: 271, signal 78799/89152 (executing program) 2022/11/30 11:46:24 fetching corpus: 319, signal 83989/95554 (executing program) 2022/11/30 11:46:24 fetching corpus: 369, signal 88179/100898 (executing program) 2022/11/30 11:46:24 fetching corpus: 418, signal 95038/108717 (executing program) 2022/11/30 11:46:24 fetching corpus: 467, signal 101342/115930 (executing program) 2022/11/30 11:46:24 fetching corpus: 517, signal 107338/122804 (executing program) 2022/11/30 11:46:25 fetching corpus: 566, signal 111902/128244 (executing program) 2022/11/30 11:46:25 fetching corpus: 616, signal 115594/132886 (executing program) 2022/11/30 11:46:25 fetching corpus: 666, signal 119100/137277 (executing program) 2022/11/30 11:46:25 fetching corpus: 716, signal 120516/139782 (executing program) 2022/11/30 11:46:25 fetching corpus: 766, signal 123983/144078 (executing program) 2022/11/30 11:46:25 fetching corpus: 815, signal 125901/146924 (executing program) 2022/11/30 11:46:25 fetching corpus: 863, signal 128369/150244 (executing program) 2022/11/30 11:46:26 fetching corpus: 913, signal 131154/153863 (executing program) 2022/11/30 11:46:26 fetching corpus: 962, signal 133960/157394 (executing program) 2022/11/30 11:46:26 fetching corpus: 1011, signal 138434/162379 (executing program) 2022/11/30 11:46:26 fetching corpus: 1061, signal 140754/165450 (executing program) 2022/11/30 11:46:26 fetching corpus: 1111, signal 143029/168411 (executing program) 2022/11/30 11:46:26 fetching corpus: 1161, signal 144974/171086 (executing program) 2022/11/30 11:46:26 fetching corpus: 1211, signal 147091/173937 (executing program) 2022/11/30 11:46:27 fetching corpus: 1260, signal 149024/176509 (executing program) 2022/11/30 11:46:27 fetching corpus: 1310, signal 151022/179135 (executing program) 2022/11/30 11:46:27 fetching corpus: 1360, signal 152737/181506 (executing program) 2022/11/30 11:46:27 fetching corpus: 1409, signal 155318/184576 (executing program) 2022/11/30 11:46:27 fetching corpus: 1459, signal 156612/186563 (executing program) 2022/11/30 11:46:27 fetching corpus: 1509, signal 158213/188818 (executing program) 2022/11/30 11:46:27 fetching corpus: 1559, signal 159372/190653 (executing program) 2022/11/30 11:46:28 fetching corpus: 1608, signal 161451/193173 (executing program) 2022/11/30 11:46:28 fetching corpus: 1657, signal 163355/195570 (executing program) 2022/11/30 11:46:28 fetching corpus: 1706, signal 164811/197617 (executing program) 2022/11/30 11:46:28 fetching corpus: 1756, signal 166046/199470 (executing program) 2022/11/30 11:46:28 fetching corpus: 1806, signal 167919/201831 (executing program) 2022/11/30 11:46:28 fetching corpus: 1856, signal 169065/203561 (executing program) 2022/11/30 11:46:28 fetching corpus: 1905, signal 170381/205427 (executing program) 2022/11/30 11:46:29 fetching corpus: 1954, signal 171874/207398 (executing program) 2022/11/30 11:46:29 fetching corpus: 2001, signal 173532/209459 (executing program) 2022/11/30 11:46:29 fetching corpus: 2049, signal 175332/211586 (executing program) 2022/11/30 11:46:29 fetching corpus: 2099, signal 176377/213175 (executing program) 2022/11/30 11:46:29 fetching corpus: 2148, signal 178270/215352 (executing program) 2022/11/30 11:46:29 fetching corpus: 2198, signal 179561/217094 (executing program) 2022/11/30 11:46:29 fetching corpus: 2247, signal 181229/219081 (executing program) 2022/11/30 11:46:30 fetching corpus: 2297, signal 182844/221022 (executing program) 2022/11/30 11:46:30 fetching corpus: 2347, signal 184172/222730 (executing program) 2022/11/30 11:46:30 fetching corpus: 2397, signal 185373/224289 (executing program) 2022/11/30 11:46:30 fetching corpus: 2447, signal 186489/225776 (executing program) 2022/11/30 11:46:30 fetching corpus: 2497, signal 187826/227411 (executing program) 2022/11/30 11:46:30 fetching corpus: 2547, signal 189024/228897 (executing program) 2022/11/30 11:46:30 fetching corpus: 2597, signal 190175/230395 (executing program) 2022/11/30 11:46:31 fetching corpus: 2647, signal 191382/231842 (executing program) 2022/11/30 11:46:31 fetching corpus: 2695, signal 192684/233398 (executing program) 2022/11/30 11:46:31 fetching corpus: 2744, signal 194533/235246 (executing program) 2022/11/30 11:46:31 fetching corpus: 2794, signal 195306/236436 (executing program) 2022/11/30 11:46:31 fetching corpus: 2844, signal 196572/237932 (executing program) 2022/11/30 11:46:31 fetching corpus: 2894, signal 197826/239339 (executing program) 2022/11/30 11:46:31 fetching corpus: 2944, signal 199313/240911 (executing program) 2022/11/30 11:46:31 fetching corpus: 2993, signal 200199/242112 (executing program) 2022/11/30 11:46:32 fetching corpus: 3043, signal 201063/243284 (executing program) 2022/11/30 11:46:32 fetching corpus: 3092, signal 202394/244715 (executing program) 2022/11/30 11:46:32 fetching corpus: 3142, signal 203553/246019 (executing program) 2022/11/30 11:46:32 fetching corpus: 3192, signal 204569/247242 (executing program) 2022/11/30 11:46:32 fetching corpus: 3242, signal 205626/248459 (executing program) 2022/11/30 11:46:32 fetching corpus: 3292, signal 206559/249600 (executing program) 2022/11/30 11:46:32 fetching corpus: 3342, signal 207262/250630 (executing program) 2022/11/30 11:46:33 fetching corpus: 3392, signal 208268/251771 (executing program) 2022/11/30 11:46:33 fetching corpus: 3441, signal 209372/252995 (executing program) 2022/11/30 11:46:33 fetching corpus: 3491, signal 210389/254129 (executing program) 2022/11/30 11:46:33 fetching corpus: 3541, signal 211553/255310 (executing program) 2022/11/30 11:46:33 fetching corpus: 3591, signal 212418/256343 (executing program) 2022/11/30 11:46:33 fetching corpus: 3641, signal 213358/257457 (executing program) 2022/11/30 11:46:33 fetching corpus: 3691, signal 214179/258434 (executing program) 2022/11/30 11:46:34 fetching corpus: 3740, signal 215581/259713 (executing program) 2022/11/30 11:46:34 fetching corpus: 3790, signal 216300/260643 (executing program) 2022/11/30 11:46:34 fetching corpus: 3840, signal 217097/261581 (executing program) 2022/11/30 11:46:34 fetching corpus: 3890, signal 217882/262546 (executing program) 2022/11/30 11:46:34 fetching corpus: 3939, signal 219238/263736 (executing program) 2022/11/30 11:46:34 fetching corpus: 3989, signal 220046/264644 (executing program) 2022/11/30 11:46:35 fetching corpus: 4039, signal 220956/265589 (executing program) 2022/11/30 11:46:35 fetching corpus: 4089, signal 222156/266648 (executing program) 2022/11/30 11:46:35 fetching corpus: 4139, signal 223052/267580 (executing program) 2022/11/30 11:46:35 fetching corpus: 4189, signal 223906/268460 (executing program) 2022/11/30 11:46:35 fetching corpus: 4238, signal 224686/269326 (executing program) 2022/11/30 11:46:35 fetching corpus: 4286, signal 225299/270107 (executing program) 2022/11/30 11:46:35 fetching corpus: 4336, signal 225998/270891 (executing program) 2022/11/30 11:46:35 fetching corpus: 4386, signal 226575/271630 (executing program) 2022/11/30 11:46:36 fetching corpus: 4435, signal 227223/272380 (executing program) 2022/11/30 11:46:36 fetching corpus: 4485, signal 227741/273067 (executing program) 2022/11/30 11:46:36 fetching corpus: 4534, signal 228633/273896 (executing program) 2022/11/30 11:46:36 fetching corpus: 4584, signal 229080/274578 (executing program) 2022/11/30 11:46:36 fetching corpus: 4634, signal 230038/275361 (executing program) 2022/11/30 11:46:36 fetching corpus: 4683, signal 230844/276099 (executing program) 2022/11/30 11:46:36 fetching corpus: 4733, signal 231698/276851 (executing program) 2022/11/30 11:46:37 fetching corpus: 4783, signal 233153/277845 (executing program) 2022/11/30 11:46:37 fetching corpus: 4833, signal 234311/278678 (executing program) 2022/11/30 11:46:37 fetching corpus: 4883, signal 235045/279376 (executing program) 2022/11/30 11:46:37 fetching corpus: 4933, signal 235882/280098 (executing program) 2022/11/30 11:46:37 fetching corpus: 4983, signal 236610/280725 (executing program) 2022/11/30 11:46:37 fetching corpus: 5033, signal 237348/281363 (executing program) 2022/11/30 11:46:37 fetching corpus: 5082, signal 237951/282005 (executing program) 2022/11/30 11:46:38 fetching corpus: 5132, signal 238589/282606 (executing program) 2022/11/30 11:46:38 fetching corpus: 5182, signal 239130/283221 (executing program) 2022/11/30 11:46:38 fetching corpus: 5232, signal 241194/284239 (executing program) 2022/11/30 11:46:38 fetching corpus: 5282, signal 241925/284851 (executing program) 2022/11/30 11:46:38 fetching corpus: 5331, signal 242490/285386 (executing program) 2022/11/30 11:46:38 fetching corpus: 5381, signal 243538/286062 (executing program) 2022/11/30 11:46:38 fetching corpus: 5431, signal 244139/286588 (executing program) 2022/11/30 11:46:38 fetching corpus: 5481, signal 244679/287100 (executing program) 2022/11/30 11:46:39 fetching corpus: 5531, signal 245358/287663 (executing program) 2022/11/30 11:46:39 fetching corpus: 5581, signal 246205/288254 (executing program) 2022/11/30 11:46:39 fetching corpus: 5631, signal 246790/288765 (executing program) 2022/11/30 11:46:39 fetching corpus: 5680, signal 247473/289281 (executing program) 2022/11/30 11:46:39 fetching corpus: 5730, signal 248043/289769 (executing program) 2022/11/30 11:46:39 fetching corpus: 5780, signal 248572/290260 (executing program) 2022/11/30 11:46:39 fetching corpus: 5830, signal 249017/290696 (executing program) 2022/11/30 11:46:40 fetching corpus: 5880, signal 249693/291158 (executing program) 2022/11/30 11:46:40 fetching corpus: 5929, signal 250308/291633 (executing program) 2022/11/30 11:46:40 fetching corpus: 5979, signal 250797/292089 (executing program) 2022/11/30 11:46:40 fetching corpus: 6029, signal 251471/292572 (executing program) 2022/11/30 11:46:40 fetching corpus: 6079, signal 252165/293012 (executing program) 2022/11/30 11:46:40 fetching corpus: 6129, signal 252693/293451 (executing program) 2022/11/30 11:46:40 fetching corpus: 6179, signal 253299/293893 (executing program) 2022/11/30 11:46:40 fetching corpus: 6228, signal 253990/294324 (executing program) 2022/11/30 11:46:41 fetching corpus: 6278, signal 254382/294688 (executing program) 2022/11/30 11:46:41 fetching corpus: 6328, signal 254921/295128 (executing program) 2022/11/30 11:46:41 fetching corpus: 6376, signal 255584/295545 (executing program) 2022/11/30 11:46:41 fetching corpus: 6426, signal 256150/295910 (executing program) 2022/11/30 11:46:41 fetching corpus: 6476, signal 256758/296291 (executing program) 2022/11/30 11:46:41 fetching corpus: 6526, signal 257343/296651 (executing program) 2022/11/30 11:46:42 fetching corpus: 6576, signal 258074/297004 (executing program) 2022/11/30 11:46:42 fetching corpus: 6626, signal 258465/297346 (executing program) 2022/11/30 11:46:42 fetching corpus: 6676, signal 259065/297707 (executing program) 2022/11/30 11:46:42 fetching corpus: 6726, signal 259524/298016 (executing program) 2022/11/30 11:46:42 fetching corpus: 6776, signal 259962/298332 (executing program) 2022/11/30 11:46:42 fetching corpus: 6826, signal 260481/298625 (executing program) 2022/11/30 11:46:42 fetching corpus: 6876, signal 260768/298904 (executing program) 2022/11/30 11:46:43 fetching corpus: 6926, signal 261395/299243 (executing program) 2022/11/30 11:46:43 fetching corpus: 6976, signal 261850/299569 (executing program) 2022/11/30 11:46:43 fetching corpus: 7025, signal 262440/299868 (executing program) 2022/11/30 11:46:43 fetching corpus: 7075, signal 262885/300164 (executing program) 2022/11/30 11:46:43 fetching corpus: 7125, signal 263403/300452 (executing program) 2022/11/30 11:46:43 fetching corpus: 7175, signal 263926/300742 (executing program) 2022/11/30 11:46:43 fetching corpus: 7225, signal 264494/301024 (executing program) 2022/11/30 11:46:44 fetching corpus: 7275, signal 264915/301270 (executing program) 2022/11/30 11:46:44 fetching corpus: 7325, signal 265528/301506 (executing program) 2022/11/30 11:46:44 fetching corpus: 7375, signal 266187/301758 (executing program) 2022/11/30 11:46:44 fetching corpus: 7425, signal 266619/302010 (executing program) 2022/11/30 11:46:44 fetching corpus: 7475, signal 267189/302010 (executing program) 2022/11/30 11:46:44 fetching corpus: 7525, signal 267681/302010 (executing program) 2022/11/30 11:46:44 fetching corpus: 7574, signal 268200/302010 (executing program) 2022/11/30 11:46:45 fetching corpus: 7624, signal 268890/302010 (executing program) 2022/11/30 11:46:45 fetching corpus: 7674, signal 269453/302010 (executing program) 2022/11/30 11:46:45 fetching corpus: 7724, signal 269980/302010 (executing program) 2022/11/30 11:46:45 fetching corpus: 7774, signal 270317/302010 (executing program) 2022/11/30 11:46:45 fetching corpus: 7822, signal 270753/302010 (executing program) 2022/11/30 11:46:45 fetching corpus: 7872, signal 271191/302010 (executing program) 2022/11/30 11:46:46 fetching corpus: 7921, signal 271596/302016 (executing program) 2022/11/30 11:46:46 fetching corpus: 7970, signal 272051/302016 (executing program) 2022/11/30 11:46:46 fetching corpus: 8020, signal 272638/302016 (executing program) 2022/11/30 11:46:46 fetching corpus: 8068, signal 272998/302016 (executing program) 2022/11/30 11:46:46 fetching corpus: 8118, signal 273326/302016 (executing program) 2022/11/30 11:46:46 fetching corpus: 8168, signal 273853/302016 (executing program) 2022/11/30 11:46:46 fetching corpus: 8218, signal 274300/302016 (executing program) 2022/11/30 11:46:47 fetching corpus: 8267, signal 274620/302016 (executing program) 2022/11/30 11:46:47 fetching corpus: 8316, signal 275142/302016 (executing program) 2022/11/30 11:46:47 fetching corpus: 8366, signal 275643/302016 (executing program) 2022/11/30 11:46:47 fetching corpus: 8416, signal 275998/302016 (executing program) 2022/11/30 11:46:47 fetching corpus: 8466, signal 276326/302016 (executing program) 2022/11/30 11:46:47 fetching corpus: 8515, signal 276602/302016 (executing program) 2022/11/30 11:46:47 fetching corpus: 8565, signal 276947/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8615, signal 277455/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8665, signal 277853/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8715, signal 278319/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8765, signal 278633/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8814, signal 278996/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8864, signal 279476/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8913, signal 279749/302016 (executing program) 2022/11/30 11:46:48 fetching corpus: 8963, signal 280076/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9013, signal 280508/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9063, signal 281104/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9113, signal 281391/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9162, signal 281692/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9211, signal 282284/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9260, signal 282752/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9310, signal 283045/302016 (executing program) 2022/11/30 11:46:49 fetching corpus: 9360, signal 283517/302016 (executing program) 2022/11/30 11:46:50 fetching corpus: 9409, signal 283939/302016 (executing program) 2022/11/30 11:46:50 fetching corpus: 9459, signal 284354/302016 (executing program) 2022/11/30 11:46:50 fetching corpus: 9508, signal 284909/302016 (executing program) 2022/11/30 11:46:50 fetching corpus: 9558, signal 285288/302016 (executing program) 2022/11/30 11:46:50 fetching corpus: 9608, signal 285776/302016 (executing program) 2022/11/30 11:46:50 fetching corpus: 9658, signal 286113/302016 (executing program) 2022/11/30 11:46:50 fetching corpus: 9708, signal 286485/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 9758, signal 286917/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 9806, signal 287386/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 9855, signal 287793/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 9903, signal 288205/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 9953, signal 288601/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 10003, signal 289091/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 10052, signal 289389/302016 (executing program) 2022/11/30 11:46:51 fetching corpus: 10101, signal 289873/302016 (executing program) 2022/11/30 11:46:52 fetching corpus: 10151, signal 290144/302016 (executing program) 2022/11/30 11:46:52 fetching corpus: 10201, signal 290576/302016 (executing program) 2022/11/30 11:46:52 fetching corpus: 10251, signal 291158/302016 (executing program) 2022/11/30 11:46:52 fetching corpus: 10301, signal 291474/302016 (executing program) 2022/11/30 11:46:52 fetching corpus: 10351, signal 291920/302016 (executing program) 2022/11/30 11:46:52 fetching corpus: 10401, signal 292488/302016 (executing program) 2022/11/30 11:46:52 fetching corpus: 10451, signal 292932/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10501, signal 293247/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10549, signal 293773/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10597, signal 294047/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10647, signal 294351/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10697, signal 294864/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10747, signal 295159/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10797, signal 295541/302016 (executing program) 2022/11/30 11:46:53 fetching corpus: 10845, signal 295852/302016 (executing program) 2022/11/30 11:46:54 fetching corpus: 10895, signal 296192/302016 (executing program) 2022/11/30 11:46:54 fetching corpus: 10944, signal 296502/302016 (executing program) 2022/11/30 11:46:54 fetching corpus: 10994, signal 296772/302016 (executing program) 2022/11/30 11:46:54 fetching corpus: 11043, signal 296964/302016 (executing program) 2022/11/30 11:46:54 fetching corpus: 11086, signal 297179/302016 (executing program) 2022/11/30 11:46:54 fetching corpus: 11086, signal 297179/302016 (executing program) 2022/11/30 11:46:57 starting 8 fuzzer processes 11:46:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') read$hiddev(r0, &(0x7f0000000080)=""/36, 0x24) 11:46:57 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x9, 0x0, 0x0, 0x0) 11:46:57 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000100)='./file1\x00', 0x2) 11:46:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/161, 0xa1) r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000080)={r0, r1}) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:46:57 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x10000a}, 0x20) 11:46:57 executing program 5: open_by_handle_at(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="72ac99d1e1010000000004dce200"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x8}, @control}], 0xfffffdcd) 11:46:57 executing program 6: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x6dc7, 0x800}, {}, {0x1, 0x0, 0x1000}, {}], 0x4, &(0x7f0000000180)={0x0, 0x989680}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:46:57 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ff6000/0x2000)=nil) shmat(r0, &(0x7f0000ff8000/0x1000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3000006, 0x810, r1, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8b, 0x20, 0x0, 0x0, 0x4180, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x557, 0x0, @perf_config_ext={0x4, 0x8}, 0x3a00, 0x5, 0x80000000, 0x8, 0x0, 0x3, 0x1c40, 0x0, 0x8001, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="112b24722617892105ca84dd9c20923fa4e2872dd76815764ded82cec499ce8ac00aca856f56ccc5a1975adc510201fd52f0a761d887cb7f560764c62fb294490fbe369af225644d6e2ad582766d4032ff7dadc78421355df540564515e2142cd08d8e530e169216c3be8ae5ab64219b0456dbc8628b4e82409252b798f5e4f368f58ac7ac4ebd1efac1ea140ffc888bbc8a3ee46d0e0fdf96", 0x99}], 0x1, 0x8001, 0x7, 0x1b) [ 95.564392] audit: type=1400 audit(1669808817.736:6): avc: denied { execmem } for pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 96.859167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.861290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.863036] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.866979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.868341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.870988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.872906] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.874230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.882083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.892360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.905384] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.906830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.962833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.967518] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.968323] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.969145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.970476] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.974933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.977655] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.978975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.981977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.982168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.983787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.986609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.986614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.989031] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.989851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.989896] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.990893] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.992666] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.994042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.997850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.998614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.004420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.009431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.016588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.025677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.026580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.027995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.029933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.031112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.031893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.033288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.034632] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.035537] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.043974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.052968] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.056431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.936753] Bluetooth: hci0: command 0x0409 tx timeout [ 99.000314] Bluetooth: hci6: command 0x0409 tx timeout [ 99.000831] Bluetooth: hci1: command 0x0409 tx timeout [ 99.064296] Bluetooth: hci5: command 0x0409 tx timeout [ 99.064808] Bluetooth: hci3: command 0x0409 tx timeout [ 99.065270] Bluetooth: hci4: command 0x0409 tx timeout [ 99.065699] Bluetooth: hci7: command 0x0409 tx timeout [ 99.129451] Bluetooth: hci2: command 0x0409 tx timeout [ 100.985336] Bluetooth: hci0: command 0x041b tx timeout [ 101.048319] Bluetooth: hci1: command 0x041b tx timeout [ 101.048701] Bluetooth: hci6: command 0x041b tx timeout [ 101.113302] Bluetooth: hci7: command 0x041b tx timeout [ 101.113697] Bluetooth: hci4: command 0x041b tx timeout [ 101.114030] Bluetooth: hci3: command 0x041b tx timeout [ 101.114402] Bluetooth: hci5: command 0x041b tx timeout [ 101.177266] Bluetooth: hci2: command 0x041b tx timeout [ 103.033265] Bluetooth: hci0: command 0x040f tx timeout [ 103.097268] Bluetooth: hci6: command 0x040f tx timeout [ 103.097691] Bluetooth: hci1: command 0x040f tx timeout [ 103.160295] Bluetooth: hci5: command 0x040f tx timeout [ 103.160718] Bluetooth: hci3: command 0x040f tx timeout [ 103.161093] Bluetooth: hci4: command 0x040f tx timeout [ 103.161517] Bluetooth: hci7: command 0x040f tx timeout [ 103.224322] Bluetooth: hci2: command 0x040f tx timeout [ 105.081329] Bluetooth: hci0: command 0x0419 tx timeout [ 105.144317] Bluetooth: hci1: command 0x0419 tx timeout [ 105.144735] Bluetooth: hci6: command 0x0419 tx timeout [ 105.209275] Bluetooth: hci7: command 0x0419 tx timeout [ 105.209702] Bluetooth: hci4: command 0x0419 tx timeout [ 105.210081] Bluetooth: hci3: command 0x0419 tx timeout [ 105.210466] Bluetooth: hci5: command 0x0419 tx timeout [ 105.273280] Bluetooth: hci2: command 0x0419 tx timeout [ 146.774330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.775432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.777652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.142468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.143594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.145728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.149051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.149690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.152021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.416626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.417422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.419778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:47:50 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe9e}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000011c0), 0x0) fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x0, 0x2, 0x5, 0xffffffffffff7fff}) write(r2, &(0x7f0000000080)="01", 0x41030) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x20000080) r4 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xa) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) syz_io_uring_setup(0x413, &(0x7f0000000140)={0x0, 0xd544, 0x0, 0x3, 0x209, 0x0, r4}, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r5 = signalfd4(r1, 0x0, 0x0, 0x800) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[], 0x17, 0x3) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf25030000001400098008000200030000000800010000000000500007800c00030001800000000000000c00030033aa0000000000000c0004001f000000000000000c000300050000000000000008000200020000000c000300060000000000000008000100ff070000a4000280040004000400040008000200010000000800010001000000080001004c0d0000040004003c00038008000100070000000800020003000000080002000500000008000200ffffffff0800010003000000080002000500000008000200000800000400040008000100000000803400038008000100080000000800020006000000080002000600000008000100f700000008000200090000000800010008000000"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) [ 148.748494] audit: type=1400 audit(1669808870.926:7): avc: denied { open } for pid=3841 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 148.751364] audit: type=1400 audit(1669808870.926:8): avc: denied { kernel } for pid=3841 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:47:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x480800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) ioctl$TCSETAW(r0, 0x4b68, 0x0) [ 148.910216] hrtimer: interrupt took 30778 ns 11:47:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x1400, &(0x7f0000000140)=ANY=[@ANYBLOB='smackfsfloor=\'!$}&#$+,defcontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="7519e4641771ecce322c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xa000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb648) readahead(r1, 0x3, 0x5) [ 149.027794] loop4: detected capacity change from 0 to 15 [ 149.033825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.034462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.035964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.082812] loop4: detected capacity change from 0 to 15 [ 149.110119] audit: type=1400 audit(1669808871.288:9): avc: denied { write } for pid=3841 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:47:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x1400, &(0x7f0000000140)=ANY=[@ANYBLOB='smackfsfloor=\'!$}&#$+,defcontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="7519e4641771ecce322c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xa000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb648) readahead(r1, 0x3, 0x5) 11:47:51 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe9e}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000011c0), 0x0) fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x0, 0x2, 0x5, 0xffffffffffff7fff}) write(r2, &(0x7f0000000080)="01", 0x41030) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x20000080) r4 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xa) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) syz_io_uring_setup(0x413, &(0x7f0000000140)={0x0, 0xd544, 0x0, 0x3, 0x209, 0x0, r4}, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r5 = signalfd4(r1, 0x0, 0x0, 0x800) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[], 0x17, 0x3) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) [ 149.258881] loop4: detected capacity change from 0 to 15 [ 149.355326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.356508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.359709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:47:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x1400, &(0x7f0000000140)=ANY=[@ANYBLOB='smackfsfloor=\'!$}&#$+,defcontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="7519e4641771ecce322c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xa000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb648) readahead(r1, 0x3, 0x5) [ 149.523399] loop4: detected capacity change from 0 to 15 [ 149.666963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.668765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:47:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x1400, &(0x7f0000000140)=ANY=[@ANYBLOB='smackfsfloor=\'!$}&#$+,defcontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="7519e4641771ecce322c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xa000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb648) readahead(r1, 0x3, 0x5) [ 149.697825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.742954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.743747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.745058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.779866] loop4: detected capacity change from 0 to 15 11:47:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x1400, &(0x7f0000000140)=ANY=[@ANYBLOB='smackfsfloor=\'!$}&#$+,defcontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="7519e4641771ecce322c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xa000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb648) readahead(r1, 0x3, 0x5) [ 149.831679] loop1: detected capacity change from 0 to 15 [ 149.835587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.836267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.838228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.988578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.989224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.990895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.032098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.032773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.102085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.184096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.184678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.186547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.315779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.316473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.318254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.482533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.483115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.484903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.528094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.528994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.530280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.675373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.676024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.677724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:48:05 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ff6000/0x2000)=nil) shmat(r0, &(0x7f0000ff8000/0x1000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3000006, 0x810, r1, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8b, 0x20, 0x0, 0x0, 0x4180, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x557, 0x0, @perf_config_ext={0x4, 0x8}, 0x3a00, 0x5, 0x80000000, 0x8, 0x0, 0x3, 0x1c40, 0x0, 0x8001, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="112b24722617892105ca84dd9c20923fa4e2872dd76815764ded82cec499ce8ac00aca856f56ccc5a1975adc510201fd52f0a761d887cb7f560764c62fb294490fbe369af225644d6e2ad582766d4032ff7dadc78421355df540564515e2142cd08d8e530e169216c3be8ae5ab64219b0456dbc8628b4e82409252b798f5e4f368f58ac7ac4ebd1efac1ea140ffc888bbc8a3ee46d0e0fdf96", 0x99}], 0x1, 0x8001, 0x7, 0x1b) 11:48:05 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ff6000/0x2000)=nil) shmat(r0, &(0x7f0000ff8000/0x1000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3000006, 0x810, r1, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8b, 0x20, 0x0, 0x0, 0x4180, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x557, 0x0, @perf_config_ext={0x4, 0x8}, 0x3a00, 0x5, 0x80000000, 0x8, 0x0, 0x3, 0x1c40, 0x0, 0x8001, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="112b24722617892105ca84dd9c20923fa4e2872dd76815764ded82cec499ce8ac00aca856f56ccc5a1975adc510201fd52f0a761d887cb7f560764c62fb294490fbe369af225644d6e2ad582766d4032ff7dadc78421355df540564515e2142cd08d8e530e169216c3be8ae5ab64219b0456dbc8628b4e82409252b798f5e4f368f58ac7ac4ebd1efac1ea140ffc888bbc8a3ee46d0e0fdf96", 0x99}], 0x1, 0x8001, 0x7, 0x1b) 11:48:05 executing program 2: mount$9p_unix(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={'trans=unix,', {[{@fscache}, {@cache_fscache}, {@access_any}, {@dfltuid}], [{@dont_hash}, {@subj_type={'subj_type', 0x3d, '.'}}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '*('}}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) acct(&(0x7f0000000040)='./file0\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000000800f600", @ANYRES32=r1, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0) 11:48:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x1400, &(0x7f0000000140)=ANY=[@ANYBLOB='smackfsfloor=\'!$}&#$+,defcontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="7519e4641771ecce322c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xa000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb648) readahead(r1, 0x3, 0x5) 11:48:05 executing program 1: mknod(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x10000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 11:48:05 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa000000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xb648) splice(0xffffffffffffffff, &(0x7f0000000000)=0x2, r1, &(0x7f0000000040)=0x200, 0x5b, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200050000000e"], 0x125) close_range(r3, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00000029c0)={0x10, 0x3d, 0x9}, 0x10}], 0x1}, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3) r5 = io_uring_setup(0x62db, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)=""/69, 0x45}], 0x1) close_range(r5, 0xffffffffffffffff, 0x2) 11:48:05 executing program 5: r0 = msgget(0x0, 0xfa) r1 = clone3(&(0x7f00000001c0)={0x123363500, 0xfffffffffffffffd, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgctl$IPC_RMID(r0, 0x0) pidfd_open(r1, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/221) r2 = msgget$private(0x0, 0x80) msgrcv(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb98548d54c702d64cebf0616d46b0783867641ad774a796ef765dd3fa957b557cc267274571ab92bd0ff9e4b1ac585841296ac69c7c331ea8cd49a8969d01156a2c53861e1139af487af6f288121c88616f1597cffa792d4f8ee29f8f080ef4fd5255ba3c73a622f4f8cc35a639da868e28c9f3793f32e58506c8ea0390360d5af552a84591b56ee46322d282147d890729c9f81e6e21ce4888137e7e80e1d2733a3ce4204228ebac8908"], 0x101, 0x2, 0x1800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x79b5, @private1, 0x7}, 0x1c) 11:48:05 executing program 6: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x6dc7, 0x800}, {}, {0x1, 0x0, 0x1000}, {}], 0x4, &(0x7f0000000180)={0x0, 0x989680}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 163.582277] netlink: 'syz-executor.2': attribute type 246 has an invalid length. [ 163.602029] loop4: detected capacity change from 0 to 15 11:48:05 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ff6000/0x2000)=nil) shmat(r0, &(0x7f0000ff8000/0x1000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3000006, 0x810, r1, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8b, 0x20, 0x0, 0x0, 0x4180, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x557, 0x0, @perf_config_ext={0x4, 0x8}, 0x3a00, 0x5, 0x80000000, 0x8, 0x0, 0x3, 0x1c40, 0x0, 0x8001, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="112b24722617892105ca84dd9c20923fa4e2872dd76815764ded82cec499ce8ac00aca856f56ccc5a1975adc510201fd52f0a761d887cb7f560764c62fb294490fbe369af225644d6e2ad582766d4032ff7dadc78421355df540564515e2142cd08d8e530e169216c3be8ae5ab64219b0456dbc8628b4e82409252b798f5e4f368f58ac7ac4ebd1efac1ea140ffc888bbc8a3ee46d0e0fdf96", 0x99}], 0x1, 0x8001, 0x7, 0x1b) [ 163.667649] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; [ 163.667649] program syz-executor.3 not setting count and/or reply_len properly [ 163.688923] ------------[ cut here ]------------ [ 163.690807] WARNING: CPU: 0 PID: 3968 at lib/iov_iter.c:629 _copy_from_iter+0x2f1/0x1130 [ 163.691776] Modules linked in: [ 163.692406] CPU: 0 PID: 3968 Comm: syz-executor.3 Not tainted 6.1.0-rc7-next-20221130 #1 [ 163.696816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 163.697803] RIP: 0010:_copy_from_iter+0x2f1/0x1130 [ 163.698605] Code: 37 ff 44 89 f3 e9 2f ff ff ff e8 4a 2f 37 ff be 79 02 00 00 48 c7 c7 80 b9 9e 84 e8 29 97 5a ff e9 13 fe ff ff e8 2f 2f 37 ff <0f> 0b 45 31 f6 e9 77 ff ff ff e8 20 2f 37 ff 31 ff 89 ee e8 e7 2a [ 163.700016] RSP: 0018:ffff88804532f5e8 EFLAGS: 00010216 [ 163.700736] RAX: 0000000000007b0b RBX: 0000000000000000 RCX: ffffc90002616000 [ 163.702583] RDX: 0000000000040000 RSI: ffffffff8211e9c1 RDI: 0000000000000001 [ 163.704612] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 163.707032] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 [ 163.709992] R13: ffffea0000708e00 R14: 0000000000001000 R15: ffff88804532f818 [ 163.712664] FS: 00007f6970b09700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 163.713386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.714106] CR2: 00007f84c59ae718 CR3: 00000000445e6000 CR4: 0000000000350ef0 [ 163.714886] Call Trace: [ 163.715313] [ 163.715815] ? __pfx__copy_from_iter+0x10/0x10 [ 163.716596] ? bio_add_pc_page+0xbc/0x100 [ 163.717146] ? page_copy_sane+0xd3/0x390 [ 163.717793] copy_page_from_iter+0xe3/0x180 [ 163.718483] blk_rq_map_user_iov+0xb0c/0x1650 [ 163.719146] ? lock_is_held_type+0xdb/0x130 [ 163.719794] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 163.720566] ? __pfx_lock_release+0x10/0x10 [ 163.721183] ? __pfx___alloc_pages+0x10/0x10 [ 163.721866] ? lockdep_hardirqs_on+0x7d/0x100 [ 163.724106] ? import_single_range+0x333/0x400 [ 163.724846] blk_rq_map_user_io+0x1ee/0x220 [ 163.725446] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 163.726126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.726766] ? sg_build_indirect.isra.0+0x3b2/0x640 [ 163.727596] sg_common_write.constprop.0+0xd84/0x15e0 [ 163.728446] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 163.729227] ? _raw_spin_unlock_irqrestore+0x37/0x60 [ 163.730036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3980 comm=syz-executor.3 [ 163.730053] sg_write.part.0+0x706/0xb20 [ 163.730246] ? __pfx_sg_write.part.0+0x10/0x10 [ 163.732946] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 163.733796] ? lock_is_held_type+0xdb/0x130 [ 163.734426] ? irqentry_enter+0x2a/0x60 [ 163.735006] ? lock_is_held_type+0xdb/0x130 [ 163.735775] ? inode_security+0x105/0x140 [ 163.736403] ? avc_policy_seqno+0xd/0x70 [ 163.736934] ? selinux_file_permission+0x3a/0x510 [ 163.737686] sg_write+0x88/0xe0 [ 163.738263] vfs_write+0x358/0xe40 [ 163.738706] ? __pfx_sg_write+0x10/0x10 [ 163.739403] ? __pfx_vfs_write+0x10/0x10 [ 163.740033] ? __fget_files+0x270/0x450 [ 163.740746] ? __fget_light+0xe5/0x280 [ 163.741393] ksys_write+0x12b/0x260 [ 163.742013] ? __pfx_ksys_write+0x10/0x10 [ 163.742566] ? syscall_enter_from_user_mode+0x2b/0x50 [ 163.743244] do_syscall_64+0x3f/0x90 [ 163.743733] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 163.744296] RIP: 0033:0x7f6973593b19 [ 163.744713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 163.746066] RSP: 002b:00007f6970b09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.746876] RAX: ffffffffffffffda RBX: 00007f69736a6f60 RCX: 00007f6973593b19 [ 163.747577] audit: type=1400 audit(1669808885.925:10): avc: denied { read } for pid=3962 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 163.747596] RDX: 0000000000000125 RSI: 00000000200003c0 RDI: 0000000000000006 [ 163.747663] RBP: 00007f69735edf6d R08: 0000000000000000 R09: 0000000000000000 [ 163.751746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.752546] R13: 00007ffd00617fef R14: 00007f6970b09300 R15: 0000000000022000 [ 163.753475] [ 163.753856] irq event stamp: 10311 [ 163.754336] hardirqs last enabled at (10367): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.755306] hardirqs last disabled at (10442): [] sysvec_apic_timer_interrupt+0xf/0xc0 [ 163.756238] softirqs last enabled at (7484): [] __irq_exit_rcu+0x11b/0x180 [ 163.757006] softirqs last disabled at (7133): [] __irq_exit_rcu+0x11b/0x180 [ 163.757826] ---[ end trace 0000000000000000 ]--- 11:48:05 executing program 6: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x6dc7, 0x800}, {}, {0x1, 0x0, 0x1000}, {}], 0x4, &(0x7f0000000180)={0x0, 0x989680}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:48:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001900)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x1400, &(0x7f0000000140)=ANY=[@ANYBLOB='smackfsfloor=\'!$}&#$+,defcontext=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="7519e4641771ecce322c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xa000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xb648) readahead(r1, 0x3, 0x5) [ 163.919735] loop4: detected capacity change from 0 to 15 11:48:06 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ff6000/0x2000)=nil) shmat(r0, &(0x7f0000ff8000/0x1000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3000006, 0x810, r1, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x8b, 0x20, 0x0, 0x0, 0x4180, 0x8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x557, 0x0, @perf_config_ext={0x4, 0x8}, 0x3a00, 0x5, 0x80000000, 0x8, 0x0, 0x3, 0x1c40, 0x0, 0x8001, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="112b24722617892105ca84dd9c20923fa4e2872dd76815764ded82cec499ce8ac00aca856f56ccc5a1975adc510201fd52f0a761d887cb7f560764c62fb294490fbe369af225644d6e2ad582766d4032ff7dadc78421355df540564515e2142cd08d8e530e169216c3be8ae5ab64219b0456dbc8628b4e82409252b798f5e4f368f58ac7ac4ebd1efac1ea140ffc888bbc8a3ee46d0e0fdf96", 0x99}], 0x1, 0x8001, 0x7, 0x1b) 11:48:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2926}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r3, r2, 0x0, 0xa000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xb648) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xa6, 0x9, 0x7, 0x7, 0x0, 0x2, 0x604c4, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xabe, 0x7}, 0x200, 0x1, 0x3, 0x0, 0x3, 0x8, 0x20, 0x0, 0x6}, r1, 0x5, r4, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc, 0x81, 0x8, 0xa8, 0x0, 0x4, 0x4005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext, 0x4000, 0x7ff, 0x10001, 0x8, 0x0, 0x1a, 0x64dd, 0x0, 0x1, 0x0, 0x2}, r5, 0x6, r0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) acct(0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000480)="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") connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0xffffff81, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) 11:48:06 executing program 4: r0 = syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@nodots}]}) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') [ 164.062571] sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; [ 164.062571] program syz-executor.3 not setting count and/or reply_len properly [ 164.063176] FAT-fs (loop4): bogus number of reserved sectors [ 164.065334] FAT-fs (loop4): Can't find a valid FAT filesystem 11:48:06 executing program 6: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x6dc7, 0x800}, {}, {0x1, 0x0, 0x1000}, {}], 0x4, &(0x7f0000000180)={0x0, 0x989680}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:48:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) signalfd4(r2, &(0x7f0000000080)={[0xc41]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="002100040000000000000000", @ANYRES32=r2, @ANYBLOB="684c0000000000002e2f6367726f75700f6367726f75702e702a2a63730080896f0ae6f710561b714b14ddc583514d81d8ed5475ad3e95b52c9f0344d6b1947da2380bfd92ee213011bd7911572802182ac7dc7ea879bf0fcbf2f3f2bafb3697abc6b10dd78cc1c0f3db7c90a48a4d9ae70704d802fa0f7fd36f715696bd5ad23671e200f541dee6403793bbf5c25ef7a37dc0adc5f5d04ca2d7e713c0e2a1207a859d250b04df4f2a9ffeab6b50e24ef866d6f40244aeea7da1dc8194fd763c27faecd31e036448c507305621e227d38d26321f23b67587a175ca0f84f86d2ad978c3e479736ccaebf7030cf7307a640a9e5553"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r5, r4, 0x0, 0xa000000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x38000, 0x0) sendfile(r5, r6, 0x0, 0xb648) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x202}}, './file1\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendfile(r8, r7, 0x0, 0xa000000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffff) [ 164.174758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3980 comm=syz-executor.3 VM DIAGNOSIS: 11:48:06 Registers: info registers vcpu 0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82483d55 RDI=ffffffff87fb1ae0 RBP=ffffffff87fb1aa0 RSP=ffff88804532ef20 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001 R12=0000000000000036 R13=ffffffff87fb1aa0 R14=0000000000000010 R15=ffffffff82483d40 RIP=ffffffff82483dad RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6970b09700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe7921aab000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe7921aa9000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f84c59ae718 CR3=00000000445e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff8486fe40 RBP=ffffffff8486fe40 RSP=ffff88806cf09d48 R8 =0000000000000000 R9 =ffffffff85d06f57 R10=fffffbfff0ba0dea R11=0000000000000001 R12=ffff88800de63580 R13=ffff88800de63ee0 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff843f51d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9a5d71c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0beccf6000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0beccf4000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c729000 CR3=0000000010532000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000