Warning: Permanently added '[localhost]:39955' (ECDSA) to the list of known hosts. 2022/09/16 13:14:09 fuzzer started 2022/09/16 13:14:10 dialing manager at localhost:36051 syzkaller login: [ 44.093059] cgroup: Unknown subsys name 'net' [ 44.157131] cgroup: Unknown subsys name 'rlimit' 2022/09/16 13:14:23 syscalls: 2215 2022/09/16 13:14:23 code coverage: enabled 2022/09/16 13:14:23 comparison tracing: enabled 2022/09/16 13:14:23 extra coverage: enabled 2022/09/16 13:14:23 setuid sandbox: enabled 2022/09/16 13:14:23 namespace sandbox: enabled 2022/09/16 13:14:23 Android sandbox: enabled 2022/09/16 13:14:23 fault injection: enabled 2022/09/16 13:14:23 leak checking: enabled 2022/09/16 13:14:23 net packet injection: enabled 2022/09/16 13:14:23 net device setup: enabled 2022/09/16 13:14:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/16 13:14:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/16 13:14:23 USB emulation: enabled 2022/09/16 13:14:23 hci packet injection: enabled 2022/09/16 13:14:23 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/16 13:14:23 802.15.4 emulation: enabled 2022/09/16 13:14:23 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/16 13:14:23 fetching corpus: 50, signal 31881/35372 (executing program) 2022/09/16 13:14:23 fetching corpus: 100, signal 45714/50602 (executing program) 2022/09/16 13:14:23 fetching corpus: 150, signal 55864/62060 (executing program) 2022/09/16 13:14:23 fetching corpus: 200, signal 65193/72524 (executing program) 2022/09/16 13:14:23 fetching corpus: 250, signal 69625/78212 (executing program) 2022/09/16 13:14:23 fetching corpus: 300, signal 75132/84811 (executing program) 2022/09/16 13:14:24 fetching corpus: 350, signal 80344/91020 (executing program) 2022/09/16 13:14:24 fetching corpus: 400, signal 87014/98502 (executing program) 2022/09/16 13:14:24 fetching corpus: 450, signal 90079/102653 (executing program) 2022/09/16 13:14:24 fetching corpus: 500, signal 95679/108954 (executing program) 2022/09/16 13:14:24 fetching corpus: 550, signal 98139/112420 (executing program) 2022/09/16 13:14:24 fetching corpus: 600, signal 100559/115757 (executing program) 2022/09/16 13:14:24 fetching corpus: 650, signal 103818/119781 (executing program) 2022/09/16 13:14:24 fetching corpus: 700, signal 107984/124522 (executing program) 2022/09/16 13:14:25 fetching corpus: 750, signal 112065/129208 (executing program) 2022/09/16 13:14:25 fetching corpus: 800, signal 114709/132495 (executing program) 2022/09/16 13:14:25 fetching corpus: 850, signal 118268/136559 (executing program) 2022/09/16 13:14:25 fetching corpus: 900, signal 121105/139960 (executing program) 2022/09/16 13:14:25 fetching corpus: 950, signal 124742/143958 (executing program) 2022/09/16 13:14:25 fetching corpus: 1000, signal 126726/146615 (executing program) 2022/09/16 13:14:25 fetching corpus: 1050, signal 128636/149125 (executing program) 2022/09/16 13:14:26 fetching corpus: 1100, signal 131501/152373 (executing program) 2022/09/16 13:14:26 fetching corpus: 1150, signal 134474/155643 (executing program) 2022/09/16 13:14:26 fetching corpus: 1200, signal 137426/158890 (executing program) 2022/09/16 13:14:26 fetching corpus: 1250, signal 140702/162290 (executing program) 2022/09/16 13:14:26 fetching corpus: 1300, signal 143115/164929 (executing program) 2022/09/16 13:14:26 fetching corpus: 1350, signal 145936/167953 (executing program) 2022/09/16 13:14:27 fetching corpus: 1400, signal 147337/169787 (executing program) 2022/09/16 13:14:27 fetching corpus: 1450, signal 148756/171637 (executing program) 2022/09/16 13:14:27 fetching corpus: 1500, signal 151619/174533 (executing program) 2022/09/16 13:14:27 fetching corpus: 1550, signal 152810/176150 (executing program) 2022/09/16 13:14:27 fetching corpus: 1600, signal 154478/178111 (executing program) 2022/09/16 13:14:27 fetching corpus: 1650, signal 155929/179863 (executing program) 2022/09/16 13:14:27 fetching corpus: 1700, signal 156806/181136 (executing program) 2022/09/16 13:14:28 fetching corpus: 1750, signal 158587/183135 (executing program) 2022/09/16 13:14:28 fetching corpus: 1800, signal 160337/184993 (executing program) 2022/09/16 13:14:28 fetching corpus: 1850, signal 162194/186902 (executing program) 2022/09/16 13:14:28 fetching corpus: 1900, signal 164083/188862 (executing program) 2022/09/16 13:14:28 fetching corpus: 1950, signal 165356/190350 (executing program) 2022/09/16 13:14:28 fetching corpus: 2000, signal 166280/191589 (executing program) 2022/09/16 13:14:28 fetching corpus: 2050, signal 167829/193209 (executing program) 2022/09/16 13:14:29 fetching corpus: 2100, signal 168849/194477 (executing program) 2022/09/16 13:14:29 fetching corpus: 2150, signal 170005/195782 (executing program) 2022/09/16 13:14:29 fetching corpus: 2200, signal 171253/197111 (executing program) 2022/09/16 13:14:29 fetching corpus: 2250, signal 172467/198441 (executing program) 2022/09/16 13:14:29 fetching corpus: 2300, signal 173586/199663 (executing program) 2022/09/16 13:14:29 fetching corpus: 2350, signal 174305/200653 (executing program) 2022/09/16 13:14:29 fetching corpus: 2400, signal 175395/201823 (executing program) 2022/09/16 13:14:29 fetching corpus: 2450, signal 176563/203064 (executing program) 2022/09/16 13:14:30 fetching corpus: 2500, signal 177451/204061 (executing program) 2022/09/16 13:14:30 fetching corpus: 2550, signal 178433/205174 (executing program) 2022/09/16 13:14:30 fetching corpus: 2600, signal 180344/206728 (executing program) 2022/09/16 13:14:30 fetching corpus: 2650, signal 181345/207794 (executing program) 2022/09/16 13:14:30 fetching corpus: 2700, signal 182691/208986 (executing program) 2022/09/16 13:14:30 fetching corpus: 2750, signal 183742/210001 (executing program) 2022/09/16 13:14:30 fetching corpus: 2800, signal 184531/210889 (executing program) 2022/09/16 13:14:31 fetching corpus: 2850, signal 185707/212027 (executing program) 2022/09/16 13:14:31 fetching corpus: 2900, signal 186724/213006 (executing program) 2022/09/16 13:14:31 fetching corpus: 2950, signal 187719/213938 (executing program) 2022/09/16 13:14:31 fetching corpus: 3000, signal 188337/214755 (executing program) 2022/09/16 13:14:31 fetching corpus: 3050, signal 189494/215714 (executing program) 2022/09/16 13:14:31 fetching corpus: 3100, signal 190139/216429 (executing program) 2022/09/16 13:14:31 fetching corpus: 3150, signal 190828/217172 (executing program) 2022/09/16 13:14:32 fetching corpus: 3200, signal 192165/218238 (executing program) 2022/09/16 13:14:32 fetching corpus: 3250, signal 193319/219133 (executing program) 2022/09/16 13:14:32 fetching corpus: 3300, signal 194170/219878 (executing program) 2022/09/16 13:14:32 fetching corpus: 3350, signal 195234/220721 (executing program) 2022/09/16 13:14:32 fetching corpus: 3400, signal 195937/221419 (executing program) 2022/09/16 13:14:32 fetching corpus: 3450, signal 197132/222318 (executing program) 2022/09/16 13:14:32 fetching corpus: 3500, signal 198083/223075 (executing program) 2022/09/16 13:14:33 fetching corpus: 3550, signal 198964/223823 (executing program) 2022/09/16 13:14:33 fetching corpus: 3600, signal 200116/224535 (executing program) 2022/09/16 13:14:33 fetching corpus: 3650, signal 201097/225219 (executing program) 2022/09/16 13:14:33 fetching corpus: 3700, signal 201830/225824 (executing program) 2022/09/16 13:14:33 fetching corpus: 3750, signal 202741/226463 (executing program) 2022/09/16 13:14:33 fetching corpus: 3800, signal 203654/227141 (executing program) 2022/09/16 13:14:34 fetching corpus: 3850, signal 204842/227851 (executing program) 2022/09/16 13:14:34 fetching corpus: 3900, signal 205548/228437 (executing program) 2022/09/16 13:14:34 fetching corpus: 3950, signal 206488/229023 (executing program) 2022/09/16 13:14:34 fetching corpus: 4000, signal 207231/229519 (executing program) 2022/09/16 13:14:34 fetching corpus: 4050, signal 208914/230279 (executing program) 2022/09/16 13:14:34 fetching corpus: 4100, signal 209586/230747 (executing program) 2022/09/16 13:14:34 fetching corpus: 4150, signal 210271/231179 (executing program) 2022/09/16 13:14:35 fetching corpus: 4200, signal 211023/231653 (executing program) 2022/09/16 13:14:35 fetching corpus: 4250, signal 211911/232109 (executing program) 2022/09/16 13:14:35 fetching corpus: 4300, signal 212969/232635 (executing program) 2022/09/16 13:14:35 fetching corpus: 4350, signal 213791/233059 (executing program) 2022/09/16 13:14:35 fetching corpus: 4400, signal 214466/233431 (executing program) 2022/09/16 13:14:35 fetching corpus: 4450, signal 215148/233810 (executing program) 2022/09/16 13:14:35 fetching corpus: 4500, signal 216001/234213 (executing program) 2022/09/16 13:14:36 fetching corpus: 4550, signal 216488/234515 (executing program) 2022/09/16 13:14:36 fetching corpus: 4600, signal 217195/234883 (executing program) 2022/09/16 13:14:36 fetching corpus: 4650, signal 217796/235210 (executing program) 2022/09/16 13:14:36 fetching corpus: 4700, signal 218226/235471 (executing program) 2022/09/16 13:14:36 fetching corpus: 4750, signal 218941/235794 (executing program) 2022/09/16 13:14:36 fetching corpus: 4800, signal 219558/236071 (executing program) 2022/09/16 13:14:36 fetching corpus: 4850, signal 219952/236360 (executing program) 2022/09/16 13:14:36 fetching corpus: 4900, signal 220466/236619 (executing program) 2022/09/16 13:14:37 fetching corpus: 4950, signal 220937/236850 (executing program) 2022/09/16 13:14:37 fetching corpus: 5000, signal 221664/237138 (executing program) 2022/09/16 13:14:37 fetching corpus: 5050, signal 222611/237451 (executing program) 2022/09/16 13:14:37 fetching corpus: 5100, signal 223296/237688 (executing program) 2022/09/16 13:14:37 fetching corpus: 5150, signal 223979/238031 (executing program) 2022/09/16 13:14:37 fetching corpus: 5200, signal 224587/238255 (executing program) 2022/09/16 13:14:37 fetching corpus: 5250, signal 225441/238470 (executing program) 2022/09/16 13:14:37 fetching corpus: 5300, signal 226333/238695 (executing program) 2022/09/16 13:14:38 fetching corpus: 5350, signal 226836/238849 (executing program) 2022/09/16 13:14:38 fetching corpus: 5400, signal 227535/239047 (executing program) 2022/09/16 13:14:38 fetching corpus: 5450, signal 228206/239289 (executing program) 2022/09/16 13:14:38 fetching corpus: 5500, signal 228731/239406 (executing program) 2022/09/16 13:14:38 fetching corpus: 5550, signal 229436/239542 (executing program) 2022/09/16 13:14:38 fetching corpus: 5600, signal 229803/239650 (executing program) 2022/09/16 13:14:38 fetching corpus: 5650, signal 230430/239759 (executing program) 2022/09/16 13:14:39 fetching corpus: 5700, signal 230922/239867 (executing program) 2022/09/16 13:14:39 fetching corpus: 5750, signal 231275/239954 (executing program) 2022/09/16 13:14:39 fetching corpus: 5800, signal 232113/240200 (executing program) 2022/09/16 13:14:39 fetching corpus: 5850, signal 232534/240202 (executing program) 2022/09/16 13:14:39 fetching corpus: 5900, signal 232773/240212 (executing program) 2022/09/16 13:14:39 fetching corpus: 5929, signal 233201/240212 (executing program) 2022/09/16 13:14:39 fetching corpus: 5929, signal 233201/240212 (executing program) 2022/09/16 13:14:42 starting 8 fuzzer processes 13:14:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="232109c1"], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:14:42 executing program 1: kexec_load(0x0, 0x0, 0x0, 0x160000) 13:14:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) [ 76.050041] audit: type=1400 audit(1663334082.225:6): avc: denied { execmem } for pid=288 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:14:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 13:14:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='personality\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13:14:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='J', 0x1}], 0x0, &(0x7f0000000300)={[], [{@dont_measure}, {@context={'context', 0x3d, 'unconfined_u'}}]}) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:14:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029561eadf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010007deb70325132510000eb7032510300000000002e2e20202020202020202010007deb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007deb70325132510000eb70325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00)) 13:14:42 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) [ 77.371926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.374416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.376098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.379575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.383278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.384974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.392199] Bluetooth: hci0: HCI_REQ-0x0c1a [ 77.441494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.445591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.449650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.451020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.453062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.455795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.456828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.457383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.459966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.463506] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.467434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.469109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.470515] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.472602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.485730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.488249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.491175] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.492642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.496193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 77.497778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.498971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.500157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.502013] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 77.503623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.508562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.510558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 77.511862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 77.512083] Bluetooth: hci4: HCI_REQ-0x0c1a [ 77.513035] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 77.514720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 77.516015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.516817] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.523462] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.524559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.525244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 77.527864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 77.530860] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 77.536408] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 77.536452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.538572] Bluetooth: hci2: HCI_REQ-0x0c1a [ 77.538920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 77.541109] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.542155] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.542192] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 77.545959] Bluetooth: hci7: HCI_REQ-0x0c1a [ 77.546992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.562465] Bluetooth: hci6: HCI_REQ-0x0c1a [ 77.566243] Bluetooth: hci5: HCI_REQ-0x0c1a [ 77.584817] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.456684] Bluetooth: hci0: command 0x0409 tx timeout [ 79.523366] Bluetooth: hci4: command 0x0409 tx timeout [ 79.584351] Bluetooth: hci7: command 0x0409 tx timeout [ 79.584520] Bluetooth: hci5: command 0x0409 tx timeout [ 79.585613] Bluetooth: hci2: command 0x0409 tx timeout [ 79.586195] Bluetooth: hci6: command 0x0409 tx timeout [ 79.586809] Bluetooth: hci3: command 0x0409 tx timeout [ 79.648370] Bluetooth: hci1: command 0x0409 tx timeout [ 81.504459] Bluetooth: hci0: command 0x041b tx timeout [ 81.568358] Bluetooth: hci4: command 0x041b tx timeout [ 81.632429] Bluetooth: hci3: command 0x041b tx timeout [ 81.633256] Bluetooth: hci6: command 0x041b tx timeout [ 81.634221] Bluetooth: hci2: command 0x041b tx timeout [ 81.634689] Bluetooth: hci5: command 0x041b tx timeout [ 81.635133] Bluetooth: hci7: command 0x041b tx timeout [ 81.696328] Bluetooth: hci1: command 0x041b tx timeout [ 83.552417] Bluetooth: hci0: command 0x040f tx timeout [ 83.616401] Bluetooth: hci4: command 0x040f tx timeout [ 83.680387] Bluetooth: hci7: command 0x040f tx timeout [ 83.680886] Bluetooth: hci5: command 0x040f tx timeout [ 83.682070] Bluetooth: hci2: command 0x040f tx timeout [ 83.682550] Bluetooth: hci6: command 0x040f tx timeout [ 83.682987] Bluetooth: hci3: command 0x040f tx timeout [ 83.744409] Bluetooth: hci1: command 0x040f tx timeout [ 85.600381] Bluetooth: hci0: command 0x0419 tx timeout [ 85.664381] Bluetooth: hci4: command 0x0419 tx timeout [ 85.728472] Bluetooth: hci3: command 0x0419 tx timeout [ 85.729275] Bluetooth: hci6: command 0x0419 tx timeout [ 85.731229] Bluetooth: hci2: command 0x0419 tx timeout [ 85.732846] Bluetooth: hci5: command 0x0419 tx timeout [ 85.733675] Bluetooth: hci7: command 0x0419 tx timeout [ 85.792447] Bluetooth: hci1: command 0x0419 tx timeout [ 131.232543] device syz_tun entered promiscuous mode [ 131.243641] device syz_tun left promiscuous mode 13:15:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='personality\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) [ 131.399686] device syz_tun entered promiscuous mode [ 131.410003] device syz_tun left promiscuous mode 13:15:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='personality\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) [ 131.517672] device syz_tun entered promiscuous mode [ 131.530120] device syz_tun left promiscuous mode 13:15:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='personality\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) [ 131.634799] device syz_tun entered promiscuous mode [ 131.653562] device syz_tun left promiscuous mode 13:15:37 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='((\\{^!)\x00') [ 131.777728] audit: type=1400 audit(1663334137.953:7): avc: denied { open } for pid=3788 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.779625] audit: type=1400 audit(1663334137.953:8): avc: denied { kernel } for pid=3788 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.794411] ------------[ cut here ]------------ [ 131.795114] WARNING: CPU: 0 PID: 3790 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 131.795999] Modules linked in: [ 131.796285] CPU: 0 PID: 3790 Comm: modprobe Not tainted 6.0.0-rc5-next-20220916 #1 [ 131.796932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.798192] RIP: 0010:event_filter_match+0x422/0x660 [ 131.799056] Code: 00 00 00 e9 7c fc ff ff e8 4b 15 f1 ff 65 8b 2d c0 73 ad 7e 31 ff 89 ee e8 eb 11 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 15 f1 ff <0f> 0b eb 9f e8 05 92 23 00 e9 17 fc ff ff e8 1b 15 f1 ff 48 8d 7b [ 131.801161] RSP: 0018:ffff88806ce095c8 EFLAGS: 00010046 [ 131.801658] RAX: 0000000000000000 RBX: ffff888040d00000 RCX: 0000000000000100 [ 131.802374] RDX: ffff888014ed5040 RSI: ffffffff81550212 RDI: 0000000000000005 [ 131.803090] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 131.803801] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888040d00220 [ 131.804517] R13: 0000000000000000 R14: ffff888040d000a8 R15: ffff888040d00220 [ 131.805223] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 131.806020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.806591] CR2: 000056117f1b2080 CR3: 000000003fd4e000 CR4: 0000000000350ef0 [ 131.807300] Call Trace: [ 131.807564] [ 131.807792] merge_sched_in+0x107/0x1110 [ 131.808219] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 131.808818] ? lock_chain_count+0x20/0x20 [ 131.809252] ? merge_sched_in+0x1110/0x1110 [ 131.809690] ? lock_is_held_type+0xd7/0x130 [ 131.810163] ctx_sched_in+0x2e6/0x770 [ 131.810554] ? lock_acquire+0x1b2/0x530 [ 131.810965] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 131.811585] ? lock_is_held_type+0xd7/0x130 [ 131.812032] perf_event_sched_in+0x75/0x80 [ 131.812464] ctx_resched+0x1ce/0x390 [ 131.812854] __perf_install_in_context+0x285/0x9c0 [ 131.813346] ? ctx_resched+0x390/0x390 [ 131.813748] remote_function+0x125/0x1b0 [ 131.814143] __flush_smp_call_function_queue+0x1df/0x5a0 [ 131.814694] ? perf_duration_warn+0x40/0x40 [ 131.815139] __sysvec_call_function_single+0x92/0x3a0 [ 131.815669] sysvec_call_function_single+0x3b/0xc0 [ 131.816169] asm_sysvec_call_function_single+0x16/0x20 [ 131.816697] RIP: 0010:memset+0x2/0x50 [ 131.817070] Code: 48 c1 ea 03 48 8d 3c 01 48 29 ca e9 98 4e 9b 02 0f 0b e9 a1 a2 e7 02 0f 0b e9 9a a2 e7 02 66 2e 0f 1f 84 00 00 00 00 00 41 55 <41> 89 f5 41 54 49 89 d4 ba 01 00 00 00 55 48 8b 4c 24 18 4c 89 e6 [ 131.818885] RSP: 0018:ffff88806ce09a10 EFLAGS: 00000282 [ 131.819420] RAX: ffff888014ed5040 RBX: ffff88806ce09b08 RCX: ffff88806ce09b08 [ 131.820130] RDX: 0000000000000070 RSI: 0000000000000000 RDI: ffff88806ce09a70 [ 131.820843] RBP: ffff888014ed5040 R08: 00000000000001b0 R09: ffffed1001249b2a [ 131.821550] R10: fffffbfff0b605e2 R11: 0000000000000001 R12: 0000000000000000 [ 131.822261] R13: ffff88806ce09a98 R14: ffff888014ed5040 R15: ffff88806ce09a70 [ 131.822793] __unwind_start+0x2a/0x7c0 [ 131.823091] ? kernel_text_address+0xd/0xb0 [ 131.823423] ? write_profile+0x3e0/0x3e0 [ 131.823742] arch_stack_walk+0x5f/0xf0 [ 131.824049] ? mark_lock.part.0+0xef/0x2f70 [ 131.824391] ? lock_chain_count+0x20/0x20 [ 131.824720] ? rcu_core+0x7e2/0x2080 [ 131.825007] stack_trace_save+0x8c/0xc0 [ 131.825314] ? filter_irq_stacks+0x90/0x90 [ 131.825644] ? rcu_core+0x7e2/0x2080 [ 131.825934] kasan_save_stack+0x1e/0x40 [ 131.826245] ? kasan_save_stack+0x1e/0x40 [ 131.826565] ? kasan_set_track+0x21/0x30 [ 131.826880] ? __lock_acquire+0xbad/0x5e70 [ 131.827221] ? elf_map+0x105/0x2b0 [ 131.827510] ? load_elf_binary+0x3203/0x4ef0 [ 131.827854] ? bprm_execve+0x7f5/0x1920 [ 131.828163] ? kernel_execve+0x3ea/0x500 [ 131.828482] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.828876] ? lock_is_held_type+0xd7/0x130 [ 131.829207] ? find_held_lock+0x2c/0x110 [ 131.829534] ? lock_acquire+0x1b2/0x530 [ 131.829845] ? rcu_read_unlock+0x40/0x40 [ 131.830169] kasan_set_track+0x21/0x30 [ 131.830469] kasan_save_free_info+0x2a/0x50 [ 131.830847] __kasan_slab_free+0x106/0x190 [ 131.831276] ? rcu_core+0x7e2/0x2080 [ 131.831661] kmem_cache_free+0xf7/0x610 [ 131.832065] rcu_core+0x7e2/0x2080 [ 131.832445] ? rcu_report_dead+0x540/0x540 [ 131.832884] ? lock_is_held_type+0xd7/0x130 [ 131.833333] __do_softirq+0x1c8/0x8d0 [ 131.833741] __irq_exit_rcu+0x11b/0x180 [ 131.834136] irq_exit_rcu+0x5/0x20 [ 131.834512] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 131.835015] [ 131.835244] [ 131.835475] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.836012] RIP: 0010:unwind_next_frame+0x504/0x20b0 [ 131.836498] Code: e7 07 40 38 fe 40 0f 9e c7 40 84 f6 40 0f 95 c6 40 84 f7 0f 85 5f 14 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 <0f> 85 48 14 00 00 49 0f bf 00 48 01 c8 48 89 44 24 18 41 0f b6 40 [ 131.838274] RSP: 0018:ffff888040cd7448 EFLAGS: 00000246 [ 131.838804] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888040cd74c8 [ 131.839507] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 131.840051] RBP: ffff888040cd7570 R08: ffffffff85e3c4b6 R09: ffffffff85e3c4ba [ 131.840588] R10: ffffed100819aeb0 R11: 000000000003603d R12: ffff888040cd7559 [ 131.841116] R13: ffff888040cd7578 R14: ffff888040cd7518 R15: ffffffff85e3c4bb [ 131.841668] ? unwind_next_frame+0x2b4/0x20b0 [ 131.842017] ? __unwind_start+0x58a/0x7c0 [ 131.842362] ? get_stack_info_noinstr+0x12/0xf0 [ 131.842715] __unwind_start+0x50f/0x7c0 [ 131.843014] ? __lock_acquire+0xbad/0x5e70 [ 131.843330] ? write_profile+0x3e0/0x3e0 [ 131.843638] arch_stack_walk+0x5f/0xf0 [ 131.843938] ? __unwind_start+0x58a/0x7c0 [ 131.844254] stack_trace_save+0x8c/0xc0 [ 131.844553] ? filter_irq_stacks+0x90/0x90 [ 131.844874] ? __lock_acquire+0xbad/0x5e70 [ 131.845192] kasan_save_stack+0x1e/0x40 [ 131.845509] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.845915] ? lock_is_held_type+0xd7/0x130 [ 131.846250] ? find_held_lock+0x2c/0x110 [ 131.846564] ? lock_release+0x3b2/0x750 [ 131.846864] ? rcu_read_unlock+0x9/0x60 [ 131.847162] ? lock_downgrade+0x6d0/0x6d0 [ 131.847486] ? lock_is_held_type+0xd7/0x130 [ 131.847809] kasan_set_track+0x21/0x30 [ 131.848099] __kasan_slab_alloc+0x58/0x70 [ 131.848414] kmem_cache_alloc+0x1b1/0x3e0 [ 131.848732] vm_area_alloc+0x1c/0x100 [ 131.849026] mmap_region+0x44b/0x1a00 [ 131.849323] ? rcu_read_unlock+0x40/0x40 [ 131.849629] ? do_munmap+0x100/0x100 [ 131.849914] ? security_mmap_addr+0x79/0xa0 [ 131.850246] ? get_unmapped_area+0x1e5/0x3e0 [ 131.850590] do_mmap+0x828/0xf40 [ 131.850871] vm_mmap_pgoff+0x1af/0x270 [ 131.851185] ? randomize_page+0xb0/0xb0 [ 131.851491] ? lockdep_hardirqs_on+0x79/0x100 [ 131.851842] ? exc_page_fault+0xc4/0x1a0 [ 131.852173] vm_mmap+0x95/0xc0 [ 131.852434] elf_map+0x105/0x2b0 [ 131.852708] load_elf_binary+0x3203/0x4ef0 [ 131.853061] ? elf_map+0x2b0/0x2b0 [ 131.853342] ? do_raw_read_unlock+0x3b/0x70 [ 131.853676] ? _raw_read_unlock+0x24/0x40 [ 131.854004] ? load_misc_binary+0x666/0xb40 [ 131.854366] bprm_execve+0x7f5/0x1920 [ 131.854676] ? open_exec+0x70/0x70 [ 131.854962] ? copy_strings_kernel+0x151/0x190 [ 131.855329] kernel_execve+0x3ea/0x500 [ 131.855646] call_usermodehelper_exec_async+0x2e6/0x580 [ 131.856070] ? umh_complete+0x90/0x90 [ 131.856372] ret_from_fork+0x22/0x30 [ 131.856681] [ 131.856860] irq event stamp: 1581 [ 131.857135] hardirqs last enabled at (1580): [] kasan_quarantine_put+0x8b/0x1f0 [ 131.857799] hardirqs last disabled at (1581): [] sysvec_call_function_single+0xb/0xc0 [ 131.858516] softirqs last enabled at (1302): [] __irq_exit_rcu+0x11b/0x180 [ 131.859163] softirqs last disabled at (1547): [] __irq_exit_rcu+0x11b/0x180 [ 131.859822] ---[ end trace 0000000000000000 ]--- [ 131.860225] ------------[ cut here ]------------ [ 131.860588] WARNING: CPU: 0 PID: 3790 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 131.861247] Modules linked in: [ 131.861494] CPU: 0 PID: 3790 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220916 #1 [ 131.862166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 131.863014] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 131.863391] Code: ff ff e8 78 16 ef ff 65 8b 05 ed 74 ab 7e 31 ff 89 c6 89 04 24 e8 15 13 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 55 16 ef ff <0f> 0b e9 c4 fb ff ff e8 49 16 ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 131.864765] RSP: 0018:ffff88806ce09608 EFLAGS: 00010046 [ 131.865170] RAX: 0000000000000000 RBX: ffff88806ce3d100 RCX: 0000000000000100 [ 131.865722] RDX: ffff888014ed5040 RSI: ffffffff815700eb RDI: 0000000000000005 [ 131.866267] RBP: ffff888040d00000 R08: 0000000000000005 R09: 0000000000000001 [ 131.866818] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3d100 [ 131.867321] R13: ffff88806ce00000 R14: ffff888040d000a8 R15: ffff888040d00220 [ 131.867794] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 131.868324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.868736] CR2: 000056117f1b2080 CR3: 000000003fd4e000 CR4: 0000000000350ef0 [ 131.869237] Call Trace: [ 131.869431] [ 131.869599] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 131.870018] ? lock_chain_count+0x20/0x20 [ 131.870340] ? merge_sched_in+0x1110/0x1110 [ 131.870646] ? lock_is_held_type+0xd7/0x130 [ 131.870970] ctx_sched_in+0x2e6/0x770 [ 131.871246] ? lock_acquire+0x1b2/0x530 [ 131.871539] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 131.871964] ? lock_is_held_type+0xd7/0x130 [ 131.872287] perf_event_sched_in+0x75/0x80 [ 131.872588] ctx_resched+0x1ce/0x390 [ 131.872859] __perf_install_in_context+0x285/0x9c0 [ 131.873210] ? ctx_resched+0x390/0x390 [ 131.873491] remote_function+0x125/0x1b0 [ 131.873789] __flush_smp_call_function_queue+0x1df/0x5a0 [ 131.874177] ? perf_duration_warn+0x40/0x40 [ 131.874502] __sysvec_call_function_single+0x92/0x3a0 [ 131.874873] sysvec_call_function_single+0x3b/0xc0 [ 131.875229] asm_sysvec_call_function_single+0x16/0x20 [ 131.875606] RIP: 0010:memset+0x2/0x50 [ 131.875892] Code: 48 c1 ea 03 48 8d 3c 01 48 29 ca e9 98 4e 9b 02 0f 0b e9 a1 a2 e7 02 0f 0b e9 9a a2 e7 02 66 2e 0f 1f 84 00 00 00 00 00 41 55 <41> 89 f5 41 54 49 89 d4 ba 01 00 00 00 55 48 8b 4c 24 18 4c 89 e6 [ 131.877112] RSP: 0018:ffff88806ce09a10 EFLAGS: 00000282 [ 131.877473] RAX: ffff888014ed5040 RBX: ffff88806ce09b08 RCX: ffff88806ce09b08 [ 131.877958] RDX: 0000000000000070 RSI: 0000000000000000 RDI: ffff88806ce09a70 [ 131.878445] RBP: ffff888014ed5040 R08: 00000000000001b0 R09: ffffed1001249b2a [ 131.878911] R10: fffffbfff0b605e2 R11: 0000000000000001 R12: 0000000000000000 [ 131.879379] R13: ffff88806ce09a98 R14: ffff888014ed5040 R15: ffff88806ce09a70 [ 131.879867] __unwind_start+0x2a/0x7c0 [ 131.880138] ? kernel_text_address+0xd/0xb0 [ 131.880432] ? write_profile+0x3e0/0x3e0 [ 131.880716] arch_stack_walk+0x5f/0xf0 [ 131.880992] ? mark_lock.part.0+0xef/0x2f70 [ 131.881296] ? lock_chain_count+0x20/0x20 [ 131.881591] ? rcu_core+0x7e2/0x2080 [ 131.881856] stack_trace_save+0x8c/0xc0 [ 131.882152] ? filter_irq_stacks+0x90/0x90 [ 131.882451] ? rcu_core+0x7e2/0x2080 [ 131.882712] kasan_save_stack+0x1e/0x40 [ 131.882987] ? kasan_save_stack+0x1e/0x40 [ 131.883272] ? kasan_set_track+0x21/0x30 [ 131.883557] ? __lock_acquire+0xbad/0x5e70 [ 131.883858] ? elf_map+0x105/0x2b0 [ 131.884116] ? load_elf_binary+0x3203/0x4ef0 [ 131.884426] ? bprm_execve+0x7f5/0x1920 [ 131.884703] ? kernel_execve+0x3ea/0x500 [ 131.884985] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.885343] ? lock_is_held_type+0xd7/0x130 [ 131.885641] ? find_held_lock+0x2c/0x110 [ 131.885935] ? lock_acquire+0x1b2/0x530 [ 131.886219] ? rcu_read_unlock+0x40/0x40 [ 131.886505] kasan_set_track+0x21/0x30 [ 131.886775] kasan_save_free_info+0x2a/0x50 [ 131.887075] __kasan_slab_free+0x106/0x190 [ 131.887369] ? rcu_core+0x7e2/0x2080 [ 131.887632] kmem_cache_free+0xf7/0x610 [ 131.887911] rcu_core+0x7e2/0x2080 [ 131.888170] ? rcu_report_dead+0x540/0x540 [ 131.888465] ? lock_is_held_type+0xd7/0x130 [ 131.888768] __do_softirq+0x1c8/0x8d0 [ 131.889036] __irq_exit_rcu+0x11b/0x180 [ 131.889315] irq_exit_rcu+0x5/0x20 [ 131.889565] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 131.889902] [ 131.890069] [ 131.890227] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.890586] RIP: 0010:unwind_next_frame+0x504/0x20b0 [ 131.890930] Code: e7 07 40 38 fe 40 0f 9e c7 40 84 f6 40 0f 95 c6 40 84 f7 0f 85 5f 14 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 <0f> 85 48 14 00 00 49 0f bf 00 48 01 c8 48 89 44 24 18 41 0f b6 40 [ 131.892172] RSP: 0018:ffff888040cd7448 EFLAGS: 00000246 [ 131.892569] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888040cd74c8 [ 131.893092] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 131.893642] RBP: ffff888040cd7570 R08: ffffffff85e3c4b6 R09: ffffffff85e3c4ba [ 131.894187] R10: ffffed100819aeb0 R11: 000000000003603d R12: ffff888040cd7559 [ 131.894740] R13: ffff888040cd7578 R14: ffff888040cd7518 R15: ffffffff85e3c4bb [ 131.895296] ? unwind_next_frame+0x2b4/0x20b0 [ 131.895653] ? __unwind_start+0x58a/0x7c0 [ 131.895966] ? get_stack_info_noinstr+0x12/0xf0 [ 131.896327] __unwind_start+0x50f/0x7c0 [ 131.896628] ? __lock_acquire+0xbad/0x5e70 [ 131.896951] ? write_profile+0x3e0/0x3e0 [ 131.897367] arch_stack_walk+0x5f/0xf0 [ 131.897777] ? __unwind_start+0x58a/0x7c0 [ 131.898197] stack_trace_save+0x8c/0xc0 [ 131.898609] ? filter_irq_stacks+0x90/0x90 [ 131.899021] ? __lock_acquire+0xbad/0x5e70 [ 131.899444] kasan_save_stack+0x1e/0x40 [ 131.899837] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 131.900370] ? lock_is_held_type+0xd7/0x130 [ 131.900784] ? find_held_lock+0x2c/0x110 [ 131.901192] ? lock_release+0x3b2/0x750 [ 131.901574] ? rcu_read_unlock+0x9/0x60 [ 131.901966] ? lock_downgrade+0x6d0/0x6d0 [ 131.902403] ? lock_is_held_type+0xd7/0x130 [ 131.902846] kasan_set_track+0x21/0x30 [ 131.903217] __kasan_slab_alloc+0x58/0x70 [ 131.903627] kmem_cache_alloc+0x1b1/0x3e0 [ 131.904024] vm_area_alloc+0x1c/0x100 [ 131.904406] mmap_region+0x44b/0x1a00 [ 131.904779] ? rcu_read_unlock+0x40/0x40 [ 131.905180] ? do_munmap+0x100/0x100 [ 131.905543] ? security_mmap_addr+0x79/0xa0 [ 131.905964] ? get_unmapped_area+0x1e5/0x3e0 [ 131.906428] do_mmap+0x828/0xf40 [ 131.906787] vm_mmap_pgoff+0x1af/0x270 [ 131.907190] ? randomize_page+0xb0/0xb0 [ 131.907587] ? lockdep_hardirqs_on+0x79/0x100 [ 131.908018] ? exc_page_fault+0xc4/0x1a0 [ 131.908443] vm_mmap+0x95/0xc0 [ 131.908757] elf_map+0x105/0x2b0 [ 131.909106] load_elf_binary+0x3203/0x4ef0 [ 131.909536] ? elf_map+0x2b0/0x2b0 [ 131.909884] ? do_raw_read_unlock+0x3b/0x70 [ 131.910321] ? _raw_read_unlock+0x24/0x40 [ 131.910747] ? load_misc_binary+0x666/0xb40 [ 131.911170] bprm_execve+0x7f5/0x1920 [ 131.911569] ? open_exec+0x70/0x70 [ 131.911916] ? copy_strings_kernel+0x151/0x190 [ 131.912383] kernel_execve+0x3ea/0x500 [ 131.912763] call_usermodehelper_exec_async+0x2e6/0x580 [ 131.913283] ? umh_complete+0x90/0x90 [ 131.913648] ret_from_fork+0x22/0x30 [ 131.914030] [ 131.914267] irq event stamp: 1581 [ 131.914588] hardirqs last enabled at (1580): [] kasan_quarantine_put+0x8b/0x1f0 [ 131.915462] hardirqs last disabled at (1581): [] sysvec_call_function_single+0xb/0xc0 [ 131.916400] softirqs last enabled at (1302): [] __irq_exit_rcu+0x11b/0x180 [ 131.917207] softirqs last disabled at (1547): [] __irq_exit_rcu+0x11b/0x180 [ 131.918062] ---[ end trace 0000000000000000 ]--- [ 132.013983] audit: type=1400 audit(1663334138.189:9): avc: denied { write } for pid=3788 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:15:38 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='((\\{^!)\x00') [ 132.401358] ------------[ cut here ]------------ [ 132.401732] WARNING: CPU: 0 PID: 3821 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 [ 132.402340] Modules linked in: [ 132.402564] CPU: 0 PID: 3821 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220916 #1 [ 132.403154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.403907] RIP: 0010:perf_group_detach+0x99e/0x12f0 [ 132.404301] Code: 85 d5 f8 ff ff e8 22 57 ee ff 65 44 8b 25 96 b5 aa 7e 31 ff 44 89 e6 e8 c0 53 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 02 57 ee ff <0f> 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 [ 132.405642] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 132.406037] RAX: 0000000000010002 RBX: ffff888040d005c8 RCX: 0000000000000000 [ 132.406575] RDX: ffff88801ecb1ac0 RSI: ffffffff8157c03e RDI: 0000000000000005 [ 132.407104] RBP: ffff888040d005c8 R08: 0000000000000005 R09: 0000000000000001 [ 132.407633] R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 [ 132.408166] R13: ffff888040d00658 R14: ffff88806ce3d100 R15: ffff888040d005c8 [ 132.408696] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 132.409296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.409736] CR2: 00007fcdbd62c368 CR3: 000000003ff58000 CR4: 0000000000350ef0 [ 132.410298] Call Trace: [ 132.410496] [ 132.410669] ? perf_event_idx_default+0x10/0x10 [ 132.411029] ? event_sched_out+0x71c/0xcd0 [ 132.411355] __perf_remove_from_context+0x71e/0xb20 [ 132.411748] event_function+0x297/0x3d0 [ 132.412058] ? perf_output_read+0xf80/0xf80 [ 132.412389] remote_function+0x125/0x1b0 [ 132.412704] __flush_smp_call_function_queue+0x1df/0x5a0 [ 132.413116] ? perf_duration_warn+0x40/0x40 [ 132.413446] __sysvec_call_function_single+0x92/0x3a0 [ 132.413842] sysvec_call_function_single+0x89/0xc0 [ 132.414237] [ 132.414412] [ 132.414592] asm_sysvec_call_function_single+0x16/0x20 [ 132.414995] RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60 [ 132.415421] Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 7a fe 03 fd 48 89 ef e8 d2 73 04 fd 80 e7 02 74 06 e8 78 b6 26 fd fb bf 01 00 00 00 1d ff f9 fc 65 8b 05 46 35 dc 7b 85 c0 74 07 5b 5d e9 bb 01 3a [ 132.416779] RSP: 0018:ffff88801edaf850 EFLAGS: 00000202 [ 132.417175] RAX: 00000000000005e3 RBX: 0000000000000202 RCX: ffffffff812999ff [ 132.417717] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 132.418264] RBP: ffff88800d1c4360 R08: 0000000000000001 R09: ffffffff86ccb7ef [ 132.418800] R10: fffffbfff0d996fd R11: 0000000000000001 R12: ffff88800d1c43f0 [ 132.419324] R13: ffff88800d1c43a0 R14: ffff888007c75000 R15: ffff888019d01200 [ 132.419857] ? mark_lock.part.0+0xef/0x2f70 [ 132.420198] __delete_object+0xb3/0x100 [ 132.420509] kmem_cache_free_bulk.part.0+0x305/0x770 [ 132.420893] ? mas_destroy+0x380/0x560 [ 132.421208] mas_destroy+0x380/0x560 [ 132.421507] mas_store_prealloc+0xf0/0x160 [ 132.421828] ? mas_destroy+0x560/0x560 [ 132.422165] ? rcu_read_lock_sched_held+0x3e/0x80 [ 132.422549] vma_link+0x226/0x290 [ 132.422818] ? vma_mas_store+0x300/0x300 [ 132.423143] ? lock_is_held_type+0xd7/0x130 [ 132.423476] insert_vm_struct+0x1e1/0x400 [ 132.423797] ? exit_mmap+0x680/0x680 [ 132.424081] ? rcu_read_lock_sched_held+0x3e/0x80 [ 132.424457] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 132.424807] ? kmem_cache_alloc+0x200/0x3e0 [ 132.425149] __install_special_mapping+0x160/0x3a0 [ 132.425529] map_vdso+0x17b/0x390 [ 132.425803] load_elf_binary+0x2077/0x4ef0 [ 132.426158] ? elf_map+0x2b0/0x2b0 [ 132.426444] ? do_raw_read_unlock+0x3b/0x70 [ 132.426781] ? _raw_read_unlock+0x24/0x40 [ 132.427122] ? load_misc_binary+0x666/0xb40 [ 132.427480] bprm_execve+0x7f5/0x1920 [ 132.427781] ? open_exec+0x70/0x70 [ 132.428068] ? copy_strings_kernel+0x151/0x190 [ 132.428419] kernel_execve+0x3ea/0x500 [ 132.428725] call_usermodehelper_exec_async+0x2e6/0x580 [ 132.429123] ? umh_complete+0x90/0x90 [ 132.429423] ret_from_fork+0x22/0x30 [ 132.429723] [ 132.429902] irq event stamp: 1510 [ 132.430180] hardirqs last enabled at (1509): [] asm_sysvec_call_function_single+0x16/0x20 [ 132.430876] hardirqs last disabled at (1510): [] sysvec_call_function_single+0xb/0xc0 [ 132.431571] softirqs last enabled at (802): [] __irq_exit_rcu+0x11b/0x180 [ 132.432206] softirqs last disabled at (797): [] __irq_exit_rcu+0x11b/0x180 [ 132.432833] ---[ end trace 0000000000000000 ]--- [ 132.433214] ------------[ cut here ]------------ [ 132.433566] WARNING: CPU: 0 PID: 3821 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 [ 132.434210] Modules linked in: [ 132.434451] CPU: 0 PID: 3821 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220916 #1 [ 132.435111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.435927] RIP: 0010:perf_group_detach+0x9c7/0x12f0 [ 132.436302] Code: ff 0f 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 de e8 96 53 ee ff 85 db 0f 84 86 04 00 00 e8 d9 56 ee ff <0f> 0b e9 0e fa ff ff e8 cd 56 ee ff 48 8b 7c 24 20 48 81 c7 f8 00 [ 132.437639] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 132.438036] RAX: 0000000000010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.438601] RDX: ffff88801ecb1ac0 RSI: ffffffff8157c067 RDI: 0000000000000005 [ 132.439140] RBP: ffff888040d005c8 R08: 0000000000000005 R09: 0000000000000001 [ 132.439676] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888040d005c8 [ 132.440209] R13: ffff888040d005c8 R14: ffff88806ce3d100 R15: ffff888040d005c8 [ 132.440749] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 132.441337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.441767] CR2: 00007fcdbd62c368 CR3: 000000003ff58000 CR4: 0000000000350ef0 [ 132.442315] Call Trace: [ 132.442515] [ 132.442741] ? perf_event_idx_default+0x10/0x10 [ 132.443221] ? event_sched_out+0x71c/0xcd0 [ 132.443554] __perf_remove_from_context+0x71e/0xb20 [ 132.443939] event_function+0x297/0x3d0 [ 132.444254] ? perf_output_read+0xf80/0xf80 [ 132.444590] remote_function+0x125/0x1b0 [ 132.444911] __flush_smp_call_function_queue+0x1df/0x5a0 [ 132.445329] ? perf_duration_warn+0x40/0x40 [ 132.445670] __sysvec_call_function_single+0x92/0x3a0 [ 132.446090] sysvec_call_function_single+0x89/0xc0 [ 132.446472] [ 132.446652] [ 132.446836] asm_sysvec_call_function_single+0x16/0x20 [ 132.447246] RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60 [ 132.447675] Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 7a fe 03 fd 48 89 ef e8 d2 73 04 fd 80 e7 02 74 06 e8 78 b6 26 fd fb bf 01 00 00 00 1d ff f9 fc 65 8b 05 46 35 dc 7b 85 c0 74 07 5b 5d e9 bb 01 3a [ 132.449020] RSP: 0018:ffff88801edaf850 EFLAGS: 00000202 [ 132.449422] RAX: 00000000000005e3 RBX: 0000000000000202 RCX: ffffffff812999ff [ 132.449955] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 132.450498] RBP: ffff88800d1c4360 R08: 0000000000000001 R09: ffffffff86ccb7ef [ 132.451052] R10: fffffbfff0d996fd R11: 0000000000000001 R12: ffff88800d1c43f0 [ 132.451596] R13: ffff88800d1c43a0 R14: ffff888007c75000 R15: ffff888019d01200 [ 132.452128] ? mark_lock.part.0+0xef/0x2f70 [ 132.452466] __delete_object+0xb3/0x100 [ 132.452768] kmem_cache_free_bulk.part.0+0x305/0x770 [ 132.453161] ? mas_destroy+0x380/0x560 [ 132.453462] mas_destroy+0x380/0x560 [ 132.453762] mas_store_prealloc+0xf0/0x160 [ 132.454092] ? mas_destroy+0x560/0x560 [ 132.454400] ? rcu_read_lock_sched_held+0x3e/0x80 [ 132.454785] vma_link+0x226/0x290 [ 132.455053] ? vma_mas_store+0x300/0x300 [ 132.455371] ? lock_is_held_type+0xd7/0x130 [ 132.455697] insert_vm_struct+0x1e1/0x400 [ 132.456009] ? exit_mmap+0x680/0x680 [ 132.456298] ? rcu_read_lock_sched_held+0x3e/0x80 [ 132.456666] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 132.457021] ? kmem_cache_alloc+0x200/0x3e0 [ 132.457354] __install_special_mapping+0x160/0x3a0 [ 132.457737] map_vdso+0x17b/0x390 [ 132.458018] load_elf_binary+0x2077/0x4ef0 [ 132.458385] ? elf_map+0x2b0/0x2b0 [ 132.458661] ? do_raw_read_unlock+0x3b/0x70 [ 132.458988] ? _raw_read_unlock+0x24/0x40 [ 132.459308] ? load_misc_binary+0x666/0xb40 [ 132.459647] bprm_execve+0x7f5/0x1920 [ 132.459952] ? open_exec+0x70/0x70 [ 132.460230] ? copy_strings_kernel+0x151/0x190 [ 132.460587] kernel_execve+0x3ea/0x500 [ 132.460889] call_usermodehelper_exec_async+0x2e6/0x580 [ 132.461292] ? umh_complete+0x90/0x90 [ 132.461582] ret_from_fork+0x22/0x30 [ 132.461885] [ 132.462071] irq event stamp: 1510 [ 132.462333] hardirqs last enabled at (1509): [] asm_sysvec_call_function_single+0x16/0x20 [ 132.463059] hardirqs last disabled at (1510): [] sysvec_call_function_single+0xb/0xc0 [ 132.463750] softirqs last enabled at (802): [] __irq_exit_rcu+0x11b/0x180 [ 132.464378] softirqs last disabled at (797): [] __irq_exit_rcu+0x11b/0x180 [ 132.465009] ---[ end trace 0000000000000000 ]--- [ 132.465390] ------------[ cut here ]------------ [ 132.465735] WARNING: CPU: 0 PID: 3821 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 [ 132.466544] Modules linked in: [ 132.466816] CPU: 0 PID: 3821 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220916 #1 [ 132.467403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.468134] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 [ 132.468541] Code: 5e 41 5f e9 5d c5 f0 ff e8 58 c5 f0 ff 65 8b 1d cd 23 ad 7e 31 ff 89 de e8 f8 c1 f0 ff 85 db 0f 84 d3 02 00 00 e8 3b c5 f0 ff <0f> 0b eb 97 e8 32 c5 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff [ 132.469718] RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046 [ 132.470081] RAX: 0000000000010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.470548] RDX: ffff88801ecb1ac0 RSI: ffffffff81555205 RDI: 0000000000000005 [ 132.471014] RBP: ffff888040d005c8 R08: 0000000000000005 R09: 0000000000000001 [ 132.471483] R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 [ 132.471948] R13: ffff888040d00670 R14: 0000000000000001 R15: 0000000000000001 [ 132.472414] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 132.472937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.473320] CR2: 00007fcdbd62c368 CR3: 000000003ff58000 CR4: 0000000000350ef0 [ 132.473823] Call Trace: [ 132.474023] [ 132.474208] ? lock_is_held_type+0xd7/0x130 [ 132.474543] ? perf_event_update_time+0x285/0x380 [ 132.474910] list_del_event+0x524/0x860 [ 132.475221] __perf_remove_from_context+0xd2/0xb20 [ 132.475595] event_function+0x297/0x3d0 [ 132.475898] ? perf_output_read+0xf80/0xf80 [ 132.476235] remote_function+0x125/0x1b0 [ 132.476549] __flush_smp_call_function_queue+0x1df/0x5a0 [ 132.476957] ? perf_duration_warn+0x40/0x40 [ 132.477291] __sysvec_call_function_single+0x92/0x3a0 [ 132.477688] sysvec_call_function_single+0x89/0xc0 [ 132.478069] [ 132.478244] [ 132.478423] asm_sysvec_call_function_single+0x16/0x20 [ 132.478855] RIP: 0010:_raw_spin_unlock_irqrestore+0x2e/0x60 [ 132.479286] Code: 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 7a fe 03 fd 48 89 ef e8 d2 73 04 fd 80 e7 02 74 06 e8 78 b6 26 fd fb bf 01 00 00 00 1d ff f9 fc 65 8b 05 46 35 dc 7b 85 c0 74 07 5b 5d e9 bb 01 3a [ 132.480627] RSP: 0018:ffff88801edaf850 EFLAGS: 00000202 [ 132.481037] RAX: 00000000000005e3 RBX: 0000000000000202 RCX: ffffffff812999ff [ 132.481589] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 132.482126] RBP: ffff88800d1c4360 R08: 0000000000000001 R09: ffffffff86ccb7ef [ 132.482660] R10: fffffbfff0d996fd R11: 0000000000000001 R12: ffff88800d1c43f0 [ 132.483190] R13: ffff88800d1c43a0 R14: ffff888007c75000 R15: ffff888019d01200 [ 132.483752] ? mark_lock.part.0+0xef/0x2f70 [ 132.484102] __delete_object+0xb3/0x100 [ 132.484414] kmem_cache_free_bulk.part.0+0x305/0x770 [ 132.484822] ? mas_destroy+0x380/0x560 [ 132.485137] mas_destroy+0x380/0x560 [ 132.485446] mas_store_prealloc+0xf0/0x160 [ 132.485785] ? mas_destroy+0x560/0x560 [ 132.486117] ? rcu_read_lock_sched_held+0x3e/0x80 [ 132.486507] vma_link+0x226/0x290 [ 132.486789] ? vma_mas_store+0x300/0x300 [ 132.487122] ? lock_is_held_type+0xd7/0x130 [ 132.487472] insert_vm_struct+0x1e1/0x400 [ 132.487818] ? exit_mmap+0x680/0x680 [ 132.488114] ? rcu_read_lock_sched_held+0x3e/0x80 [ 132.488493] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 132.488863] ? kmem_cache_alloc+0x200/0x3e0 [ 132.489226] __install_special_mapping+0x160/0x3a0 [ 132.489613] map_vdso+0x17b/0x390 [ 132.489897] load_elf_binary+0x2077/0x4ef0 [ 132.490266] ? elf_map+0x2b0/0x2b0 [ 132.490563] ? do_raw_read_unlock+0x3b/0x70 [ 132.490917] ? _raw_read_unlock+0x24/0x40 [ 132.491252] ? load_misc_binary+0x666/0xb40 [ 132.491604] bprm_execve+0x7f5/0x1920 [ 132.491920] ? open_exec+0x70/0x70 [ 132.492217] ? copy_strings_kernel+0x151/0x190 [ 132.492544] kernel_execve+0x3ea/0x500 [ 132.492833] call_usermodehelper_exec_async+0x2e6/0x580 [ 132.493206] ? umh_complete+0x90/0x90 [ 132.493478] ret_from_fork+0x22/0x30 [ 132.493756] [ 132.493922] irq event stamp: 1510 [ 132.494167] hardirqs last enabled at (1509): [] asm_sysvec_call_function_single+0x16/0x20 [ 132.494829] hardirqs last disabled at (1510): [] sysvec_call_function_single+0xb/0xc0 [ 132.495458] softirqs last enabled at (802): [] __irq_exit_rcu+0x11b/0x180 [ 132.496041] softirqs last disabled at (797): [] __irq_exit_rcu+0x11b/0x180 [ 132.496612] ---[ end trace 0000000000000000 ]--- 13:15:39 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='((\\{^!)\x00') 13:15:39 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='((\\{^!)\x00') [ 133.056172] ------------[ cut here ]------------ [ 133.056196] [ 133.056200] ====================================================== [ 133.056204] WARNING: possible circular locking dependency detected [ 133.056209] 6.0.0-rc5-next-20220916 #1 Tainted: G W [ 133.056217] ------------------------------------------------------ [ 133.056220] syz-executor.2/3859 is trying to acquire lock: [ 133.056228] ffffffff853fa878 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70 [ 133.056266] [ 133.056266] but task is already holding lock: [ 133.056269] ffff88800e1d5820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.056297] [ 133.056297] which lock already depends on the new lock. [ 133.056297] [ 133.056300] [ 133.056300] the existing dependency chain (in reverse order) is: [ 133.056304] [ 133.056304] -> #3 (&ctx->lock){....}-{2:2}: [ 133.056318] _raw_spin_lock+0x2a/0x40 [ 133.056336] __perf_event_task_sched_out+0x53b/0x18d0 [ 133.056348] __schedule+0xedd/0x2470 [ 133.056359] schedule+0xda/0x1b0 [ 133.056370] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.056390] syscall_exit_to_user_mode+0x19/0x40 [ 133.056409] do_syscall_64+0x48/0x90 [ 133.056423] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.056442] [ 133.056442] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 133.056455] _raw_spin_lock_nested+0x30/0x40 [ 133.056471] raw_spin_rq_lock_nested+0x1e/0x30 [ 133.056484] task_fork_fair+0x63/0x4d0 [ 133.056502] sched_cgroup_fork+0x3d0/0x540 [ 133.056516] copy_process+0x4183/0x6e20 [ 133.056526] kernel_clone+0xe7/0x890 [ 133.056536] user_mode_thread+0xad/0xf0 [ 133.056546] rest_init+0x24/0x250 [ 133.056563] arch_call_rest_init+0xf/0x14 [ 133.056576] start_kernel+0x4c1/0x4e6 [ 133.056586] secondary_startup_64_no_verify+0xe0/0xeb [ 133.056601] [ 133.056601] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 133.056614] _raw_spin_lock_irqsave+0x39/0x60 [ 133.056630] try_to_wake_up+0xab/0x1920 [ 133.056643] up+0x75/0xb0 [ 133.056654] __up_console_sem+0x6e/0x80 [ 133.056670] console_unlock+0x46a/0x590 [ 133.056686] do_con_write+0xc05/0x1d50 [ 133.056699] con_write+0x21/0x40 [ 133.056708] n_tty_write+0x4d4/0xfe0 [ 133.056721] file_tty_write.constprop.0+0x49c/0x8f0 [ 133.056734] vfs_write+0x9c3/0xd90 [ 133.056753] ksys_write+0x127/0x250 [ 133.056770] do_syscall_64+0x3b/0x90 [ 133.056783] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.056801] [ 133.056801] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 133.056815] __lock_acquire+0x2a02/0x5e70 [ 133.056831] lock_acquire+0x1a2/0x530 [ 133.056847] _raw_spin_lock_irqsave+0x39/0x60 [ 133.056863] down_trylock+0xe/0x70 [ 133.056875] __down_trylock_console_sem+0x3b/0xd0 [ 133.056891] vprintk_emit+0x16b/0x560 [ 133.056908] vprintk+0x84/0xa0 [ 133.056925] _printk+0xba/0xf1 [ 133.056944] report_bug.cold+0x72/0xab [ 133.056956] handle_bug+0x3c/0x70 [ 133.056970] exc_invalid_op+0x14/0x50 [ 133.056984] asm_exc_invalid_op+0x16/0x20 [ 133.057000] group_sched_out.part.0+0x2c7/0x460 [ 133.057011] ctx_sched_out+0x8f1/0xc10 [ 133.057020] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.057032] __schedule+0xedd/0x2470 [ 133.057043] schedule+0xda/0x1b0 [ 133.057052] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.057072] syscall_exit_to_user_mode+0x19/0x40 [ 133.057089] do_syscall_64+0x48/0x90 [ 133.057103] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.057120] [ 133.057120] other info that might help us debug this: [ 133.057120] [ 133.057123] Chain exists of: [ 133.057123] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 133.057123] [ 133.057138] Possible unsafe locking scenario: [ 133.057138] [ 133.057140] CPU0 CPU1 [ 133.057142] ---- ---- [ 133.057145] lock(&ctx->lock); [ 133.057151] lock(&rq->__lock); [ 133.057157] lock(&ctx->lock); [ 133.057163] lock((console_sem).lock); [ 133.057169] [ 133.057169] *** DEADLOCK *** [ 133.057169] [ 133.057171] 2 locks held by syz-executor.2/3859: [ 133.057178] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 133.057203] #1: ffff88800e1d5820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.057231] [ 133.057231] stack backtrace: [ 133.057234] CPU: 1 PID: 3859 Comm: syz-executor.2 Tainted: G W 6.0.0-rc5-next-20220916 #1 [ 133.057247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.057255] Call Trace: [ 133.057259] [ 133.057264] dump_stack_lvl+0x8b/0xb3 [ 133.057279] check_noncircular+0x263/0x2e0 [ 133.057295] ? format_decode+0x26c/0xb50 [ 133.057311] ? print_circular_bug+0x450/0x450 [ 133.057329] ? enable_ptr_key_workfn+0x20/0x20 [ 133.057344] ? format_decode+0x26c/0xb50 [ 133.057360] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 133.057378] __lock_acquire+0x2a02/0x5e70 [ 133.057400] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 133.057423] lock_acquire+0x1a2/0x530 [ 133.057440] ? down_trylock+0xe/0x70 [ 133.057455] ? rcu_read_unlock+0x40/0x40 [ 133.057476] ? vprintk+0x84/0xa0 [ 133.057494] _raw_spin_lock_irqsave+0x39/0x60 [ 133.057510] ? down_trylock+0xe/0x70 [ 133.057524] down_trylock+0xe/0x70 [ 133.057538] ? vprintk+0x84/0xa0 [ 133.057555] __down_trylock_console_sem+0x3b/0xd0 [ 133.057572] vprintk_emit+0x16b/0x560 [ 133.057592] vprintk+0x84/0xa0 [ 133.057610] _printk+0xba/0xf1 [ 133.057628] ? record_print_text.cold+0x16/0x16 [ 133.057651] ? report_bug.cold+0x66/0xab [ 133.057666] ? group_sched_out.part.0+0x2c7/0x460 [ 133.057677] report_bug.cold+0x72/0xab [ 133.057693] handle_bug+0x3c/0x70 [ 133.057707] exc_invalid_op+0x14/0x50 [ 133.057722] asm_exc_invalid_op+0x16/0x20 [ 133.057740] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.057753] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.057765] RSP: 0018:ffff888040ccfc48 EFLAGS: 00010006 [ 133.057774] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.057782] RDX: ffff8880189f9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 133.057790] RBP: ffff888040d01158 R08: 0000000000000005 R09: 0000000000000001 [ 133.057797] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800e1d5800 [ 133.057805] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 133.057816] ? group_sched_out.part.0+0x2c7/0x460 [ 133.057829] ? group_sched_out.part.0+0x2c7/0x460 [ 133.057842] ctx_sched_out+0x8f1/0xc10 [ 133.057854] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.057870] ? lock_is_held_type+0xd7/0x130 [ 133.057889] ? __perf_cgroup_move+0x160/0x160 [ 133.057901] ? set_next_entity+0x304/0x550 [ 133.057919] ? update_curr+0x267/0x740 [ 133.057938] ? lock_is_held_type+0xd7/0x130 [ 133.057957] __schedule+0xedd/0x2470 [ 133.057970] ? io_schedule_timeout+0x150/0x150 [ 133.057984] ? rcu_read_lock_sched_held+0x3e/0x80 [ 133.058004] schedule+0xda/0x1b0 [ 133.058016] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.058037] syscall_exit_to_user_mode+0x19/0x40 [ 133.058056] do_syscall_64+0x48/0x90 [ 133.058077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.058095] RIP: 0033:0x7f52c3b8cb19 [ 133.058104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.058115] RSP: 002b:00007f52c1102218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.058125] RAX: 0000000000000001 RBX: 00007f52c3c9ff68 RCX: 00007f52c3b8cb19 [ 133.058133] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f52c3c9ff6c [ 133.058140] RBP: 00007f52c3c9ff60 R08: 000000000000000e R09: 0000000000000000 [ 133.058147] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f52c3c9ff6c [ 133.058155] R13: 00007fff883328ef R14: 00007f52c1102300 R15: 0000000000022000 [ 133.058167] [ 133.113161] WARNING: CPU: 1 PID: 3859 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 133.113811] Modules linked in: [ 133.114044] CPU: 1 PID: 3859 Comm: syz-executor.2 Tainted: G W 6.0.0-rc5-next-20220916 #1 [ 133.114719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.115496] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.115876] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.117127] RSP: 0018:ffff888040ccfc48 EFLAGS: 00010006 [ 133.117501] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.118000] RDX: ffff8880189f9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 133.118504] RBP: ffff888040d01158 R08: 0000000000000005 R09: 0000000000000001 [ 133.119002] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800e1d5800 [ 133.119501] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 133.119997] FS: 00007f52c1102700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 133.120557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.120964] CR2: 00007ff1403a4650 CR3: 000000003ff08000 CR4: 0000000000350ee0 [ 133.121456] Call Trace: [ 133.121641] [ 133.121810] ctx_sched_out+0x8f1/0xc10 [ 133.122143] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.122510] ? lock_is_held_type+0xd7/0x130 [ 133.122823] ? __perf_cgroup_move+0x160/0x160 [ 133.123142] ? set_next_entity+0x304/0x550 [ 133.123451] ? update_curr+0x267/0x740 [ 133.123737] ? lock_is_held_type+0xd7/0x130 [ 133.124048] __schedule+0xedd/0x2470 [ 133.124320] ? io_schedule_timeout+0x150/0x150 [ 133.124645] ? rcu_read_lock_sched_held+0x3e/0x80 [ 133.125000] schedule+0xda/0x1b0 [ 133.125245] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.125600] syscall_exit_to_user_mode+0x19/0x40 [ 133.125944] do_syscall_64+0x48/0x90 [ 133.126227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.126594] RIP: 0033:0x7f52c3b8cb19 [ 133.126859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.128103] RSP: 002b:00007f52c1102218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.128631] RAX: 0000000000000001 RBX: 00007f52c3c9ff68 RCX: 00007f52c3b8cb19 [ 133.129128] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f52c3c9ff6c [ 133.129621] RBP: 00007f52c3c9ff60 R08: 000000000000000e R09: 0000000000000000 [ 133.130123] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f52c3c9ff6c [ 133.130616] R13: 00007fff883328ef R14: 00007f52c1102300 R15: 0000000000022000 [ 133.131114] [ 133.131283] irq event stamp: 358 [ 133.131520] hardirqs last enabled at (357): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 133.132181] hardirqs last disabled at (358): [] __schedule+0x1225/0x2470 [ 133.132755] softirqs last enabled at (128): [] __irq_exit_rcu+0x11b/0x180 [ 133.133351] softirqs last disabled at (119): [] __irq_exit_rcu+0x11b/0x180 [ 133.133947] ---[ end trace 0000000000000000 ]--- 13:15:39 executing program 3: r0 = semget(0x0, 0x4, 0x23c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x4, 0x7}, {0x47, 0x4}, 0x9}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r1, 0xffffffffffffffff, 0x0, 0xee00, 0x6}, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x891c}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x1000, 0x6]) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)=[0x31, 0x27, 0x8, 0x3f, 0x2ba, 0xf000]) [ 133.726449] loop6: detected capacity change from 0 to 1300 [ 133.754730] process 'syz-executor.0' launched './file1' with NULL argv: empty string added [ 134.582010] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 135.004306] hrtimer: interrupt took 18034 ns 13:15:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 13:15:41 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 13:15:41 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="232109c1"], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:15:41 executing program 4: r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x0e\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xd7\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfcG_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\x00'/584, 0x2) fcntl$addseals(r0, 0x409, 0xc) ftruncate(r0, 0x2000000) 13:15:41 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 3: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000019c0)) 13:15:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 4: r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x0e\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xd7\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfcG_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\x00'/584, 0x2) fcntl$addseals(r0, 0x409, 0xc) ftruncate(r0, 0x2000000) 13:15:41 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="232109c1"], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:15:41 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 13:15:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 13:15:41 executing program 4: r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x0e\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xd7\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfcG_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\x00'/584, 0x2) fcntl$addseals(r0, 0x409, 0xc) ftruncate(r0, 0x2000000) 13:15:41 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 13:15:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 13:15:41 executing program 4: r0 = memfd_create(&(0x7f0000000280)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x0e\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xd7\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfcG_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\x00'/584, 0x2) fcntl$addseals(r0, 0x409, 0xc) ftruncate(r0, 0x2000000) 13:15:41 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000014c0)={0x13, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x18}], 0x1}, 0x0) 13:15:41 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="232109c1"], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:15:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 13:15:41 executing program 6: syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"91b3c94d04ba67c4b5e564c75fffc8ae", 0x0, 0x0, {}, {}, 0x0, [0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x9, 0x577, 0x0, 0x0, 0x100000000, 0x40, 0x80, 0x1000, 0x0, 0x1]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat$cgroup(0xffffffffffffffff, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) 13:15:42 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80800) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/214, 0xd6}, {&(0x7f0000000e80)=""/79, 0x4f}], 0x8, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0xf42) 13:15:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000001880), r0) 13:15:42 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000004c0)) 13:15:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001140)=""/50, &(0x7f0000001180)=0x32) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616f3d8ea3940d1b6ae3f7e732d951f2a8f450592e0057bd6975bddc09eb7c26e3ceb6c7b0da0f9a9615a2967a1e0f92824a0ab7b9a6bfbe28647327d8f4e1a85556f8c78edede20f3d7d9098cd356612ccbcd446f48050499d95acec41cc4f3e828a1117a2091b2acfa0bfbae08da4c82b845b593da518f7c107e6b4165a6d5258fb99691520fbff84e3291da3737ba09210d310111c6dd20a66b789fd4c2a677601acdfe4fbc5a6d2e59950284c89c000000000000000000008f86587a2af16d33cd96010525dc45f7f67e9261e1bfeaa4d49656dae33ec679f03cf2db4ba3fc6e4e76a01861fbafa64f045e1f4c3cd5b2b2ea2aceee169b2c3b552cdaa95f65ef3135", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendfile(r1, r4, 0x0, 0xffffffffffffffe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x0, 0xff, 0x0, 0x800000000000b663, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x894a0, 0x7, 0xff, 0x6, 0xd8, 0x800, 0x100, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x100000) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2a400, 0x0) 13:15:42 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:15:42 executing program 7: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x101580d, &(0x7f0000000340)) 13:15:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 13:15:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 13:15:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 13:15:42 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 13:15:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 13:15:42 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:15:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x204000, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x3e, 0x1, 0x1, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x1000, 0x9}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40860}, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000001340), 0x8, 0x0) dup2(r3, r0) 13:15:42 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 13:15:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001140)=""/50, &(0x7f0000001180)=0x32) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendfile(r1, r4, 0x0, 0xffffffffffffffe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x0, 0xff, 0x0, 0x800000000000b663, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x894a0, 0x7, 0xff, 0x6, 0xd8, 0x800, 0x100, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x100000) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2a400, 0x0) 13:15:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 13:15:42 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 13:15:42 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:15:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 13:15:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001140)=""/50, &(0x7f0000001180)=0x32) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendfile(r1, r4, 0x0, 0xffffffffffffffe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x0, 0xff, 0x0, 0x800000000000b663, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x894a0, 0x7, 0xff, 0x6, 0xd8, 0x800, 0x100, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x100000) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2a400, 0x0) 13:15:42 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 13:15:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:15:42 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 13:15:42 executing program 3: semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 13:15:42 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001140)=""/50, &(0x7f0000001180)=0x32) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616f3d8ea3940d1b6ae3f7e732d951f2a8f450592e0057bd6975bddc09eb7c26e3ceb6c7b0da0f9a9615a2967a1e0f92824a0ab7b9a6bfbe28647327d8f4e1a85556f8c78edede20f3d7d9098cd356612ccbcd446f48050499d95acec41cc4f3e828a1117a2091b2acfa0bfbae08da4c82b845b593da518f7c107e6b4165a6d5258fb99691520fbff84e3291da3737ba09210d310111c6dd20a66b789fd4c2a677601acdfe4fbc5a6d2e59950284c89c000000000000000000008f86587a2af16d33cd96010525dc45f7f67e9261e1bfeaa4d49656dae33ec679f03cf2db4ba3fc6e4e76a01861fbafa64f045e1f4c3cd5b2b2ea2aceee169b2c3b552cdaa95f65ef3135", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendfile(r1, r4, 0x0, 0xffffffffffffffe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x0, 0xff, 0x0, 0x800000000000b663, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x894a0, 0x7, 0xff, 0x6, 0xd8, 0x800, 0x100, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x100000) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2a400, 0x0) 13:15:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001140)=""/50, &(0x7f0000001180)=0x32) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendfile(r1, r4, 0x0, 0xffffffffffffffe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x0, 0xff, 0x0, 0x800000000000b663, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x894a0, 0x7, 0xff, 0x6, 0xd8, 0x800, 0x100, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x100000) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2a400, 0x0) 13:15:42 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 136.864946] syz-executor.0 (4086) used greatest stack depth: 24152 bytes left 13:15:43 executing program 3: semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 13:15:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:15:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:15:43 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0x801c581f, 0x0) 13:15:43 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001140)=""/50, &(0x7f0000001180)=0x32) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendfile(r1, r4, 0x0, 0xffffffffffffffe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x0, 0xff, 0x0, 0x800000000000b663, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x894a0, 0x7, 0xff, 0x6, 0xd8, 0x800, 0x100, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x100000) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2a400, 0x0) 13:15:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000001140)=""/50, &(0x7f0000001180)=0x32) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616f3d8ea3940d1b6ae3f7e732d951f2a8f450592e0057bd6975bddc09eb7c26e3ceb6c7b0da0f9a9615a2967a1e0f92824a0ab7b9a6bfbe28647327d8f4e1a85556f8c78edede20f3d7d9098cd356612ccbcd446f48050499d95acec41cc4f3e828a1117a2091b2acfa0bfbae08da4c82b845b593da518f7c107e6b4165a6d5258fb99691520fbff84e3291da3737ba09210d310111c6dd20a66b789fd4c2a677601acdfe4fbc5a6d2e59950284c89c000000000000000000008f86587a2af16d33cd96010525dc45f7f67e9261e1bfeaa4d49656dae33ec679f03cf2db4ba3fc6e4e76a01861fbafa64f045e1f4c3cd5b2b2ea2aceee169b2c3b552cdaa95f65ef3135", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendfile(r1, r4, 0x0, 0xffffffffffffffe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x0, 0xff, 0x0, 0x800000000000b663, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x894a0, 0x7, 0xff, 0x6, 0xd8, 0x800, 0x100, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x100000) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2a400, 0x0) 13:15:43 executing program 3: semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 13:15:43 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0x801c581f, 0x0) 13:15:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:15:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:15:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:43 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0x801c581f, 0x0) 13:15:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:15:43 executing program 3: semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 13:15:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 13:15:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0x801c581f, 0x0) 13:15:43 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:43 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 6: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 137.578674] syz-executor.3 (4157) used greatest stack depth: 24088 bytes left 13:15:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f00000002c0)) 13:15:43 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 13:15:43 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000140)) 13:15:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x9e74, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x22000000) 13:15:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb}, 0xc) 13:15:43 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) 13:15:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 13:15:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000140)) 13:15:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) 13:15:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x9e74, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x22000000) 13:15:44 executing program 7: syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c910"], 0x3c) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}}}}, 0x17) 13:15:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343139313330323700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000541597055415970500000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2a80}, {&(0x7f0000011e00)="ed41000000080000ddf4655fddf4655fddf4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000eb7155bc00000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000af6989a500000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734313931333032372f66696c65302f66696c653000000000000000000000000000000000000000000000725ed7c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000003e5e55c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000014100)) 13:15:44 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) [ 137.866760] loop0: detected capacity change from 0 to 2048 [ 137.867164] Bluetooth: Unexpected continuation frame (len 55) [ 137.868156] Bluetooth: Wrong link type (-71) [ 137.868652] Bluetooth: Unexpected continuation frame (len 55) 13:15:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000140)) 13:15:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 13:15:44 executing program 7: syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c910"], 0x3c) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}}}}, 0x17) [ 137.914487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 13:15:44 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x3, 0x0, 0x5, 0x0, 0x315, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8d90, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x9, 0x269387ea, 0x5, 0x1340, 0x7, 0x2c5}, 0xffffffffffffffff, 0xe, r0, 0x8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) [ 137.939120] Bluetooth: Unexpected continuation frame (len 55) [ 137.940794] Bluetooth: Wrong link type (-71) 13:15:44 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) [ 137.961187] EXT4-fs (loop0): unmounting filesystem. 13:15:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000140)) 13:15:44 executing program 7: syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c910"], 0x3c) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}}}}, 0x17) [ 138.001584] Bluetooth: Unexpected continuation frame (len 55) [ 138.002100] Bluetooth: Wrong link type (-71) [ 138.002548] Bluetooth: hci6: link tx timeout [ 138.002897] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.003466] Bluetooth: hci6: link tx timeout [ 138.003804] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa 13:15:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x9e74, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x22000000) 13:15:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 13:15:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0xa2}}, 0x14}}, 0x0) 13:15:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) 13:15:44 executing program 7: syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c910"], 0x3c) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}}}}, 0x17) [ 138.118241] Bluetooth: Unexpected continuation frame (len 55) [ 138.118761] Bluetooth: Wrong link type (-71) [ 138.119128] Bluetooth: hci6: link tx timeout [ 138.119469] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 138.119956] Bluetooth: hci6: link tx timeout [ 138.120264] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa 13:15:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000280)='9', 0x1, 0xb6d3) pwrite64(r0, &(0x7f0000000000)='y', 0x1, 0x0) 13:15:44 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 13:15:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x9e74, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x22000000) 13:15:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x800800) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 13:15:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 13:15:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 13:15:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) 13:15:44 executing program 3: capget(&(0x7f0000000000)={0x20080522}, 0xffffffffffffffff) 13:15:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 13:15:44 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 13:15:44 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000140)="b29c224654e820ece3fa640dd77690bc452efc3c6968ca98b278dddb43", 0x1d, 0x4}, {0x0, 0x0, 0x8001}]) [ 138.303415] loop1: detected capacity change from 0 to 128 [ 138.311444] loop1: detected capacity change from 0 to 128 13:15:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0x23, 0x4) 13:15:44 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$vga_arbiter(r0, &(0x7f0000000240)=@other={'lock', ' ', 'none'}, 0xa) 13:15:44 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 13:15:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 13:15:44 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) 13:15:44 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000140)="b29c224654e820ece3fa640dd77690bc452efc3c6968ca98b278dddb43", 0x1d, 0x4}, {0x0, 0x0, 0x8001}]) 13:15:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x3, 0x7, 0x101}, 0x14}}, 0x0) 13:15:44 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) [ 138.393554] rfkill: input handler disabled [ 138.395456] rfkill: input handler enabled 13:15:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0x23, 0x4) [ 138.402364] rfkill: input handler disabled [ 138.410744] rfkill: input handler enabled [ 138.425573] loop1: detected capacity change from 0 to 128 13:15:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 13:15:44 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x4, 0xfffffff9, 0xffffffffffff36cf, 0x9, 0x80000000, 0x4ee, 0x4}, 0x0) r0 = fork() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x10000000, 0x7, 0x6, 0x9, 0xffffffffffffff80, 0x0, 0x6, 0x200}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) syz_io_uring_setup(0x5d36, &(0x7f0000000240)={0x0, 0x3f76, 0x0, 0x0, 0x143}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 13:15:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0x23, 0x4) 13:15:44 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 13:15:44 executing program 4: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x2000}, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:15:44 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) 13:15:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, "d9d6e380de", ['\x00']}, 0x125) 13:15:44 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000140)="b29c224654e820ece3fa640dd77690bc452efc3c6968ca98b278dddb43", 0x1d, 0x4}, {0x0, 0x0, 0x8001}]) 13:15:44 executing program 3: r0 = syz_io_uring_setup(0x7, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:15:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r0, 0x2) flock(r0, 0x2) [ 138.623092] loop1: detected capacity change from 0 to 128 13:15:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0x23, 0x4) 13:15:44 executing program 7: syz_mount_image$msdos(&(0x7f0000001dc0), 0x0, 0x0, 0x1, &(0x7f0000002180)=[{&(0x7f0000001f00)="b5", 0x1, 0xffffffffffff8612}], 0x0, &(0x7f0000002240)) 13:15:44 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) 13:15:44 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000140)="b29c224654e820ece3fa640dd77690bc452efc3c6968ca98b278dddb43", 0x1d, 0x4}, {0x0, 0x0, 0x8001}]) [ 138.709031] loop7: detected capacity change from 0 to 16262 [ 138.714641] loop1: detected capacity change from 0 to 128 13:15:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, "d9d6e380de", ['\x00']}, 0x125) [ 138.720244] loop7: detected capacity change from 0 to 16262 13:15:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000001cc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 13:15:44 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) fsync(r0) 13:15:44 executing program 2: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x3f, 0x4) 13:15:44 executing program 3: r0 = syz_io_uring_setup(0x7, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:15:44 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)) 13:15:44 executing program 4: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x2000}, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:15:45 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)) 13:15:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, "d9d6e380de", ['\x00']}, 0x125) 13:15:45 executing program 3: r0 = syz_io_uring_setup(0x7, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:15:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) 13:15:45 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000440)="9fe2", 0x2}], 0x1}, 0x8004) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) 13:15:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 13:15:45 executing program 4: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x2000}, 0x0) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:15:45 executing program 3: r0 = syz_io_uring_setup(0x7, &(0x7f0000000080), &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:15:45 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)) 13:15:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 13:15:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, "d9d6e380de", ['\x00']}, 0x125) 13:15:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 13:15:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) 13:15:45 executing program 6: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) [ 139.090196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:15:45 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ea4, &(0x7f0000000100)={0x0, 0xd867, 0x8, 0x3, 0x307}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000180)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x10400, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:15:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r2, 0x1}, 0x14}}, 0x0) 13:15:45 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)) 13:15:45 executing program 6: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 13:15:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e0000000000000000000000000000df63a36fd407eb99643bb3409a86448396cd1499fc9043822e14cf2dbe93dedf4e77766175ac5c31d7d34cf901e24917654cb8d3c73e60c6c12f77588b76a9611ccb029fc621b6cee142ab97f6cfd7af9248f2266539"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 13:15:45 executing program 4: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x2000}, 0x0) io_uring_enter(r0, VM DIAGNOSIS: 13:15:38 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88806ce08f18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff87641b60 R14=ffffffff87641bb0 R15=ffffffff87641e08 RIP=ffffffff822b32a9 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056117f1b2080 CR3=000000003fd4e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffff00000000 ff00ff0000ff0000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=00000000000278ca RBX=1ffff11003115f84 RCX=ffffc90004dfa000 RDX=0000000000040000 RSI=ffffffff813bc113 RDI=0000000000000005 RBP=ffff8880188afcc8 RSP=ffff8880188afc00 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff813bc115 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff13d95e700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce985251f0 CR3=000000001eca6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000