Warning: Permanently added '[localhost]:39660' (ECDSA) to the list of known hosts. 2022/09/30 09:52:31 fuzzer started 2022/09/30 09:52:31 dialing manager at localhost:40535 syzkaller login: [ 44.260367] cgroup: Unknown subsys name 'net' [ 44.380630] cgroup: Unknown subsys name 'rlimit' 2022/09/30 09:52:45 syscalls: 2215 2022/09/30 09:52:45 code coverage: enabled 2022/09/30 09:52:45 comparison tracing: enabled 2022/09/30 09:52:45 extra coverage: enabled 2022/09/30 09:52:45 setuid sandbox: enabled 2022/09/30 09:52:45 namespace sandbox: enabled 2022/09/30 09:52:45 Android sandbox: enabled 2022/09/30 09:52:45 fault injection: enabled 2022/09/30 09:52:45 leak checking: enabled 2022/09/30 09:52:45 net packet injection: enabled 2022/09/30 09:52:45 net device setup: enabled 2022/09/30 09:52:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 09:52:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 09:52:45 USB emulation: enabled 2022/09/30 09:52:45 hci packet injection: enabled 2022/09/30 09:52:45 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 09:52:45 802.15.4 emulation: enabled 2022/09/30 09:52:45 fetching corpus: 50, signal 21356/23173 (executing program) 2022/09/30 09:52:45 fetching corpus: 100, signal 31938/35371 (executing program) 2022/09/30 09:52:45 fetching corpus: 150, signal 42388/47242 (executing program) 2022/09/30 09:52:45 fetching corpus: 200, signal 50898/57066 (executing program) 2022/09/30 09:52:45 fetching corpus: 250, signal 58927/66242 (executing program) 2022/09/30 09:52:46 fetching corpus: 300, signal 63301/71862 (executing program) 2022/09/30 09:52:46 fetching corpus: 350, signal 67207/76918 (executing program) 2022/09/30 09:52:46 fetching corpus: 400, signal 71303/82118 (executing program) 2022/09/30 09:52:46 fetching corpus: 450, signal 73514/85514 (executing program) 2022/09/30 09:52:46 fetching corpus: 500, signal 77694/90632 (executing program) 2022/09/30 09:52:46 fetching corpus: 550, signal 82588/96335 (executing program) 2022/09/30 09:52:46 fetching corpus: 600, signal 84779/99513 (executing program) 2022/09/30 09:52:46 fetching corpus: 650, signal 87562/103197 (executing program) 2022/09/30 09:52:47 fetching corpus: 700, signal 91664/107982 (executing program) 2022/09/30 09:52:47 fetching corpus: 750, signal 93879/111052 (executing program) 2022/09/30 09:52:47 fetching corpus: 800, signal 96516/114481 (executing program) 2022/09/30 09:52:47 fetching corpus: 850, signal 99018/117702 (executing program) 2022/09/30 09:52:47 fetching corpus: 900, signal 100312/119884 (executing program) 2022/09/30 09:52:47 fetching corpus: 950, signal 102275/122622 (executing program) 2022/09/30 09:52:47 fetching corpus: 1000, signal 104240/125279 (executing program) 2022/09/30 09:52:47 fetching corpus: 1050, signal 106495/128148 (executing program) 2022/09/30 09:52:47 fetching corpus: 1100, signal 108790/130995 (executing program) 2022/09/30 09:52:48 fetching corpus: 1150, signal 112195/134722 (executing program) 2022/09/30 09:52:48 fetching corpus: 1200, signal 113874/136988 (executing program) 2022/09/30 09:52:48 fetching corpus: 1250, signal 115557/139234 (executing program) 2022/09/30 09:52:48 fetching corpus: 1300, signal 116654/141036 (executing program) 2022/09/30 09:52:48 fetching corpus: 1350, signal 118350/143196 (executing program) 2022/09/30 09:52:48 fetching corpus: 1400, signal 119899/145287 (executing program) 2022/09/30 09:52:48 fetching corpus: 1450, signal 122049/147770 (executing program) 2022/09/30 09:52:48 fetching corpus: 1500, signal 123355/149635 (executing program) 2022/09/30 09:52:49 fetching corpus: 1550, signal 124153/151092 (executing program) 2022/09/30 09:52:49 fetching corpus: 1600, signal 125647/153043 (executing program) 2022/09/30 09:52:49 fetching corpus: 1650, signal 127743/155401 (executing program) 2022/09/30 09:52:49 fetching corpus: 1700, signal 130015/157951 (executing program) 2022/09/30 09:52:49 fetching corpus: 1750, signal 131064/159522 (executing program) 2022/09/30 09:52:49 fetching corpus: 1800, signal 132238/161111 (executing program) 2022/09/30 09:52:49 fetching corpus: 1850, signal 133948/163020 (executing program) 2022/09/30 09:52:49 fetching corpus: 1900, signal 135378/164727 (executing program) 2022/09/30 09:52:50 fetching corpus: 1950, signal 136319/166082 (executing program) 2022/09/30 09:52:50 fetching corpus: 2000, signal 137665/167717 (executing program) 2022/09/30 09:52:50 fetching corpus: 2050, signal 138746/169130 (executing program) 2022/09/30 09:52:50 fetching corpus: 2100, signal 140072/170707 (executing program) 2022/09/30 09:52:50 fetching corpus: 2150, signal 141530/172348 (executing program) 2022/09/30 09:52:50 fetching corpus: 2200, signal 142645/173746 (executing program) 2022/09/30 09:52:50 fetching corpus: 2250, signal 143367/174868 (executing program) 2022/09/30 09:52:50 fetching corpus: 2300, signal 144316/176098 (executing program) 2022/09/30 09:52:51 fetching corpus: 2350, signal 146095/177792 (executing program) 2022/09/30 09:52:51 fetching corpus: 2400, signal 147072/179171 (executing program) 2022/09/30 09:52:51 fetching corpus: 2450, signal 147916/180310 (executing program) 2022/09/30 09:52:51 fetching corpus: 2500, signal 151039/182771 (executing program) 2022/09/30 09:52:51 fetching corpus: 2550, signal 153164/184561 (executing program) 2022/09/30 09:52:51 fetching corpus: 2600, signal 153929/185553 (executing program) 2022/09/30 09:52:51 fetching corpus: 2650, signal 155248/186884 (executing program) 2022/09/30 09:52:51 fetching corpus: 2700, signal 156352/188050 (executing program) 2022/09/30 09:52:52 fetching corpus: 2750, signal 158062/189469 (executing program) 2022/09/30 09:52:52 fetching corpus: 2800, signal 158710/190376 (executing program) 2022/09/30 09:52:52 fetching corpus: 2850, signal 160009/191556 (executing program) 2022/09/30 09:52:52 fetching corpus: 2900, signal 160689/192397 (executing program) 2022/09/30 09:52:52 fetching corpus: 2950, signal 161359/193247 (executing program) 2022/09/30 09:52:52 fetching corpus: 3000, signal 162527/194305 (executing program) 2022/09/30 09:52:52 fetching corpus: 3050, signal 163021/195083 (executing program) 2022/09/30 09:52:52 fetching corpus: 3100, signal 164211/196174 (executing program) 2022/09/30 09:52:52 fetching corpus: 3150, signal 165241/197149 (executing program) 2022/09/30 09:52:53 fetching corpus: 3200, signal 165892/197940 (executing program) 2022/09/30 09:52:53 fetching corpus: 3250, signal 166885/198832 (executing program) 2022/09/30 09:52:53 fetching corpus: 3300, signal 167542/199600 (executing program) 2022/09/30 09:52:53 fetching corpus: 3350, signal 168556/200569 (executing program) 2022/09/30 09:52:53 fetching corpus: 3400, signal 169392/201343 (executing program) 2022/09/30 09:52:53 fetching corpus: 3450, signal 170338/202146 (executing program) 2022/09/30 09:52:53 fetching corpus: 3500, signal 171008/202849 (executing program) 2022/09/30 09:52:53 fetching corpus: 3550, signal 172058/203714 (executing program) 2022/09/30 09:52:54 fetching corpus: 3600, signal 173450/204624 (executing program) 2022/09/30 09:52:54 fetching corpus: 3650, signal 174026/205218 (executing program) 2022/09/30 09:52:54 fetching corpus: 3700, signal 174683/205826 (executing program) 2022/09/30 09:52:54 fetching corpus: 3750, signal 176034/206745 (executing program) 2022/09/30 09:52:54 fetching corpus: 3800, signal 176839/207412 (executing program) 2022/09/30 09:52:54 fetching corpus: 3850, signal 177272/207960 (executing program) 2022/09/30 09:52:54 fetching corpus: 3900, signal 177988/208560 (executing program) 2022/09/30 09:52:54 fetching corpus: 3950, signal 178745/209172 (executing program) 2022/09/30 09:52:55 fetching corpus: 4000, signal 179416/209767 (executing program) 2022/09/30 09:52:55 fetching corpus: 4050, signal 179820/210263 (executing program) 2022/09/30 09:52:55 fetching corpus: 4100, signal 180300/210746 (executing program) 2022/09/30 09:52:55 fetching corpus: 4150, signal 180888/211256 (executing program) 2022/09/30 09:52:55 fetching corpus: 4200, signal 181563/211773 (executing program) 2022/09/30 09:52:55 fetching corpus: 4250, signal 182163/212284 (executing program) 2022/09/30 09:52:55 fetching corpus: 4300, signal 182808/212764 (executing program) 2022/09/30 09:52:55 fetching corpus: 4350, signal 183465/213257 (executing program) 2022/09/30 09:52:55 fetching corpus: 4400, signal 184302/213746 (executing program) 2022/09/30 09:52:56 fetching corpus: 4450, signal 184874/214208 (executing program) 2022/09/30 09:52:56 fetching corpus: 4500, signal 185439/214627 (executing program) 2022/09/30 09:52:56 fetching corpus: 4550, signal 186105/215060 (executing program) 2022/09/30 09:52:56 fetching corpus: 4600, signal 186814/215478 (executing program) 2022/09/30 09:52:56 fetching corpus: 4650, signal 187285/215859 (executing program) 2022/09/30 09:52:56 fetching corpus: 4700, signal 188026/216289 (executing program) 2022/09/30 09:52:56 fetching corpus: 4750, signal 188406/216637 (executing program) 2022/09/30 09:52:56 fetching corpus: 4800, signal 188970/216975 (executing program) 2022/09/30 09:52:57 fetching corpus: 4850, signal 189976/217361 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/217700 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/217952 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/218243 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/218524 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/218797 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/219058 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/219335 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/219608 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/219875 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/220144 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/220390 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/220472 (executing program) 2022/09/30 09:52:57 fetching corpus: 4872, signal 190746/220472 (executing program) 2022/09/30 09:52:59 starting 8 fuzzer processes 09:52:59 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000000]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x29, 0x3, 0x4, 0x10001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7, 0x5b1, 0x10000}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000280)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000002c0)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000000340)=""/191, 0xbf, 0x10040, &(0x7f0000000400)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ba7edbadd7f7fefa7728a30f3d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "52ffdc82626577e1ab5a08e9eb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "02a2ef48e9f6c65d341c34edc7"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0649bef4ac44037b3828ce682a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "83c530b6b9"}]}, 0x94}}, 0x4000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/usblp', 0x212100, 0x100) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc3b0}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8000080) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd_index=0xa, 0x1, &(0x7f0000001b80)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="fcf98e4e100ea03ab0879cb870d0f87d81819e4a298ccd04f99f2788adee64951f27612d4eef8d36", 0x28}, {&(0x7f0000001780)="4ae2eee7b8f123b4ae44da124468711f15c4bc4945d980e0d9234a036eff93a2370e9a7838d53a3f49776e88699547a60fff7f1524419bc60be875b64d9cbef4f9353525a3327324e73c189d008bb53c", 0x50}, {&(0x7f0000001800)="756bf63b65511f56ba07845d150f9cc2f9bbe7df4c3f6a76a1b4888a815d71f15f4a8a1de104a28467070931b69cef0b314df79c53d331c1c0870375430076730110a81dfcade7d42e", 0x49}, {&(0x7f0000001880)="08e6ece904c52004b1852f0c94591f9625f0604403db16cc24e724a4b1c2a0e1ff48db5458b8eaef7bca170d1359b66b67895eab2f8f0f", 0x37}, {&(0x7f00000018c0)="377a94ee772cf9cf3b36c2a6d795d6369f237b71fdfcdb4d6078c312904c09226c913343dac43ba460bc18e25085180533", 0x31}, {&(0x7f0000001900)="a320c4e845c32cbad4373d53ba72249d6f0459e9871fbf241d0120af6c16c61b4f65be88a0a47db97f9c252d73aef2d70c685c3b7a80d6461ebb256a03ef20dab88c64346078ab08c8a88c24af99c8647337b543efde974a6544f88cd90425e7418c2a1b74571ad201e59f15d2d723ce5cd1ac7b27d7c8ba4007274f7233f4d8353c227d4ff5421cf4d884de6588c9ce88ce51b5bfc6a4f29ab8d35164d4ad5cf4cbb7e2c976a0887cb4805d9a3d4bce91194d8e152e0886", 0xb8}, {&(0x7f00000019c0)="255f0b9c61e6431dcc8543302a8b585d589ee46b42466475c98fd0bcc5b7e8da63024edb34f6d12e8248364ace96461792108a34578e1f8677c9659660849b8f8438e3b23351654429cee622e8f1c155ea2110e3233e307429e1bedf8851fb210507b25da790dc695b4c0048bc1dac5030be0d5176a2ec1d2e599922fe3a1ee64fb941b3eb7734f10929df16f56e80e9745a9125985909d7472348319c2c7c", 0x9f}, {&(0x7f0000001a80)="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", 0xfe}], 0x9, 0x0, 0x1, {0x1}}, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000001d00)={'syztnl0\x00', &(0x7f0000001c80)={'ip6tnl0\x00', r1, 0x29, 0x9, 0x81, 0x4, 0x8, @mcast2, @private1, 0x1, 0x700, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001dc0)={'syztnl1\x00', &(0x7f0000001d40)={'ip6_vti0\x00', r3, 0x2f, 0x3e, 0x3f, 0x7, 0x7a, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x80, 0x10000}}) ioctl$CDROMSTOP(r2, 0x5307) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$CDROMSTOP(r4, 0x5307) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r5, &(0x7f0000001e40)=""/151, 0x97, 0x2100, &(0x7f0000001f00)={0xa, 0x4e20, 0x6, @remote, 0x2a9}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 09:52:59 executing program 1: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x0, "fce00bacb5c0bd570c3d24c54bcc9f8b4490f1b3e5caea65bc2fd205d3ec2cc213a11e46ab208bb890fd764b8b4a4e34830ea58421cbc6db3dbd041fc444579e7faeb020788a1b065da1057a31d1b97a45d4f49e683d37ee86cc9a5e0c444e4198e24aea8e51e91b2897ce85a43284b79d6bfef863b882ab1defec5da598b16526e84a3818a3afc0b5249de805622b8e1c172c47502ffb7c81458be42910d86d4b1cb067c8726f9fd26932be51f278f3ed3aa7a63fe907f0e62e1f4087620e2088085c1f62ea14a2ecc3403f31b1a8653bf1bce10710d383a8aa04b959200833b806d034e1dc0061b1f23a9718d692a3ffdb9d1f017b9231f1bc01abe0974e05cf77a16c87b1a2af44329d5ad8c9916654745ffdd40211ddda82b90d04d1aad202d2b81048aacc0d01a923914cf6f51c3501b4bddfb1f310ce22ca5caf9978f6eab4beb73eccd55c015554998a7c3d604692e6cefef2447fc0cbb5a7fac77f6961eba37946646b37f30fa3577f1d3159998e7d54fc8515cbf1622de1b6663e18f916994a6e8f6e965a5d40d29712c81e81424a29fb93aa2d05ad1828d176fc25c8dd425747381cb2223598e7ee77c91eaa527f5bce5a4cd276276185a907197946128060f820387a13caa978e43205d69bcc2b8aad0dda5880c5eb0d5a81873a8e820de60dcb763311c442953743e9176b201cfc88343c823da51fe7e13caccd"}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) ioctl$KDENABIO(r0, 0x4b36) fcntl$setsig(r0, 0xa, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x10042, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000280)) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000002c0)) ioctl$KDADDIO(r0, 0x4b34, 0x7fff) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000300)=0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000380)={0x7aee, 0x0, 0x404, 0x401, 0x3, "b8d42975873da6c968aeb92b059ac2269f9bbb", 0x9, 0x400}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f00000004c0)={"957e27a27fbc94a42b3db862", &(0x7f0000000400)="0eadb876746a45ad06b72dbeb6e5440ae4197acc566aff284f1095982bbfe605432e5cce8f7d1dadf16f850fa452bac95d160947f7799ca86ba50fb034", 0x3d, 0x81, &(0x7f0000000440)={0xa, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, "5c5454c5", 0xff, "22129df9", 0xff, 0x1f, 0x0, "769eb3", "4c4df1fd48aace0617c6e64239cb39f557c052628240ac736567451ea2433c0504beaea050129ea09824d277f195"}, 0x1, 0x1, 0x1400, &(0x7f0000000480)}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000500)) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000540)) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x1f, 0x200) ioctl$TCSBRK(r5, 0x5409, 0x5) ioctl$TIOCSBRK(r1, 0x5427) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x7) 09:52:59 executing program 2: r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x3, 0x0, 0x19, 0x0, 0x7, 0x20, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x5, 0xffff}, 0x40010, 0x0, 0x9, 0x4, 0x100000000, 0x4, 0xffff, 0x0, 0x1, 0x0, 0x100000000}, r0, 0x2, r1, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xb1, 0x5, 0x2, 0x4f, 0x0, 0x3, 0x1401, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x40, 0x7}, 0x41008, 0x80, 0x8, 0x9, 0x6, 0x8, 0x0, 0x0, 0x200, 0x0, 0xffff}, r3, 0x4, r2, 0x10) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00000005c0)={0x178, 0x2, &(0x7f00000001c0)="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"}) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x7, 0x9, 0xbe, 0x1f, 0x0, 0x3, 0xc0000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3}, 0x40420, 0x7ff, 0x4, 0x9, 0x5, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x20}, 0xffffffffffffffff, 0x7, r2, 0x1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x216080, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f00000006c0)={0xd, 0xfffffffa}) syz_open_procfs$namespace(r0, &(0x7f0000000700)='ns/user\x00') mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x810, r2, 0x701) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x200, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000780)={0x1, 0x1, 0x17}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x77d0, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000800)) r8 = syz_io_uring_setup(0x111d, &(0x7f0000000840)={0x0, 0x66ef, 0x0, 0x3, 0x38d, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sendfile(r8, 0xffffffffffffffff, 0x0, 0x3) 09:52:59 executing program 3: r0 = socket$inet6(0xa, 0xe, 0x400000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x6d}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = memfd_secret(0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000140)=0x10001, 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) getsockopt$inet6_int(r3, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_emit_ethernet(0xa2, &(0x7f0000000240)={@random="2188ff6da571", @random="d701784513d4", @val={@val={0x9100, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x2bec9a255052e5a, '^', "6096c8", 0x6003, "74bc163cbed3f109c12fb4ee63d00483ad1a7d723b01b32eda91aafd865c9c5d023765dd1d4759eb96ebd5767f653ca8f577929cc952b04f54ac68f4393ffcfef779f8acb84f5d73f6403a7d7d6c12b8cd506301235ea1aae60b35d452c7566cccc432024e0ef4b3222f7747c37e2c3bdf59cefde347f5c3fba6c576613c4baad5b818d3"}}}}}, &(0x7f0000000300)={0x1, 0x2, [0x8ed, 0xe2d, 0xb60, 0xeaa]}) sendto(r3, &(0x7f0000000340)="c82f78c21980654e363e420a7bf6a613d7e142105a720d0c6800fdc1125b03e9dc8a374c042a3cdcb9b47cd6f8cdbea3682a16c1a370ef44f60dcdca7d2f0f6ea2b4189e3c58694cb915a61a41a1c60a4cd1338fa7a6eb5a19fee41cf0d1c336bb80db279b3de6a159cc51cedfdd91c9ce74f9d37c0a91ca91f0a32f5156c2646a4638239fbe6535ff5f6b42dc44e3df42e4df4975c1f24c6138fb8217bcb1cce40a53d4b96ba00e32b5c5a3846a37bc4c1a970621", 0xb5, 0x4000, &(0x7f0000000400)=@in={0x2, 0x56e0, @multicast2}, 0x80) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x404242, 0x0) recvfrom(r4, &(0x7f00000004c0)=""/4096, 0x1000, 0x10042, &(0x7f00000014c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x3, 0x80, 0x7, "58b5efe584228b73b2b8d4be7db7bdfbf11579a7cba074574edce1934e93414686835fdd440f4a7df6eadf24bc62a7d4dc4cf15c5f203baed6a19da9fdda83", 0xa}, 0x80) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000001540)=0x5, 0x4) sendmsg$inet(r4, &(0x7f0000001680)={&(0x7f0000001580)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001640)=[{&(0x7f00000015c0)="eca270e43acde2e085f87a2f4ead9771e7bcc6ccc8cfcbedc30d6854fefa1c0749b2fc0d90edeae5e8c03479fe87c510ba1ecfe9c35fc229e10795bf8380752368edbfe23f89c5060873c2fb", 0x4c}], 0x1}, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x8, 0x0, 0xffffff80, 0x95b5, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @remote, {[@noop, @end, @timestamp={0x44, 0x28, 0x5e, 0x0, 0xc, [0x7, 0x3, 0x9, 0x1, 0x3465, 0x8, 0x0, 0x80000000, 0x2]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x3c}}, 0x0) r6 = getpgid(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001880)={{0x1, 0x1, 0x18, r0, {0x32c7}}, './file0\x00'}) kcmp(r6, 0x0, 0x6, r7, r3) [ 72.222724] audit: type=1400 audit(1664531579.910:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:52:59 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x73}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff4f}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1f}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2c}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xbd}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004880}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x85, 0x7fffffff, 0x24, @remote, @local, 0x20, 0x8, 0x80000001, 0xd65c}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x80, 0x1, 0x7f, 0x3, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x65, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xcd, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast2]}, @ssrr={0x89, 0x13, 0x2a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x1, 0xfff, {{0x1f, 0x4, 0x3, 0x18, 0x7c, 0x67, 0x0, 0x81, 0x4, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x13, 0x26, [@multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x24}, @empty]}, @lsrr={0x83, 0x27, 0x77, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @private=0xa010101, @local, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x29, 0x3, 0x9, [{@remote}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}]}, @timestamp_prespec={0x44, 0xc, 0xb6, 0x3, 0x5, [{@rand_addr=0x64010100, 0x4}]}, @ssrr={0x89, 0x3, 0x84}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x994bf8a4ee7a3026}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x154, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x1) getsockname$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x200, 0x1, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004805) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc806}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000050) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) write$binfmt_elf32(r6, &(0x7f0000000cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x20, 0xf5, 0x7, 0x4, 0x2, 0x3e, 0x1, 0x1d4, 0x38, 0x156, 0x4, 0x1, 0x20, 0x1, 0x1, 0xffbc, 0x5}, [{0x6, 0x800, 0x4, 0x73, 0xfffffffc, 0x8, 0xe0b, 0x7ff}, {0x6, 0x5, 0x90, 0x8000, 0x0, 0x274, 0x100, 0x8}], "0092c2571da86b4520ea4e1ee2b5d75b8e64ac59fd7b924dc28b0cfb192d4eebb0936261b0c4b8427e89ada8877f3049517c8a527f6412b41f0c4d8d2b9abef8078b62cc060f913b857b0e42e46e6c488babee9b98fbb0b20cc423ffa0ce3fae8a94c8a80197906299ae805e3395ad32c40a3520627c9242ba48ecab365a50fc80cab93b920def71cebf13e151d4ad8637f53eb897a87569b55564920c5e7877bdc4af996a584934b76f942e42af576dba", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x629) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3}}}}}, 0x28}}, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20000844) 09:52:59 executing program 5: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000540)=""/41, 0x29}, {&(0x7f0000000580)=""/69, 0x45}], 0x3, &(0x7f0000000640)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0xf0}}], 0x1, 0x0, &(0x7f0000000780)={0x0, 0x989680}) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() socketpair(0x26, 0x3, 0x8, &(0x7f0000000880)={0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x4, 0x1c4b) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/net\x00') r11 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000940)=0x0) r13 = getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000080)="c8bad6c936f9d5b143750cd37b320d163018edbfa9a86556b94d168d2a6d0c79faca6fbace95aaa0b7e4f2afd764a468b481a74a030c46acf09cb1058afeda0adb66fa580c32dd9a39a935fc972051ca1dd81506ca8fedec32310ac73e2ab556507784ab6239c5d049d9c1eec1cd4b4baa7b3f894ed06484ca77c42f27d67fb1f3d4eb622c0e6950bcf7cc81bb1f066dfc96c273abaef82850c73779ffae7e981dd38b8604fc9df28f8fd5bf32358291dde15fd6f76efd5ec1fda03cfdcde90d6f8081b0260245699f9c44696bfcfaaddb26681e27a29858db5980caf0c6b9b2f4e19075", 0xe4}, {&(0x7f0000000180)="6f00f36e2cee71224d53ae809a483cb4587465c0c1a4c901c5d51d0ba9d761ef1099421a3e4a6e32334938e2d71e3bde482df85c641af1cdbf67bd5ea0d097be9d540800e84f7de4498af287422db7efa067805040eeedd6f9586284516fa73ea88cf7419a64ae9dd9b9dc1d35a509cddcd18380a6560d29759858b0d68d724e1c913f264e56b1c690a7", 0x8a}, {&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000340)="5a7ef2c9086aa8cc51bc622bc05b1765079292781a976d3a", 0x18}], 0x4, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xee01}}}], 0xc8, 0x4}, 0x80) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000b40)={&(0x7f0000000ac0)=""/78, 0x4e, 0x0, 0x6}) r14 = openat$cgroup_ro(r3, &(0x7f0000000b80)='cgroup.kill\x00', 0x0, 0x0) accept(r14, &(0x7f0000000bc0)=@nfc, &(0x7f0000000c40)=0x80) r15 = syz_open_dev$vcsn(&(0x7f0000000c80), 0x100, 0x200000) ioctl$FS_IOC_GETFLAGS(r15, 0x80086601, &(0x7f0000000cc0)) r16 = syz_mount_image$vfat(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0x4, 0x6, &(0x7f0000001000)=[{&(0x7f0000000d80)="e2e453edb753a77b88d0e2d36f3c556f775fb59a9f2f6bf6f7cc620cc765cd2258be9a6ada760b3e60414aa3e05af1d4bf98f821da886f58ab7d3edf5ddde7882f902965", 0x44, 0x20}, {&(0x7f0000000e00)="390b21927e06b9502bb0e634a4c201ead8e707018710a1c74b737d6e5170965847723507b3c61ae78e166097fe6043069027b93cf26f50a8528f668b", 0x3c, 0x400}, {&(0x7f0000000e40)="94b9e6c5557a84763ae9c1a451ec54b331eff8142eb1b5080bf5485900aa8d8a3478e22f68b14ad8927ad3b946a2d2e2ccc39aac3446f17427dbaf7680bf1969432a0306a2a5f0c53152593ce504ba5e48e13d7741f6e29514fd4372a535e8fb453fd7a2518c45d5a7d40396474f02eab2cc0ceb5bc5c22f73e389fd4502", 0x7e, 0x6}, {&(0x7f0000000ec0)="85d284a946f7cac9db87d1dda763a79a14c34988c53787c0e5875f502ce2f50d787954e18e77f19e600c4850012e523df683f3771798c5a396361379a03b60e302b0f9006e8d53009349bacf199307fc2ef28ea5972760f8a8ba94ffd4317a8f7927a7d506c03e805e6cc90636b41a7d99a2c7cfdf7738e80049669bed363c56239769abcae8b38ba12f04491ff787dd241eb63a6b94c2759afe3711111fbb0ccad66e2695", 0xa5, 0x3}, {&(0x7f0000000f80)="4bd031bd6c110c9f9f", 0x9, 0x7bb}, {&(0x7f0000000fc0), 0x0, 0x7}], 0x810000, &(0x7f00000010c0)={[{@uni_xlateno}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@utf8}], [{@fsname={'fsname', 0x3d, '+!{P'}}, {@seclabel}, {@dont_appraise}, {@euid_gt={'euid>', r4}}, {@subj_user={'subj_user', 0x3d, '['}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@appraise_type}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffc}}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001280)={{0x1, 0x1, 0x18, r16, {0x0, r17}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000012c0)={0x0, 0x1, [0x8, 0x4, 0x1ff, 0x1, 0x9, 0x4]}) 09:52:59 executing program 7: close(0xffffffffffffffff) close(0xffffffffffffffff) finit_module(0xffffffffffffffff, &(0x7f0000000000)='%.\x00', 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='(%!$%\x00', &(0x7f0000000100)='&]\x00', &(0x7f0000000140)='[@**{\'\x00', &(0x7f0000000180)='%.\x00', &(0x7f00000001c0)='&b(^$\\@]@\'&@@%\x00', &(0x7f0000000200)='%.\x00', &(0x7f0000000240)='%.\x00'], &(0x7f0000000500)=[&(0x7f00000002c0)='%.\x00', &(0x7f0000000300)='%.\x00', &(0x7f0000000340)='%.\x00', &(0x7f0000000380)='%.\x00', &(0x7f00000003c0)='%.\x00', &(0x7f0000000400)='\'\x00', &(0x7f0000000440)='%@$%\\/\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='%.\x00'], 0x800) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x4]}, 0x8, 0x80800) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000005c0), 0xfffffffffffff000, 0x100) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x1, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$CDROMREADMODE1(r2, 0x530d, &(0x7f0000000740)={0x48, 0x35, 0x54, 0x5, 0x4, 0xd0}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000011c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x64}}}}, ["", "", "", "", ""]}, 0x28}}, 0x40001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001340)={'filter\x00', 0x83, "73ab308ef5c55176dff344eeb01379f6432eb464f51e3e006d9e270a75394b8dd3c0b74a74e6273096083a0b853fe46a1a0d7b352e159e65589203603a8c0ccc3c3033bfb6def457eec89de0a17387de9259a8b5b3be464e1a60429989a61b27101c82a0ae34f4b9a9d98bd092afbdb09c5bc10f28af2f42161c5774aec66606802524"}, &(0x7f0000001400)=0xa7) r5 = openat(r2, &(0x7f0000001440)='./file0\x00', 0x507000, 0x4) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f00000014c0)={0x7fff, 0x30, '\x00', 0x1, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = pidfd_getfd(r5, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000001540)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:52:59 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f0000000140)=""/170, 0xaa}, {&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/66, 0x42}, {&(0x7f0000001380)=""/241, 0xf1}, {&(0x7f0000001480)=""/196, 0xc4}, {&(0x7f0000001580)=""/146, 0x92}, {&(0x7f0000001640)=""/171, 0xab}], 0x9, &(0x7f00000017c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/131, 0x83}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001a80), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/80, 0x50}, {&(0x7f0000001b80)=""/197, 0xc5}], 0x2, &(0x7f0000001cc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x3, 0x0, &(0x7f0000001e00)) newfstatat(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f00)={0x0}, &(0x7f0000001f40)=0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001f80)={0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001fc0)={{0x2, 0xffffffffffffffff, 0xee00, r2, r8, 0x48, 0x2}, 0x4, 0x1, 0x80000001, 0x1a63, r9, r10, 0x7}) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002040), 0x40000, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/locks\x00', 0x0, 0x0) r13 = syz_open_dev$vcsa(&(0x7f00000020c0), 0xffffffff, 0x10000) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002100), 0xc0080, 0x0) r15 = accept$inet(0xffffffffffffffff, &(0x7f0000002140)={0x2, 0x0, @private}, &(0x7f0000002180)=0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, &(0x7f0000002200)={0x7fff, 0x0, &(0x7f00000021c0)=[r12, r13, r0, r14, r15, r3]}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000002240)={{0x1, 0x1, 0x18, r11, {0x2}}, './file0\x00'}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r16, 0x3309) openat(r4, &(0x7f0000002280)='./file0\x00', 0x4d0100, 0x20) umount2(&(0x7f00000022c0)='./file0\x00', 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002300), &(0x7f0000002340)=0xc) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0xfffffffffffffff7) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) accept4$inet(r6, &(0x7f0000002380)={0x2, 0x0, @multicast2}, &(0x7f00000023c0)=0x10, 0x800) shmctl$SHM_UNLOCK(0x0, 0xc) [ 73.528949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.530323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.532151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.533140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.534673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.536547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.540464] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.542791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.545809] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.545892] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.548182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.553212] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.556800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.558594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.561953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.564440] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.567321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.570412] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.572658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.580382] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.586105] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.648160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.650272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.651853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.653442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.655716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.656966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.659908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.667756] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.668976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.684610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.686284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.693327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.693478] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.696156] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.697732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.697856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.700007] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.702036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.704330] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.707105] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.707390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.741359] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.745389] Bluetooth: hci3: HCI_REQ-0x0c1a [ 73.756795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.764781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.769776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.772808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.779325] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.597008] Bluetooth: hci0: command 0x0409 tx timeout [ 75.598103] Bluetooth: hci2: command 0x0409 tx timeout [ 75.598121] Bluetooth: hci1: command 0x0409 tx timeout [ 75.660784] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 75.725613] Bluetooth: hci5: command 0x0409 tx timeout [ 75.788613] Bluetooth: hci7: command 0x0409 tx timeout [ 75.789837] Bluetooth: hci3: command 0x0409 tx timeout [ 75.790877] Bluetooth: hci4: command 0x0409 tx timeout [ 77.644705] Bluetooth: hci2: command 0x041b tx timeout [ 77.645854] Bluetooth: hci1: command 0x041b tx timeout [ 77.646476] Bluetooth: hci0: command 0x041b tx timeout [ 77.772886] Bluetooth: hci5: command 0x041b tx timeout [ 77.836610] Bluetooth: hci4: command 0x041b tx timeout [ 77.837214] Bluetooth: hci3: command 0x041b tx timeout [ 77.837804] Bluetooth: hci7: command 0x041b tx timeout [ 79.692580] Bluetooth: hci0: command 0x040f tx timeout [ 79.692619] Bluetooth: hci1: command 0x040f tx timeout [ 79.693045] Bluetooth: hci2: command 0x040f tx timeout [ 79.820807] Bluetooth: hci5: command 0x040f tx timeout [ 79.884694] Bluetooth: hci7: command 0x040f tx timeout [ 79.884745] Bluetooth: hci3: command 0x040f tx timeout [ 79.885137] Bluetooth: hci4: command 0x040f tx timeout [ 80.716693] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 81.740598] Bluetooth: hci2: command 0x0419 tx timeout [ 81.741764] Bluetooth: hci1: command 0x0419 tx timeout [ 81.742481] Bluetooth: hci0: command 0x0419 tx timeout [ 81.868914] Bluetooth: hci5: command 0x0419 tx timeout [ 81.932613] Bluetooth: hci4: command 0x0419 tx timeout [ 81.934104] Bluetooth: hci3: command 0x0419 tx timeout [ 81.935049] Bluetooth: hci7: command 0x0419 tx timeout [ 85.324684] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 87.994198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.996359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.998026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.004403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.022678] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.023985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.030582] Bluetooth: hci6: HCI_REQ-0x0c1a [ 90.061169] Bluetooth: hci6: command 0x0409 tx timeout [ 92.108956] Bluetooth: hci6: command 0x041b tx timeout [ 94.156877] Bluetooth: hci6: command 0x040f tx timeout [ 96.205414] Bluetooth: hci6: command 0x0419 tx timeout [ 127.157757] loop5: detected capacity change from 0 to 7 [ 127.171045] FAT-fs (loop5): Unrecognized mount option "fsname=+!{P" or missing value [ 127.425637] loop5: detected capacity change from 0 to 7 [ 127.426911] FAT-fs (loop5): Unrecognized mount option "fsname=+!{P" or missing value [ 127.688573] audit: type=1400 audit(1664531635.376:7): avc: denied { open } for pid=3614 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.737173] audit: type=1400 audit(1664531635.425:8): avc: denied { kernel } for pid=3614 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.870237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.873985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.875421] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.879094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.881035] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.882253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.889590] Bluetooth: hci1: HCI_REQ-0x0c1a [ 136.908629] Bluetooth: hci1: command 0x0409 tx timeout [ 137.164882] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 137.356572] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 138.957169] Bluetooth: hci1: command 0x041b tx timeout [ 139.596337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.598207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.600458] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.603424] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.605252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.607492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.611708] Bluetooth: hci2: HCI_REQ-0x0c1a [ 141.005658] Bluetooth: hci1: command 0x040f tx timeout [ 141.644601] Bluetooth: hci2: command 0x0409 tx timeout [ 141.772575] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 143.052605] Bluetooth: hci1: command 0x0419 tx timeout [ 143.692569] Bluetooth: hci2: command 0x041b tx timeout [ 145.740678] Bluetooth: hci2: command 0x040f tx timeout [ 146.061804] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 147.788561] Bluetooth: hci2: command 0x0419 tx timeout [ 150.476600] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 154.764696] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 157.011407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.013473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.016790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.020705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.022396] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.026783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.031555] Bluetooth: hci3: HCI_REQ-0x0c1a [ 159.052624] Bluetooth: hci3: command 0x0409 tx timeout [ 161.100649] Bluetooth: hci3: command 0x041b tx timeout [ 163.148617] Bluetooth: hci3: command 0x040f tx timeout [ 165.196620] Bluetooth: hci3: command 0x0419 tx timeout [ 187.276591] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.277314] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.277845] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.278549] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.279305] Call Trace: [ 187.279576] [ 187.279796] __schedule+0x893/0x2470 [ 187.280369] ? io_schedule_timeout+0x150/0x150 [ 187.281367] ? do_raw_spin_lock+0x121/0x260 [ 187.281811] ? rwlock_bug.part.0+0x90/0x90 [ 187.282610] schedule+0xda/0x1b0 [ 187.282955] rescuer_thread+0x851/0xdb0 [ 187.283346] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.283845] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.284331] ? lockdep_hardirqs_on+0x79/0x100 [ 187.284801] ? worker_thread+0x1260/0x1260 [ 187.285218] kthread+0x2ed/0x3a0 [ 187.285571] ? kthread_complete_and_exit+0x40/0x40 [ 187.286054] ret_from_fork+0x22/0x30 [ 187.286434] [ 187.286691] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.287294] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.287810] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.288550] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.289331] Call Trace: [ 187.289603] [ 187.289831] __schedule+0x893/0x2470 [ 187.290208] ? io_schedule_timeout+0x150/0x150 [ 187.290677] ? do_raw_spin_lock+0x121/0x260 [ 187.291101] ? rwlock_bug.part.0+0x90/0x90 [ 187.291538] schedule+0xda/0x1b0 [ 187.291880] rescuer_thread+0x851/0xdb0 [ 187.292271] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.292796] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.293275] ? lockdep_hardirqs_on+0x79/0x100 [ 187.293737] ? worker_thread+0x1260/0x1260 [ 187.294154] kthread+0x2ed/0x3a0 [ 187.294487] ? kthread_complete_and_exit+0x40/0x40 [ 187.294994] ret_from_fork+0x22/0x30 [ 187.295370] [ 187.295620] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.296236] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.296764] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.297481] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.298294] Call Trace: [ 187.298571] [ 187.298800] __schedule+0x893/0x2470 [ 187.299185] ? io_schedule_timeout+0x150/0x150 [ 187.299648] ? do_raw_spin_lock+0x121/0x260 [ 187.300070] ? rwlock_bug.part.0+0x90/0x90 [ 187.300500] schedule+0xda/0x1b0 [ 187.300868] rescuer_thread+0x851/0xdb0 [ 187.301257] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.301753] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.302231] ? lockdep_hardirqs_on+0x79/0x100 [ 187.302689] ? worker_thread+0x1260/0x1260 [ 187.303100] kthread+0x2ed/0x3a0 [ 187.303431] ? kthread_complete_and_exit+0x40/0x40 [ 187.303921] ret_from_fork+0x22/0x30 [ 187.304296] [ 187.304552] INFO: task netns:6 blocked for more than 143 seconds. [ 187.305124] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.305642] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.306353] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.307152] Call Trace: [ 187.307399] [ 187.307642] __schedule+0x893/0x2470 [ 187.308008] ? io_schedule_timeout+0x150/0x150 [ 187.308451] ? do_raw_spin_lock+0x121/0x260 [ 187.308887] ? rwlock_bug.part.0+0x90/0x90 [ 187.309307] schedule+0xda/0x1b0 [ 187.309668] rescuer_thread+0x851/0xdb0 [ 187.310058] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.310554] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.311035] ? lockdep_hardirqs_on+0x79/0x100 [ 187.311470] ? worker_thread+0x1260/0x1260 [ 187.311906] kthread+0x2ed/0x3a0 [ 187.312233] ? kthread_complete_and_exit+0x40/0x40 [ 187.312725] ret_from_fork+0x22/0x30 [ 187.313098] [ 187.313325] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.313955] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.314447] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.315165] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 187.315945] Workqueue: 0x0 (events_highpri) [ 187.316366] Call Trace: [ 187.316658] [ 187.316884] __schedule+0x893/0x2470 [ 187.317254] ? io_schedule_timeout+0x150/0x150 [ 187.317732] schedule+0xda/0x1b0 [ 187.318065] worker_thread+0x15f/0x1260 [ 187.318467] ? process_one_work+0x16a0/0x16a0 [ 187.318921] kthread+0x2ed/0x3a0 [ 187.319249] ? kthread_complete_and_exit+0x40/0x40 [ 187.319733] ret_from_fork+0x22/0x30 [ 187.320108] [ 187.320332] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.320974] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.321472] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.322204] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.322991] Call Trace: [ 187.323236] [ 187.323460] __schedule+0x893/0x2470 [ 187.323843] ? io_schedule_timeout+0x150/0x150 [ 187.324278] ? do_raw_spin_lock+0x121/0x260 [ 187.324718] ? rwlock_bug.part.0+0x90/0x90 [ 187.325131] schedule+0xda/0x1b0 [ 187.325458] rescuer_thread+0x851/0xdb0 [ 187.325862] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.326330] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.326820] ? lockdep_hardirqs_on+0x79/0x100 [ 187.327243] ? worker_thread+0x1260/0x1260 [ 187.327666] kthread+0x2ed/0x3a0 [ 187.327988] ? kthread_complete_and_exit+0x40/0x40 [ 187.328460] ret_from_fork+0x22/0x30 [ 187.328850] [ 187.329072] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.329729] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.330219] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.330933] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.331711] Call Trace: [ 187.331954] [ 187.332174] __schedule+0x893/0x2470 [ 187.332575] ? io_schedule_timeout+0x150/0x150 [ 187.333005] ? mark_held_locks+0x9e/0xe0 [ 187.333389] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.333882] schedule+0xda/0x1b0 [ 187.334207] rcu_tasks_one_gp+0x3db/0xc10 [ 187.334647] rcu_tasks_kthread+0x80/0xa0 [ 187.335032] ? rcu_tasks_postscan+0x10/0x10 [ 187.335441] kthread+0x2ed/0x3a0 [ 187.335787] ? kthread_complete_and_exit+0x40/0x40 [ 187.336248] ret_from_fork+0x22/0x30 [ 187.336650] [ 187.336876] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.337483] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.337990] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.338694] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.339444] Workqueue: 0x0 (events_highpri) [ 187.339877] Call Trace: [ 187.340115] [ 187.340331] __schedule+0x893/0x2470 [ 187.340730] ? io_schedule_timeout+0x150/0x150 [ 187.341167] schedule+0xda/0x1b0 [ 187.341490] worker_thread+0x15f/0x1260 [ 187.341909] ? process_one_work+0x16a0/0x16a0 [ 187.342338] kthread+0x2ed/0x3a0 [ 187.342679] ? kthread_complete_and_exit+0x40/0x40 [ 187.343140] ret_from_fork+0x22/0x30 [ 187.343531] [ 187.343756] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.344366] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.344883] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.345599] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.346358] Call Trace: [ 187.346616] [ 187.346834] __schedule+0x893/0x2470 [ 187.347189] ? io_schedule_timeout+0x150/0x150 [ 187.347635] ? do_raw_spin_lock+0x121/0x260 [ 187.348038] ? rwlock_bug.part.0+0x90/0x90 [ 187.348447] schedule+0xda/0x1b0 [ 187.348796] rescuer_thread+0x851/0xdb0 [ 187.349175] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.349665] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.350122] ? lockdep_hardirqs_on+0x79/0x100 [ 187.350560] ? worker_thread+0x1260/0x1260 [ 187.350958] kthread+0x2ed/0x3a0 [ 187.351274] ? kthread_complete_and_exit+0x40/0x40 [ 187.351745] ret_from_fork+0x22/0x30 [ 187.352110] [ 187.352330] INFO: task kblockd:31 blocked for more than 143 seconds. [ 187.352936] Not tainted 6.0.0-rc7-next-20220929 #1 [ 187.353417] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.354116] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 187.354883] Call Trace: [ 187.355120] [ 187.355334] __schedule+0x893/0x2470 [ 187.355711] ? io_schedule_timeout+0x150/0x150 [ 187.356132] ? do_raw_spin_lock+0x121/0x260 [ 187.356565] ? rwlock_bug.part.0+0x90/0x90 [ 187.356963] schedule+0xda/0x1b0 [ 187.357289] rescuer_thread+0x851/0xdb0 [ 187.357686] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.358143] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.358625] ? lockdep_hardirqs_on+0x79/0x100 [ 187.359041] ? worker_thread+0x1260/0x1260 [ 187.359436] kthread+0x2ed/0x3a0 [ 187.359783] ? kthread_complete_and_exit+0x40/0x40 [ 187.360241] ret_from_fork+0x22/0x30 [ 187.360648] [ 187.360920] [ 187.360920] Showing all locks held in the system: [ 187.361491] 1 lock held by rcu_tasks_kthre/11: [ 187.361919] #0: ffffffff85406890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.362820] 1 lock held by khungtaskd/25: [ 187.363181] #0: ffffffff85407360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.364026] 3 locks held by systemd-journal/111: [ 187.364449] 1 lock held by in:imklog/202: [ 187.364836] #0: ffff88801022cae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 187.365616] 4 locks held by rs:main Q:Reg/204: [ 187.366025] 2 locks held by syz-executor/5314: [ 187.366427] [ 187.366606] ============================================= [ 187.366606] 09:54:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x100000000, 0x100) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x4, 0xf3, 0x7f, 0x0, 0x7f, 0x4240, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x8000}, 0x200, 0x8001, 0x400, 0x0, 0x2, 0x24, 0x9, 0x0, 0x0, 0x0, 0x1fd1d0c4}, 0x0, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 09:54:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf470, 0x6, @perf_config_ext={0x9, 0x4}, 0x40021, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be2f630}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = fcntl$getown(r0, 0x9) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x34, &(0x7f0000000280)={0x10, 0x3, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x181040, 0x0) clone3(&(0x7f0000000740)={0x14000, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000380), {0x2a}, &(0x7f0000000500)=""/198, 0xc6, &(0x7f0000000600)=""/175, &(0x7f00000006c0)=[r1, r2, r3, 0x0], 0x4, {r4}}, 0x58) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000480)={0x100008100, &(0x7f0000000040), &(0x7f0000000100), 0x0, {0x3}, &(0x7f00000003c0)=""/147, 0x93, &(0x7f0000000240)=""/28, &(0x7f0000000300)=[r1, 0x0, r6], 0x3}, 0x58) [ 192.338538] hrtimer: interrupt took 36128 ns [ 192.341104] ------------[ cut here ]------------ [ 192.341135] [ 192.341140] ====================================================== [ 192.341147] WARNING: possible circular locking dependency detected [ 192.341154] 6.0.0-rc7-next-20220929 #1 Not tainted [ 192.341167] ------------------------------------------------------ [ 192.341173] syz-executor.0/5319 is trying to acquire lock: [ 192.341185] ffffffff853faab8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 192.341254] [ 192.341254] but task is already holding lock: [ 192.341259] ffff88800f346820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 192.341310] [ 192.341310] which lock already depends on the new lock. [ 192.341310] [ 192.341315] [ 192.341315] the existing dependency chain (in reverse order) is: [ 192.341321] [ 192.341321] -> #3 (&ctx->lock){....}-{2:2}: [ 192.341348] _raw_spin_lock+0x2a/0x40 [ 192.341369] __perf_event_task_sched_out+0x53b/0x18d0 [ 192.341391] __schedule+0xedd/0x2470 [ 192.341419] schedule+0xda/0x1b0 [ 192.341445] exit_to_user_mode_prepare+0x114/0x1a0 [ 192.341468] syscall_exit_to_user_mode+0x19/0x40 [ 192.341493] do_syscall_64+0x48/0x90 [ 192.341525] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 192.341550] [ 192.341550] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 192.341578] _raw_spin_lock_nested+0x30/0x40 [ 192.341598] raw_spin_rq_lock_nested+0x1e/0x30 [ 192.341623] task_fork_fair+0x63/0x4d0 [ 192.341655] sched_cgroup_fork+0x3d0/0x540 [ 192.341682] copy_process+0x4183/0x6e20 [ 192.341702] kernel_clone+0xe7/0x890 [ 192.341721] user_mode_thread+0xad/0xf0 [ 192.341741] rest_init+0x24/0x250 [ 192.341764] arch_call_rest_init+0xf/0x14 [ 192.341795] start_kernel+0x4c6/0x4eb [ 192.341823] secondary_startup_64_no_verify+0xe0/0xeb [ 192.341850] [ 192.341850] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 192.341877] _raw_spin_lock_irqsave+0x39/0x60 [ 192.341898] try_to_wake_up+0xab/0x1930 [ 192.341924] up+0x75/0xb0 [ 192.341952] __up_console_sem+0x6e/0x80 [ 192.341982] console_unlock+0x46a/0x590 [ 192.342013] vprintk_emit+0x1bd/0x560 [ 192.342045] vprintk+0x84/0xa0 [ 192.342076] _printk+0xba/0xf1 [ 192.342097] regdb_fw_cb.cold+0x6c/0xa7 [ 192.342129] request_firmware_work_func+0x12e/0x240 [ 192.342166] process_one_work+0xa17/0x16a0 [ 192.342200] worker_thread+0x637/0x1260 [ 192.342232] kthread+0x2ed/0x3a0 [ 192.342259] ret_from_fork+0x22/0x30 [ 192.342283] [ 192.342283] -> #0 ((console_sem).lock){-...}-{2:2}: [ 192.342310] __lock_acquire+0x2a02/0x5e70 [ 192.342343] lock_acquire+0x1a2/0x530 [ 192.342374] _raw_spin_lock_irqsave+0x39/0x60 [ 192.342395] down_trylock+0xe/0x70 [ 192.342424] __down_trylock_console_sem+0x3b/0xd0 [ 192.342456] vprintk_emit+0x16b/0x560 [ 192.342487] vprintk+0x84/0xa0 [ 192.342519] _printk+0xba/0xf1 [ 192.342539] report_bug.cold+0x72/0xab [ 192.342570] handle_bug+0x3c/0x70 [ 192.342602] exc_invalid_op+0x14/0x50 [ 192.342636] asm_exc_invalid_op+0x16/0x20 [ 192.342659] group_sched_out.part.0+0x2c7/0x460 [ 192.342694] ctx_sched_out+0x8f1/0xc10 [ 192.342726] __perf_event_task_sched_out+0x6d0/0x18d0 [ 192.342748] __schedule+0xedd/0x2470 [ 192.342775] schedule+0xda/0x1b0 [ 192.342801] exit_to_user_mode_prepare+0x114/0x1a0 [ 192.342822] syscall_exit_to_user_mode+0x19/0x40 [ 192.342847] do_syscall_64+0x48/0x90 [ 192.342879] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 192.342904] [ 192.342904] other info that might help us debug this: [ 192.342904] [ 192.342909] Chain exists of: [ 192.342909] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 192.342909] [ 192.342939] Possible unsafe locking scenario: [ 192.342939] [ 192.342943] CPU0 CPU1 [ 192.342947] ---- ---- [ 192.342952] lock(&ctx->lock); [ 192.342962] lock(&rq->__lock); [ 192.342975] lock(&ctx->lock); [ 192.342987] lock((console_sem).lock); [ 192.342998] [ 192.342998] *** DEADLOCK *** [ 192.342998] [ 192.343002] 2 locks held by syz-executor.0/5319: [ 192.343015] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 192.343073] #1: ffff88800f346820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 192.343125] [ 192.343125] stack backtrace: [ 192.343130] CPU: 1 PID: 5319 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 192.343155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 192.343169] Call Trace: [ 192.343175] [ 192.343182] dump_stack_lvl+0x8b/0xb3 [ 192.343218] check_noncircular+0x263/0x2e0 [ 192.343250] ? format_decode+0x26c/0xb50 [ 192.343281] ? print_circular_bug+0x450/0x450 [ 192.343315] ? enable_ptr_key_workfn+0x20/0x20 [ 192.343345] ? __lockdep_reset_lock+0x180/0x180 [ 192.343379] ? format_decode+0x26c/0xb50 [ 192.343413] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 192.343448] __lock_acquire+0x2a02/0x5e70 [ 192.343491] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 192.343536] lock_acquire+0x1a2/0x530 [ 192.343569] ? down_trylock+0xe/0x70 [ 192.343603] ? lock_release+0x750/0x750 [ 192.343643] ? vprintk+0x84/0xa0 [ 192.343679] _raw_spin_lock_irqsave+0x39/0x60 [ 192.343701] ? down_trylock+0xe/0x70 [ 192.343733] down_trylock+0xe/0x70 [ 192.343764] ? vprintk+0x84/0xa0 [ 192.343797] __down_trylock_console_sem+0x3b/0xd0 [ 192.343832] vprintk_emit+0x16b/0x560 [ 192.343869] vprintk+0x84/0xa0 [ 192.343904] _printk+0xba/0xf1 [ 192.343926] ? record_print_text.cold+0x16/0x16 [ 192.343954] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 192.343981] ? lock_downgrade+0x6d0/0x6d0 [ 192.344016] ? report_bug.cold+0x66/0xab [ 192.344051] ? group_sched_out.part.0+0x2c7/0x460 [ 192.344088] report_bug.cold+0x72/0xab [ 192.344125] handle_bug+0x3c/0x70 [ 192.344159] exc_invalid_op+0x14/0x50 [ 192.344195] asm_exc_invalid_op+0x16/0x20 [ 192.344220] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 192.344260] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 192.344282] RSP: 0018:ffff8880382dfc48 EFLAGS: 00010006 [ 192.344300] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 192.344315] RDX: ffff88801b25d040 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 192.344330] RBP: ffff88802dce05c8 R08: 0000000000000005 R09: 0000000000000001 [ 192.344344] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f346800 [ 192.344359] R13: ffff88806cf3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 192.344381] ? group_sched_out.part.0+0x2c7/0x460 [ 192.344420] ? group_sched_out.part.0+0x2c7/0x460 [ 192.344483] ctx_sched_out+0x8f1/0xc10 [ 192.344522] __perf_event_task_sched_out+0x6d0/0x18d0 [ 192.344550] ? lock_is_held_type+0xd7/0x130 [ 192.344577] ? __perf_cgroup_move+0x160/0x160 [ 192.344599] ? set_next_entity+0x304/0x550 [ 192.344633] ? update_curr+0x267/0x740 [ 192.344670] ? lock_is_held_type+0xd7/0x130 [ 192.344698] __schedule+0xedd/0x2470 [ 192.344732] ? io_schedule_timeout+0x150/0x150 [ 192.344769] schedule+0xda/0x1b0 [ 192.344799] exit_to_user_mode_prepare+0x114/0x1a0 [ 192.344823] syscall_exit_to_user_mode+0x19/0x40 [ 192.344850] do_syscall_64+0x48/0x90 [ 192.344885] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 192.344911] RIP: 0033:0x7f22f29a3b19 [ 192.344927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.344949] RSP: 002b:00007f22eff19218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.344970] RAX: 0000000000000001 RBX: 00007f22f2ab6f68 RCX: 00007f22f29a3b19 [ 192.344985] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f22f2ab6f6c [ 192.344999] RBP: 00007f22f2ab6f60 R08: 000000000000000e R09: 0000000000000000 [ 192.345014] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f22f2ab6f6c [ 192.345028] R13: 00007ffd2b6e77df R14: 00007f22eff19300 R15: 0000000000022000 [ 192.345053] [ 192.459718] WARNING: CPU: 1 PID: 5319 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 192.461303] Modules linked in: [ 192.461856] CPU: 1 PID: 5319 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220929 #1 [ 192.463235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 192.465153] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 192.466112] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 192.469098] RSP: 0018:ffff8880382dfc48 EFLAGS: 00010006 [ 192.469897] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 192.470955] RDX: ffff88801b25d040 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 192.472011] RBP: ffff88802dce05c8 R08: 0000000000000005 R09: 0000000000000001 [ 192.473101] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f346800 [ 192.474158] R13: ffff88806cf3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 192.475202] FS: 00007f22eff19700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 192.476372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.477236] CR2: 00007fe5a841f3a4 CR3: 0000000015e2c000 CR4: 0000000000350ee0 [ 192.478331] Call Trace: [ 192.478732] [ 192.479081] ctx_sched_out+0x8f1/0xc10 [ 192.479692] __perf_event_task_sched_out+0x6d0/0x18d0 [ 192.480473] ? lock_is_held_type+0xd7/0x130 [ 192.481124] ? __perf_cgroup_move+0x160/0x160 [ 192.481808] ? set_next_entity+0x304/0x550 [ 192.482488] ? update_curr+0x267/0x740 [ 192.483088] ? lock_is_held_type+0xd7/0x130 [ 192.483731] __schedule+0xedd/0x2470 [ 192.484310] ? io_schedule_timeout+0x150/0x150 [ 192.485010] schedule+0xda/0x1b0 [ 192.485538] exit_to_user_mode_prepare+0x114/0x1a0 [ 192.486308] syscall_exit_to_user_mode+0x19/0x40 [ 192.487037] do_syscall_64+0x48/0x90 [ 192.487607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 192.488370] RIP: 0033:0x7f22f29a3b19 [ 192.488945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.491640] RSP: 002b:00007f22eff19218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.492772] RAX: 0000000000000001 RBX: 00007f22f2ab6f68 RCX: 00007f22f29a3b19 [ 192.493844] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f22f2ab6f6c [ 192.494957] RBP: 00007f22f2ab6f60 R08: 000000000000000e R09: 0000000000000000 [ 192.496008] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f22f2ab6f6c [ 192.497096] R13: 00007ffd2b6e77df R14: 00007f22eff19300 R15: 0000000000022000 [ 192.498268] [ 192.498720] irq event stamp: 362 [ 192.499351] hardirqs last enabled at (361): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 192.500751] hardirqs last disabled at (362): [] __schedule+0x1225/0x2470 [ 192.501978] softirqs last enabled at (332): [] __irq_exit_rcu+0x11b/0x180 [ 192.503237] softirqs last disabled at (215): [] __irq_exit_rcu+0x11b/0x180 [ 192.504492] ---[ end trace 0000000000000000 ]--- 09:54:59 executing program 3: io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="0b5aec8a2ca40822622212395d7dd54fdbf7a747ff8f5fef70b9b9f888661933556d643654c5a3395213d8d159292148965fb9ca8f25630dceb8137ea19e0db2", 0x40}]) r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1f, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r4 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x5, &(0x7f0000000600)=[{&(0x7f0000000300)="449c2db6cbbfbb9cb960f56fab8d60eb409e29", 0x13, 0x100000000}, {&(0x7f00000007c0)="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", 0x1000, 0x3}, {&(0x7f00000003c0)="565afaa1561ff713a1a56522b4afc2bff944b6c26dee0fc2cbb026ababdd78fad05fb4b9261ce6ad26625adb511c5348cf1320acbd720a1a8fb341195af1d95fe65290ecedbc3b3d7f15c4", 0x4b, 0x80}, {&(0x7f0000000440)="83710bf4ecd91d8f7eba2a808df237d81058118ba23c787c81fcf361e60daa72b966da8b3a34e1d356e23c1bced9b61018d3d080daa313f1841a1a1e1a92b18ccd2dc9c8483d66f8e641722f946bda49e643e16049af4777e6202051427215fa69b203984f9da53d59628e40f10432e4cd950191378544b80be4daddfb70657bf11ef61ba8d741d51c1cbcb530fd6352d4b404ea15e351f020a771e90da5431cbc116704395fb7341d46dfb52925046fe744d5b6e712dd0b093d9391fcc6cd924d51346d6a135c5cd45801e2c64bf1350498f89303a6cb912e67663ec478", 0xde, 0x3}, {&(0x7f0000000540)="973fe97b28624d0c98e7931ba077e9818a21634787561cd72ba33e6df85df29eb9f28668dc983bb961bd43d0dfcee8c439a30b491105eae425f96f5cc700073c747fb0aa985005d0e8bfbf0d9bd3a7184836e130426d1944dd67f43cc9143e2c498f7d5bd830a8645d3126bed4799eb41381dc146c1fe954439d1da247ab2ee7d7f23ccda396aacadf131b5d51e64b033e42fd98e737c18653c6424bec27592bc57ed89644b8709d3f46a71a83ee97f1476bec268f64902111ae55", 0xbb, 0xfffffffffffffffa}], 0x2850, &(0x7f0000000680)=ANY=[@ANYBLOB="757466383d302c726f6469722c756ef4e5786c6174653db7af6ab6fee6a857616d653d77696e6e742c750066383d302c61707072616973655f747970653d696d077369672c6d6521737572652c736d61636b66736861743d28085e2c657569643c", @ANYRESDEC=0x0, @ANYBLOB=',appraise,obj_user=)}2,audit,dont_measure,measure,smackfsfloor=,\x00']) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r6, 0x0, 0x29, 0x0, &(0x7f00000002c0)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r7, 0x0, 0x29, 0x0, &(0x7f00000002c0)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r8, 0x0, 0x29, 0x0, &(0x7f00000002c0)) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001bc0), 0x4000, 0x0) io_submit(r3, 0x8, &(0x7f0000001cc0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x401, 0xffffffffffffffff, &(0x7f0000000140)="083061e58b9ec5e07bcb5b2b1db6a08737b688f5e1e4f55f12fdf83f25ac260c6a44ee771a745e651bc70dfb948b30ae42ff699f9343335fadf5d1a2f18ed49e95f01b027bf6a407717b46d9cbbbe1639f19063d6948a37923033142022a340a4005a695181a860665c321215f3e136e05e20216f69fd86d59fef6a8710f2f4905e98993ecb5b7c255c2d55386bf", 0x8e, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x78, r4, &(0x7f00000017c0)="2dac3950f88c02762425b0636be936afd3ac77d1ccf95d640cff9803dca7362a9b91806f242b32dfa29998ebe54ee8c10cd54999de1f8c43752769974fd1cdfee02019f1957c3218b5625b596291d309a2546bd5c954b178069453f0269f2dcf11d5f8ca3bb498cac86678d2a300973eecaddc8b1cad75b4d24e6b5f547439c0057cb87551cc8238dc2180e41299e0d502059a3c63df151b6d02fd3eb703f3b063d2024fcc13d4e34c37d5573f522e99bef9fbfc5b9598452704ab", 0xbb, 0x4, 0x0, 0x0, r5}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x5, 0x6, r6, &(0x7f0000001880)="b490e2baa0396030e0a6c8bc9025b8f2afee49b4628722d1d416a48723eaa57c0ec27ea19a756156d29fff3691baeb13aba15efb27b23ed280bb23f637c2b90bb85483f4d712f2cb37f23596da7bdfaca3648c1fb7bbf651679f860788eb1fac6887a048ccb0703e539d7b4acfaebf073d4282d561c7966061f15325da34cab548896721005f88f15f5e418e04860fbf413713270e250814cbcfa443843f9e496edff156f613db510b9fa7be90a02978eccadf6655f86e0da60763a578eb61b1443b28ccd0e7ef794debca583c46f29bae67e9f6c44faded333f2bc0632096aa43a1da37af752c2116638ec42921dab850371a3c9914", 0xf6, 0xffffffff, 0x0, 0x1}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x1, 0x101, r0, &(0x7f00000019c0)="3d7ed8aee5f12d1b6019d79dc1fe04741c02c3da8ca7fdf1cd27eae0e4a3d391c023efec929006a2ecdd194fa9309d9fe2e6", 0x32, 0x9, 0x0, 0x3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x7, 0x4, r7, &(0x7f0000001a40), 0x0, 0x200, 0x0, 0x6}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x10d, r0, &(0x7f0000001ac0)="26c1ba4a86f0b12f57e021ea57fdff9781fef2fd81f2917e75c0db49888cd7eac4653bcc95152c66bb4630960f65b33c57bb619622aa5fc7e9f82c8fd162895ddfa78e8c32d829e4f8c38695e1050c166f251f711f", 0x55, 0xb8, 0x0, 0x2}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x3, 0x9, r8, &(0x7f0000001b80), 0x0, 0x9, 0x0, 0x1, r9}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0xbbf, r2, &(0x7f0000001c40)="2f428e57ba9589794d87ab0b673cdbff72fa719391558aac36001994fc92b3676b9276789d8048a4e9", 0x29, 0x7ff, 0x0, 0x3}]) io_submit(r1, 0x2, &(0x7f0000000780)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000)="762f6568418fe9150b", 0x9}]) 09:55:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xfffffffffffffe77, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 09:55:00 executing program 2: r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) [ 192.523888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x3, 0x0, 0x19, 0x0, 0x7, 0x20, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x5, 0xffff}, 0x40010, 0x0, 0x9, 0x4, 0x100000000, 0x4, 0xffff, 0x0, 0x1, 0x0, 0x100000000}, r0, 0x2, r1, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xb1, 0x5, 0x2, 0x4f, 0x0, 0x3, 0x1401, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x40, 0x7}, 0x41008, 0x80, 0x8, 0x9, 0x6, 0x8, 0x0, 0x0, 0x200, 0x0, 0xffff}, r3, 0x4, r2, 0x10) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00000005c0)={0x178, 0x2, &(0x7f00000001c0)="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"}) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x7, 0x9, 0xbe, 0x1f, 0x0, 0x3, 0xc0000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3}, 0x40420, 0x7ff, 0x4, 0x9, 0x5, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x20}, 0xffffffffffffffff, 0x7, r2, 0x1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x216080, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f00000006c0)={0xd, 0xfffffffa}) syz_open_procfs$namespace(r0, &(0x7f0000000700)='ns/user\x00') mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x810, r2, 0x701) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x200, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000780)={0x1, 0x1, 0x17}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x77d0, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000800)) r8 = syz_io_uring_setup(0x111d, &(0x7f0000000840)={0x0, 0x66ef, 0x0, 0x3, 0x38d, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) sendfile(r8, 0xffffffffffffffff, 0x0, 0x3) 09:55:00 executing program 7: close(0xffffffffffffffff) close(0xffffffffffffffff) finit_module(0xffffffffffffffff, &(0x7f0000000000)='%.\x00', 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='(%!$%\x00', &(0x7f0000000100)='&]\x00', &(0x7f0000000140)='[@**{\'\x00', &(0x7f0000000180)='%.\x00', &(0x7f00000001c0)='&b(^$\\@]@\'&@@%\x00', &(0x7f0000000200)='%.\x00', &(0x7f0000000240)='%.\x00'], &(0x7f0000000500)=[&(0x7f00000002c0)='%.\x00', &(0x7f0000000300)='%.\x00', &(0x7f0000000340)='%.\x00', &(0x7f0000000380)='%.\x00', &(0x7f00000003c0)='%.\x00', &(0x7f0000000400)='\'\x00', &(0x7f0000000440)='%@$%\\/\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='%.\x00'], 0x800) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x4]}, 0x8, 0x80800) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000005c0), 0xfffffffffffff000, 0x100) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x1, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$CDROMREADMODE1(r2, 0x530d, &(0x7f0000000740)={0x48, 0x35, 0x54, 0x5, 0x4, 0xd0}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000011c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x64}}}}, ["", "", "", "", ""]}, 0x28}}, 0x40001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001340)={'filter\x00', 0x83, "73ab308ef5c55176dff344eeb01379f6432eb464f51e3e006d9e270a75394b8dd3c0b74a74e6273096083a0b853fe46a1a0d7b352e159e65589203603a8c0ccc3c3033bfb6def457eec89de0a17387de9259a8b5b3be464e1a60429989a61b27101c82a0ae34f4b9a9d98bd092afbdb09c5bc10f28af2f42161c5774aec66606802524"}, &(0x7f0000001400)=0xa7) r5 = openat(r2, &(0x7f0000001440)='./file0\x00', 0x507000, 0x4) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f00000014c0)={0x7fff, 0x30, '\x00', 0x1, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = pidfd_getfd(r5, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000001540)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:55:00 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r2, r3, 0x0, 0xffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000140)={0x0, 0xfb, 0x86, 0x0, 0x1, "0ef8a6768e85e2e744ab6850984f38ca", "ca2de4950e4bc4b5ec306da61e093334cec4d429173c892ac9577ff80c0a99f4810b06cf4973ed314935db68ba663bb245c2e68e059469ef1bea476008e4d848162aa71017a72220dda7c0e12b1957f5940a9c27f2af07446ef40f425c07d384120cbd4b4f039ec098fa55bac0386954bc"}, 0x86, 0x1) utimensat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8100, &(0x7f0000000240)={0x3, 0x1e, 0x0, {r3}}, 0x20) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340)) 09:55:00 executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$unix(0x1, 0x2, 0x0) syz_io_uring_setup(0x1255, &(0x7f0000004780)={0x0, 0x0, 0x2, 0x2, 0x395, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000004800)=0x0, &(0x7f0000004840)) syz_io_uring_setup(0x186b, &(0x7f0000004880)={0x0, 0x0, 0x1, 0x0, 0x41, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000004900)=0x0, &(0x7f0000004940)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000049c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x101) syz_mount_image$nfs4(&(0x7f0000004a00), &(0x7f0000004a40)='./file0\x00', 0x3, 0x4, &(0x7f0000004d80)=[{&(0x7f0000004a80)="6d31c615ed3a5661a37888e4e675ffb7dd46828287fcfb8addcda61ebd561ab13d5dbb6ac455963981b62b01a9b67f72ee02f59492b9e2fa1d34e248625e888427b93441f1b74ac4c86f7697fc36d0", 0x4f, 0x1}, {&(0x7f0000004b40)="734a00a67edd0a0e5342709368afec20dac7cdd8fe04900b5dcae9d41bbf3b9511ae31114f2252e18bde8b981c49b0747dc9ffc094f997399e5731bb9906ae07903acacb4303133614475166a33abe8c1e67141e61b0d215b9bce9ba86f1840505a03934cf0ab13b966beddc12e700249143bb50d41917c70ba677e89cdaaf29c9cf9c2835f70398ee1b8cff2572355b43d5d440b7e2a14a6e7e69f30beedb9ab46f1fc6e9335ad761cfd3af41e529334a6eb4cbdf1719d7a63db33da9c970fdbce3c905edce78cb74215658ae3d6391bcab1f6482c57faa7008a2bff59eb966aaa29e942d207647b7e3e120ae6213486964b218", 0xf4, 0x800}, {&(0x7f0000004c40)="5ef8656a28adaa4c8ac769e001404d5935bdbd2b3fe98a632bd9a77f8aeef968c20d623981796c1ffa7a037130c686e87bc1e092d7185738a533a231c2fbe6feb604e524fd8fbd8ebecaadc0019e30498ec1cdbd5996cd27889c22aeaf22179354b8aab52b978fbfce452c5695e734e4db1918a944b64d227ef20bddeb8b9bdaccc73559da25c35c47443dd0b572f14d87db16739f447312fb1083063b52989f959ed89c3d26d53a93185997866e454aaa2e10c0a96436310769dd4dff3d057656d36489ab122d53c3fd8ed65e1af9c02c506cf847c197ab0c8ccfe5255fb3131802b928f52cd6", 0xe7, 0x7}, {&(0x7f0000004d40)="0a9b54f054ca932e2d218f0091cd33ff656f6d101481159e68067bdad8d2b69c7a5b1a1b0e60b02670556e5e195e2e37c45b6f4c36c46f33e7093a", 0x3b, 0x9}], 0x0, &(0x7f0000004e00)=ANY=[@ANYBLOB="2c2682e51a77f683282c002c00"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x2a0200, 0x20, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x10000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000005040)='./binderfs/custom1\x00', 0x2, 0x0) [ 192.554992] loop3: detected capacity change from 0 to 264192 [ 192.556722] ======================================================= [ 192.556722] WARNING: The mand mount option has been deprecated and [ 192.556722] and is ignored by this kernel. Remove the mand [ 192.556722] option from the mount to silence this warning. [ 192.556722] ======================================================= 09:55:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10e02, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) pipe2(&(0x7f0000003500)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13001b, r1, 0x10000000) getdents64(r1, &(0x7f00000001c0)=""/134, 0x86) 09:55:00 executing program 7: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x400) sendfile(r3, r2, &(0x7f0000000240)=0xffffffff, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) io_setup(0x20, &(0x7f0000000000)=0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x7ffffffff000}]) io_submit(r4, 0x0, &(0x7f0000000280)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0x40305839, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000000007cd18100000000008c272b6ae72a7a5452dd5c0000000089"]) pwrite64(r6, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r6, &(0x7f0000000180)="01", 0x1, 0x1000) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x4) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x200000000000000}]) [ 192.607464] loop1: detected capacity change from 0 to 8 09:55:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xfffffffffffffe77, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 192.610476] nfs4: Unknown parameter '&‚åwöƒ(' 09:55:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xfffffffffffffe77, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 192.631549] EXT4-fs warning (device sda): __ext4_ioctl:1238: Setting inode version is not supported with metadata_csum enabled. [ 192.660587] audit: type=1400 audit(1664531700.348:9): avc: denied { map } for pid=5333 comm="syz-executor.2" path="pipe:[15012]" dev="pipefs" ino=15012 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 192.687613] EXT4-fs warning (device sda): __ext4_ioctl:1238: Setting inode version is not supported with metadata_csum enabled. [ 192.720215] loop1: detected capacity change from 0 to 8 [ 192.722706] nfs4: Unknown parameter '&‚åwöƒ(' [ 192.743486] loop3: detected capacity change from 0 to 264192 09:55:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e5002571b970cf200cbc25cf34008400000000", @ANYRES16=0x0, @ANYBLOB="1f0a0000000000000000390000000c00280000290000001c005a801800019f42965f5f266f4d8014000300ffff000000000000030000001b000000bdb06bea4ccbd5a5381b0ce76777c61e966aa4ef701a14ec43e1580a61d04b8fa7d41ae54eafdf3d1826407045ca0a843f530700b52bd299cddaab52b70acb29a11c"], 0x3c}}, 0x4e1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x2, 0x1, 0x6, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="001405000000000500070000080000000600005f3b7d36eff900000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xfffffffffffffe77, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 09:55:00 executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$unix(0x1, 0x2, 0x0) syz_io_uring_setup(0x1255, &(0x7f0000004780)={0x0, 0x0, 0x2, 0x2, 0x395, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000004800)=0x0, &(0x7f0000004840)) syz_io_uring_setup(0x186b, &(0x7f0000004880)={0x0, 0x0, 0x1, 0x0, 0x41, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000004900)=0x0, &(0x7f0000004940)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000049c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x101) syz_mount_image$nfs4(&(0x7f0000004a00), &(0x7f0000004a40)='./file0\x00', 0x3, 0x4, &(0x7f0000004d80)=[{&(0x7f0000004a80)="6d31c615ed3a5661a37888e4e675ffb7dd46828287fcfb8addcda61ebd561ab13d5dbb6ac455963981b62b01a9b67f72ee02f59492b9e2fa1d34e248625e888427b93441f1b74ac4c86f7697fc36d0", 0x4f, 0x1}, {&(0x7f0000004b40)="734a00a67edd0a0e5342709368afec20dac7cdd8fe04900b5dcae9d41bbf3b9511ae31114f2252e18bde8b981c49b0747dc9ffc094f997399e5731bb9906ae07903acacb4303133614475166a33abe8c1e67141e61b0d215b9bce9ba86f1840505a03934cf0ab13b966beddc12e700249143bb50d41917c70ba677e89cdaaf29c9cf9c2835f70398ee1b8cff2572355b43d5d440b7e2a14a6e7e69f30beedb9ab46f1fc6e9335ad761cfd3af41e529334a6eb4cbdf1719d7a63db33da9c970fdbce3c905edce78cb74215658ae3d6391bcab1f6482c57faa7008a2bff59eb966aaa29e942d207647b7e3e120ae6213486964b218", 0xf4, 0x800}, {&(0x7f0000004c40)="5ef8656a28adaa4c8ac769e001404d5935bdbd2b3fe98a632bd9a77f8aeef968c20d623981796c1ffa7a037130c686e87bc1e092d7185738a533a231c2fbe6feb604e524fd8fbd8ebecaadc0019e30498ec1cdbd5996cd27889c22aeaf22179354b8aab52b978fbfce452c5695e734e4db1918a944b64d227ef20bddeb8b9bdaccc73559da25c35c47443dd0b572f14d87db16739f447312fb1083063b52989f959ed89c3d26d53a93185997866e454aaa2e10c0a96436310769dd4dff3d057656d36489ab122d53c3fd8ed65e1af9c02c506cf847c197ab0c8ccfe5255fb3131802b928f52cd6", 0xe7, 0x7}, {&(0x7f0000004d40)="0a9b54f054ca932e2d218f0091cd33ff656f6d101481159e68067bdad8d2b69c7a5b1a1b0e60b02670556e5e195e2e37c45b6f4c36c46f33e7093a", 0x3b, 0x9}], 0x0, &(0x7f0000004e00)=ANY=[@ANYBLOB="2c2682e51a77f683282c002c00"]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x2a0200, 0x20, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x10000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000005040)='./binderfs/custom1\x00', 0x2, 0x0) 09:55:00 executing program 7: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x400) sendfile(r3, r2, &(0x7f0000000240)=0xffffffff, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) io_setup(0x20, &(0x7f0000000000)=0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x7ffffffff000}]) io_submit(r4, 0x0, &(0x7f0000000280)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0x40305839, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000000007cd18100000000008c272b6ae72a7a5452dd5c0000000089"]) pwrite64(r6, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r6, &(0x7f0000000180)="01", 0x1, 0x1000) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)=0x4) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x200000000000000}]) [ 193.026887] EXT4-fs warning (device sda): __ext4_ioctl:1238: Setting inode version is not supported with metadata_csum enabled. [ 193.031833] loop1: detected capacity change from 0 to 8 [ 193.034769] nfs4: Unknown parameter '&‚åwöƒ(' [ 195.980661] Bluetooth: hci0: command 0x0406 tx timeout [ 195.981444] Bluetooth: hci5: command 0x0406 tx timeout [ 195.982172] Bluetooth: hci4: command 0x0406 tx timeout [ 195.982918] Bluetooth: hci7: command 0x0406 tx timeout VM DIAGNOSIS: 09:54:55 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff110030edede RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff854072a0 RBP=ffffffff854072a0 RSP=ffff88801876f690 R8 =0000000000000000 R9 =ffffffff85b06a17 R10=fffffbfff0b60d42 R11=0000000000000001 R12=ffff88800ff9b580 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff84251434 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fece0d33900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fece012b850 CR3=000000000fbd0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 350596ef32c1c84f 000000000013ab40 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 31df2022322dfcde 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005d R11=0000000000000001 R12=000000000000005d R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdb356f080 CR3=0000000015e2c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000600000003 0000000200000000 YMM02=0000000000000000 0000000000000000 657220726f747563 657865110a010001 YMM03=0000000000000000 0000000000000000 7a75662063657865 0900737472617473 YMM04=0000000000000000 0000000000000000 74616469646e6163 20636578650e007a YMM05=0000000000000000 0000000000000000 0a00656761697274 20636578650b0065 YMM06=0000000000000000 0000000000000000 636578650a006873 616d732063657865 YMM07=0000000000000000 0000000000000000 6e65672063657865 08006c61746f7420 YMM08=0000000000000000 0000000000000000 6509007374726174 73657220726f7475 YMM09=0000000000000000 0000000000000000 6320636578650e00 7a7a756620636578 YMM10=0000000000000000 0000000000000000 7420636578650b00 6574616469646e61 YMM11=0000000000000000 0000000000000000 73616d7320636578 650a006567616972 YMM12=0000000000000000 0000000000000000 6508006c61746f74 20636578650a0068 YMM13=0000000000000000 0000000000000000 696d20636578650d 006e656720636578 YMM14=0000000000000000 0000000000000000 6e69682063657865 0a00657a696d696e YMM15=0000000000000000 0000000000000000 0000736465657320 636578650a007374