Warning: Permanently added '[localhost]:27560' (ECDSA) to the list of known hosts. 2022/10/04 00:45:48 fuzzer started 2022/10/04 00:45:49 dialing manager at localhost:35095 syzkaller login: [ 44.297433] cgroup: Unknown subsys name 'net' [ 44.421893] cgroup: Unknown subsys name 'rlimit' 2022/10/04 00:46:03 syscalls: 2215 2022/10/04 00:46:03 code coverage: enabled 2022/10/04 00:46:03 comparison tracing: enabled 2022/10/04 00:46:03 extra coverage: enabled 2022/10/04 00:46:03 setuid sandbox: enabled 2022/10/04 00:46:03 namespace sandbox: enabled 2022/10/04 00:46:03 Android sandbox: enabled 2022/10/04 00:46:03 fault injection: enabled 2022/10/04 00:46:03 leak checking: enabled 2022/10/04 00:46:03 net packet injection: enabled 2022/10/04 00:46:03 net device setup: enabled 2022/10/04 00:46:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/04 00:46:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/04 00:46:03 USB emulation: enabled 2022/10/04 00:46:03 hci packet injection: enabled 2022/10/04 00:46:03 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/04 00:46:03 802.15.4 emulation: enabled 2022/10/04 00:46:03 fetching corpus: 50, signal 29570/31382 (executing program) 2022/10/04 00:46:03 fetching corpus: 100, signal 40293/43771 (executing program) 2022/10/04 00:46:03 fetching corpus: 150, signal 51296/56277 (executing program) 2022/10/04 00:46:03 fetching corpus: 200, signal 59049/65463 (executing program) 2022/10/04 00:46:03 fetching corpus: 250, signal 62741/70677 (executing program) 2022/10/04 00:46:03 fetching corpus: 300, signal 68014/77366 (executing program) 2022/10/04 00:46:03 fetching corpus: 350, signal 72491/83235 (executing program) 2022/10/04 00:46:04 fetching corpus: 400, signal 76154/88278 (executing program) 2022/10/04 00:46:04 fetching corpus: 450, signal 80514/93889 (executing program) 2022/10/04 00:46:04 fetching corpus: 500, signal 84859/99430 (executing program) 2022/10/04 00:46:04 fetching corpus: 550, signal 87462/103275 (executing program) 2022/10/04 00:46:04 fetching corpus: 600, signal 89544/106624 (executing program) 2022/10/04 00:46:04 fetching corpus: 650, signal 91858/110191 (executing program) 2022/10/04 00:46:04 fetching corpus: 700, signal 94183/113732 (executing program) 2022/10/04 00:46:04 fetching corpus: 750, signal 97259/117920 (executing program) 2022/10/04 00:46:05 fetching corpus: 800, signal 100066/121792 (executing program) 2022/10/04 00:46:05 fetching corpus: 850, signal 101957/124862 (executing program) 2022/10/04 00:46:05 fetching corpus: 900, signal 103755/127786 (executing program) 2022/10/04 00:46:05 fetching corpus: 950, signal 106957/131954 (executing program) 2022/10/04 00:46:05 fetching corpus: 1000, signal 108317/134481 (executing program) 2022/10/04 00:46:05 fetching corpus: 1050, signal 110159/137367 (executing program) 2022/10/04 00:46:05 fetching corpus: 1100, signal 111335/139622 (executing program) 2022/10/04 00:46:05 fetching corpus: 1150, signal 113670/142913 (executing program) 2022/10/04 00:46:05 fetching corpus: 1200, signal 115889/146072 (executing program) 2022/10/04 00:46:06 fetching corpus: 1250, signal 116915/148222 (executing program) 2022/10/04 00:46:06 fetching corpus: 1300, signal 117873/150264 (executing program) 2022/10/04 00:46:06 fetching corpus: 1350, signal 119956/153283 (executing program) 2022/10/04 00:46:06 fetching corpus: 1400, signal 121433/155739 (executing program) 2022/10/04 00:46:06 fetching corpus: 1450, signal 122811/158100 (executing program) 2022/10/04 00:46:06 fetching corpus: 1500, signal 124500/160666 (executing program) 2022/10/04 00:46:06 fetching corpus: 1550, signal 127062/163938 (executing program) 2022/10/04 00:46:06 fetching corpus: 1600, signal 129019/166693 (executing program) 2022/10/04 00:46:07 fetching corpus: 1650, signal 131955/170249 (executing program) 2022/10/04 00:46:07 fetching corpus: 1700, signal 134123/173075 (executing program) 2022/10/04 00:46:07 fetching corpus: 1750, signal 134781/174714 (executing program) 2022/10/04 00:46:07 fetching corpus: 1800, signal 135730/176619 (executing program) 2022/10/04 00:46:07 fetching corpus: 1850, signal 136711/178459 (executing program) 2022/10/04 00:46:07 fetching corpus: 1900, signal 138279/180754 (executing program) 2022/10/04 00:46:07 fetching corpus: 1950, signal 139805/183023 (executing program) 2022/10/04 00:46:07 fetching corpus: 2000, signal 140423/184617 (executing program) 2022/10/04 00:46:07 fetching corpus: 2050, signal 141457/186434 (executing program) 2022/10/04 00:46:07 fetching corpus: 2100, signal 143128/188788 (executing program) 2022/10/04 00:46:08 fetching corpus: 2150, signal 143940/190441 (executing program) 2022/10/04 00:46:08 fetching corpus: 2200, signal 144566/191976 (executing program) 2022/10/04 00:46:08 fetching corpus: 2250, signal 145451/193656 (executing program) 2022/10/04 00:46:08 fetching corpus: 2300, signal 147283/195975 (executing program) 2022/10/04 00:46:08 fetching corpus: 2350, signal 148488/197830 (executing program) 2022/10/04 00:46:08 fetching corpus: 2400, signal 149553/199622 (executing program) 2022/10/04 00:46:08 fetching corpus: 2450, signal 151030/201665 (executing program) 2022/10/04 00:46:08 fetching corpus: 2500, signal 151712/203156 (executing program) 2022/10/04 00:46:08 fetching corpus: 2550, signal 152632/204760 (executing program) 2022/10/04 00:46:08 fetching corpus: 2600, signal 153373/206259 (executing program) 2022/10/04 00:46:09 fetching corpus: 2650, signal 153998/207689 (executing program) 2022/10/04 00:46:09 fetching corpus: 2700, signal 154891/209331 (executing program) 2022/10/04 00:46:09 fetching corpus: 2750, signal 156157/211140 (executing program) 2022/10/04 00:46:09 fetching corpus: 2800, signal 158155/213385 (executing program) 2022/10/04 00:46:09 fetching corpus: 2850, signal 159496/215210 (executing program) 2022/10/04 00:46:09 fetching corpus: 2900, signal 160503/216814 (executing program) 2022/10/04 00:46:09 fetching corpus: 2950, signal 161293/218311 (executing program) 2022/10/04 00:46:10 fetching corpus: 3000, signal 162936/220301 (executing program) 2022/10/04 00:46:10 fetching corpus: 3050, signal 163308/221483 (executing program) 2022/10/04 00:46:10 fetching corpus: 3100, signal 164356/223056 (executing program) 2022/10/04 00:46:10 fetching corpus: 3150, signal 164766/224266 (executing program) 2022/10/04 00:46:10 fetching corpus: 3200, signal 165514/225659 (executing program) 2022/10/04 00:46:10 fetching corpus: 3250, signal 166267/227136 (executing program) 2022/10/04 00:46:10 fetching corpus: 3300, signal 167066/228591 (executing program) 2022/10/04 00:46:10 fetching corpus: 3350, signal 167617/229826 (executing program) 2022/10/04 00:46:10 fetching corpus: 3400, signal 168312/231167 (executing program) 2022/10/04 00:46:11 fetching corpus: 3450, signal 169321/232651 (executing program) 2022/10/04 00:46:11 fetching corpus: 3500, signal 170174/234074 (executing program) 2022/10/04 00:46:11 fetching corpus: 3550, signal 170991/235424 (executing program) 2022/10/04 00:46:11 fetching corpus: 3600, signal 172206/237005 (executing program) 2022/10/04 00:46:11 fetching corpus: 3650, signal 173133/238373 (executing program) 2022/10/04 00:46:11 fetching corpus: 3700, signal 174066/239744 (executing program) 2022/10/04 00:46:11 fetching corpus: 3750, signal 175193/241235 (executing program) 2022/10/04 00:46:11 fetching corpus: 3800, signal 175770/242401 (executing program) 2022/10/04 00:46:12 fetching corpus: 3850, signal 176859/243844 (executing program) 2022/10/04 00:46:12 fetching corpus: 3900, signal 177622/245094 (executing program) 2022/10/04 00:46:12 fetching corpus: 3950, signal 178051/246154 (executing program) 2022/10/04 00:46:12 fetching corpus: 4000, signal 179644/247783 (executing program) 2022/10/04 00:46:12 fetching corpus: 4050, signal 180609/249095 (executing program) 2022/10/04 00:46:12 fetching corpus: 4100, signal 181329/250228 (executing program) 2022/10/04 00:46:12 fetching corpus: 4150, signal 182086/251455 (executing program) 2022/10/04 00:46:12 fetching corpus: 4200, signal 183295/252860 (executing program) 2022/10/04 00:46:12 fetching corpus: 4250, signal 183962/254015 (executing program) 2022/10/04 00:46:13 fetching corpus: 4300, signal 185120/255367 (executing program) 2022/10/04 00:46:13 fetching corpus: 4350, signal 185691/256388 (executing program) 2022/10/04 00:46:13 fetching corpus: 4400, signal 186618/257636 (executing program) 2022/10/04 00:46:13 fetching corpus: 4450, signal 187510/258892 (executing program) 2022/10/04 00:46:13 fetching corpus: 4500, signal 188042/259967 (executing program) 2022/10/04 00:46:13 fetching corpus: 4550, signal 188694/261026 (executing program) 2022/10/04 00:46:13 fetching corpus: 4600, signal 189704/262273 (executing program) 2022/10/04 00:46:13 fetching corpus: 4650, signal 190425/263384 (executing program) 2022/10/04 00:46:14 fetching corpus: 4700, signal 191312/264523 (executing program) 2022/10/04 00:46:14 fetching corpus: 4750, signal 191617/265449 (executing program) 2022/10/04 00:46:14 fetching corpus: 4800, signal 192242/266465 (executing program) 2022/10/04 00:46:14 fetching corpus: 4850, signal 192892/267501 (executing program) 2022/10/04 00:46:14 fetching corpus: 4900, signal 193358/268418 (executing program) 2022/10/04 00:46:14 fetching corpus: 4950, signal 194219/269514 (executing program) 2022/10/04 00:46:14 fetching corpus: 5000, signal 194778/270531 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/271329 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/272134 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/272903 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/273663 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/274430 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/275178 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/275947 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/276752 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/277494 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/278222 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/278993 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/279718 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/280506 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/281275 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/282008 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/282764 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/283496 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/284240 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/284992 (executing program) 2022/10/04 00:46:14 fetching corpus: 5001, signal 194785/285736 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/286554 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/287350 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/288142 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/288928 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/289647 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/290391 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/291137 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/291909 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/292665 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/293442 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/294186 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/294939 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/295700 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/296427 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/297210 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/297972 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/298732 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/299548 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/300309 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/301034 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/301784 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/302550 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/303296 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/304003 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/304788 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/305584 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/306367 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/307152 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/307919 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/308678 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/309449 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/310159 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/310869 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/311677 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/312141 (executing program) 2022/10/04 00:46:15 fetching corpus: 5001, signal 194785/312141 (executing program) 2022/10/04 00:46:18 starting 8 fuzzer processes 00:46:18 executing program 0: unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa0800, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x105000, 0x41) r3 = syz_io_uring_setup(0x5c12, &(0x7f0000000100)={0x0, 0x8f4, 0x1, 0x1, 0x25f, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x2, 0x9}, 0x5) io_uring_setup(0x6321, &(0x7f0000000240)={0x0, 0x6250, 0x8, 0x1, 0x163}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r1, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x3, &(0x7f00000002c0)="a3f00d9d929edd6d915c49dd3acd4b3b6631c4dc13c655031c6acc0700830fa6e32d1078631cf1bc740a43795fb802699c160db472d8091fc5a97f5322cfc5c78b74ca5dba4a642bc54aa267e8da9852968baf96b97d98df9c6dd20e1e2cc0535a785ff0c49d2c3a9d6856a9a50122fa56360dbcfb5bed7288cb962e9690b1ea366ce7433942", 0x2, 0x0, 0x0, {0x2}}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x6, 0x4100) r8 = syz_io_uring_setup(0x7efe, &(0x7f0000000400)={0x0, 0xadf7, 0x1, 0x3, 0x21b, 0x0, r7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) r10 = syz_io_uring_setup(0x24e5, &(0x7f0000000540)={0x0, 0x1df0, 0xa, 0x3, 0x37e, 0x0, r9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs2/custom1\x00', 0x1000, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001ac0)='pagemap\x00') r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001b00), 0xc6900, 0x0) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$netlink(r9, &(0x7f0000001bc0)={&(0x7f0000000640)=@proc={0x10, 0x0, 0x4, 0x1}, 0xc, &(0x7f0000001a80)=[{&(0x7f0000000680)={0x114, 0x3c, 0x302, 0x70bd27, 0x25dfdbfb, "", [@generic="a66f3bfcc913c7677a535bf7e0d7c97949a1eea247348ca0dbf392b6ab6de01d308b069ddf12c0a00e518941a79a35e7f0bbb1f1429468753083e8e8bfb0fc1e8e2160d296fbb583b6bc384557739b9f26937c6eeadc68e48e899eb96c23f0ac8b7e53fdf6f23bbc141c78bf0333c742244b25b51c1d0e20044b3e82c193edd5ebe3b5a18759710d46c0fdaca731806472568989621e75df9345285c498d036385b60acb934117b848543b02adba", @generic="eb9da56a02766bb2aae2983a0b839c07a89d36b00ff3e31dc856770506a9f698f90eadf56fc935c59d04e8c1934af6174aa98acd293cac1fb2c268608e2ffeb13c63d787c63d55a2af8b30e41357cfffe98eaa2ada3c"]}, 0x114}, {&(0x7f0000000800)={0x1264, 0x33, 0x200, 0x70bd2c, 0x25dfdbff, "", [@nested={0x10, 0x85, 0x0, 0x1, [@typed={0xc, 0x3a, 0x0, 0x0, @u64=0xeb8f}]}, @nested={0x1091, 0x88, 0x0, 0x1, [@generic="91e419476e237cc35bded968e1330d48a5c60eb8a48aaef13b105b8160674f5263831dd57827ac3b1c9001da29a682414cd8f1bdf3386d6f60063711f90cd72c907139b90d8b71221a76b8aaeb598ef62dfed15841123a2e60029a887aec2b454e", @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4e, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="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", @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=0xee01}]}, @nested={0x168, 0x57, 0x0, 0x1, [@generic="e72c432d930a0422aa50eef54ab1a82182293269ea9cfbfece4efbc526e7c9db542880a0b6ae989a8218f3e7b48f6774ecbb1e4e3716637986352fd07ddb302e65000098f36b94106250d5003aaa7a824d18d3bbd327b3d302ba9f0e1e2e9d37b65f0309cab9338426d143b9fc1010ea44acc1f326fe6879dde372065c5c631700c17570b94c52bc00ff3d1e25626f767cca15316e306761912943550b3a4cbe34fd392434bc0ce4a0865dbb41747452b87b46cd0aa0427d1407430eb7c348ded8e0b4a99a57ebf9da28253a592c0a4c92c7b5c3ce7bd0534b45bfcfcea6bd8a13bf5ef1cf9bb2", @typed={0x8, 0x29, 0x0, 0x0, @u32=0x4}, @generic="8282b1d4ab108c3c1f036fba287eb7a68d1cd88aed5952d18f8edff97c6353f456b74a93404e39fc358826ab49df093129db06345de18144b127a7d039b6186ca7b5cd4cf23fc1f8ca0556b54f725998171b909fb85ff3b35d14dc72e816203f69c3c41842", @typed={0x8, 0x9, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @nested={0x48, 0x1b, 0x0, 0x1, [@typed={0x4, 0x32}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x88, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xc, 0x33, 0x0, 0x0, @str='{:^%#.\'\x00'}, @typed={0x8, 0x86, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x3, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x20, 0x0, 0x0, @fd=r3}]}]}, 0x1264}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r12, r13, r14, r0, r10, r2, r8, r1]}}], 0x50}, 0x4000) r15 = openat$cgroup_subtree(r9, &(0x7f0000001c00), 0x2, 0x0) ioctl$FIDEDUPERANGE(r15, 0xc0189436, &(0x7f0000001d00)={0x8001, 0xffff, 0x9, 0x0, 0x0, [{{r8}, 0x4}, {{r2}, 0x9}, {{}, 0x1}, {{r14}, 0x2}, {{r3}, 0x9}, {{r9}, 0x9}, {{r3}, 0x1}, {{r0}, 0x80}, {{}, 0x7fffffff}]}) 00:46:18 executing program 1: r0 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xa5, &(0x7f0000000000)=""/115) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) tgkill(r0, r1, 0x30) prlimit64(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xffffffff7fffffff, 0x2}, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) getrlimit(0xc, &(0x7f00000001c0)) get_robust_list(r2, &(0x7f00000002c0)=&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000300)=0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0xd6d, 0x53) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x9900) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000480)={0x101, 0x7}) prlimit64(r1, 0xb, &(0x7f00000004c0)={0xffffffffffffff01, 0x3}, &(0x7f0000000500)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000540)) recvmmsg$unix(r3, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/62, 0x3e}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/208, 0xd0}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x6, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x42, 0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000002a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x38, 0x3e9, 0x8, 0x70bd28, 0x25dfdbff, {0x64, 0x1, 0x1, r4, 0x3, 0x8, 0x98, 0x4, 0x0, 0x1000}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) perf_event_open(&(0x7f0000002a40)={0x0, 0x80, 0x4, 0x7, 0x23, 0x3, 0x0, 0x1, 0x21348, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0xfffffffffffffe01, 0x8, 0x3, 0x0, 0x0, 0xa27, 0x0, 0xb4, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x9) rename(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)='./file0\x00') r5 = getpgid(r4) sched_getattr(r5, &(0x7f0000002b40)={0x38}, 0x38, 0x0) sched_getattr(0x0, &(0x7f0000002b80)={0x38}, 0x38, 0x0) 00:46:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) fcntl$setown(r1, 0x8, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4925, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @loopback}, 0x24, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)='ip6gretap0\x00', 0x8, 0x0, 0x400}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4044841) r3 = accept$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) dup2(r2, r3) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x6d6, 0x2040) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) flock(r0, 0x4) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x210040, 0x0) io_cancel(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000400)="13d73927278ba2b7e4453e62161cc3b218bf880064102df500fa1461c4966e4ca26cc47d0b021bcb67ee9edc04b65cfca088406487fb1ba1faff0ffbff4596a6850cad2284205c0db193961ebe751cc84ca1f420267bb3f1a54691de58bd4b39500ac653d5feedddbd8a131a6b28adff7e729241b94f8c6b0f39c85c329f709e49b4db617b1612735b33090752685dbb804ef1e441d8e40aaaf0c73d24cee0ce4e29e276fc7f77c9740cdc929879984da438f575911dd9a6ea8e8c0cb743d8da0c3f6f8e25cf376a3c9aee805a7fb39277dd1d9b3b", 0xd5, 0x7, 0x0, 0x0, r5}, &(0x7f0000000580)) r6 = openat$cgroup_pressure(r5, &(0x7f00000005c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000600)={'full', 0x20, 0x2, 0x20, 0x42bbd4c6}, 0x2f) 00:46:18 executing program 3: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) r0 = dup(0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x44080) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x5) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x48006) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f0000000480)={@id={0x2, 0x0, @d}}) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x2a4, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x274, 0x4, 0x0, 0x1, [{0x148, 0x1, 0x0, 0x1, [@nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xd}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}]}}, @nat={{0x8}, @void}, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8}]}}, @range={{0xa}, @void}, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}]}}, @dup_ipv6={{0x8}, @void}, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x658}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}, @objref={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}]}, {0x64, 0x1, 0x0, 0x1, [@xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}]}, {0xc, 0x1, 0x0, 0x1, [@osf={{0x8}, @void}]}, {0x24, 0x1, 0x0, 0x1, [@fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1e}]}}, @queue={{0xa}, @void}]}, {0x50, 0x1, 0x0, 0x1, [@quota={{0xa}, @void}, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x80}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}]}, {0x44, 0x1, 0x0, 0x1, [@numgen={{0xb}, @void}, @payload={{0xc}, @void}, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}]}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x80}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14}}, 0x35c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000900)={'wg2\x00'}) recvmmsg(r4, &(0x7f0000000d80)=[{{&(0x7f0000000940)=@ax25={{0x3, @rose}, [@bcast, @remote, @netrom, @netrom, @bcast, @bcast, @netrom, @netrom]}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/9, 0x9}], 0x1, &(0x7f0000000a40)=""/159, 0x9f}, 0x86b}, {{&(0x7f0000000b00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f0000000c00)=""/171, 0xab}], 0x2, &(0x7f0000000d00)=""/109, 0x6d}, 0xff}], 0x2, 0x40000000, &(0x7f0000000e00)) r5 = signalfd4(r4, &(0x7f0000000e40)={[0x1f]}, 0x8, 0x800) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x11c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xee, 0xbe, "6eec3c6e0082535fa82aa153280b04534c9c9a88234b6d8ee8c1deddfc4671e271232992088102b8033f7c0d5fc96606058863e4d783044f43bb90160e218e2429c62adbf86b8339bb84de1c1a7c80b00acb2bc5fb9fc0463bc33a05fa2f3aab5fbf50772323e67853782f1f3a18deb2dbc356c5f01fdbe660c27db2d062daa37b5602d66bba815736f2643c89e713fcef74b3663b9bcdec6406c4220b9ec638bd7a5bcbbde4773cdfc4763a94ba43319f509feb55ef7518cacd1d700805a3fbe556a6b8e7e024d68e8b1492e2311ab766599c69dc98b4f81e17a7ec45bd1232681af10dfd56183a83bb"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x332}]}, 0x11c}, 0x1, 0x0, 0x0, 0x60000}, 0x8080) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x108, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf67}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd83d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffe1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x108}}, 0x80001) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/dm_mod', 0x200000, 0xc) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 00:46:18 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) sendmmsg$sock(r1, &(0x7f0000000380)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="06d7760d265902f160ce548c3fa92a3803f931242524bea842e114ab243987278df920f3e343", 0x26}, {&(0x7f0000000140)="e4e1fc1e5c1349405a0cb16c1402d968980737ba33f0f5e915f2d74ffa0091271d8c4fc69bbe7859f30b0c6e5c5f73be5488f47aa5c985c2f0a329106e86136aed5f41d95757150572fa6e98519ee49db8cff38f9f575bf98acb957c1c411e260aea1c5179c9a55282dae4b4cb70a881c94acd78dee42a1a452ac755", 0x7c}, {&(0x7f00000001c0)="9a5367b50c7e1855a9b7b479fbd5323d52fc1564e7d81fdfd63a0c504f1cbd27a06e642843c2cf83b084a3ff84bc8658f7269f7d78af6e3e256557fc6f97894200b06c52e3bdf43e1a8315ea2b5f1a944d893fe3f983d7f321ba1cef5260192a824c2d3c302191096fee176e20047059d98c7c64a96ba0ac54", 0x79}], 0x3, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x60}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0xd8}}], 0x1, 0x20000804) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x101, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="b54a64431f59ae1a589f3b7d44865c7f5c03f2f001c3019772119a8b9259079b7bfbabb6d1e025028e070204533795d44cb545bf42424cea218f5476e9f7d26984e5081e9acece74d87720597a1771a97f53519d46403b5bcbeb9f101d50d8f5b7e3a8e7afe3b3847f3ce4aeef", 0x6d, 0x6}], 0x182100e, &(0x7f0000000540)={[{')]]'}, {'[[#}*'}, {}, {}], [{@appraise}, {@obj_type={'obj_type', 0x3d, '$'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x36, 0x32, 0x64, 0x66, 0x37, 0x62, 0x62], 0x2d, [0x61, 0x39, 0x31, 0x32], 0x2d, [0x66, 0x38, 0x35, 0x32], 0x2d, [0x36, 0x35, 0x0, 0x37], 0x2d, [0x36, 0x63, 0x0, 0x37, 0x39, 0x30, 0x66, 0x31]}}}, {@uid_eq={'uid', 0x3d, r3}}, {@appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise_type}]}) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) open$dir(&(0x7f0000000600)='./file0\x00', 0x200000, 0x80) r5 = dup3(r2, r0, 0x80000) r6 = openat(r5, &(0x7f0000000640)='./file0/file0\x00', 0x400, 0x104) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000006c0)={@private, @broadcast, 0x0}, &(0x7f0000000700)=0xc) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe7bd}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x44880) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x20}}, 0x1) getsockname$inet(r4, &(0x7f0000000940)={0x2, 0x0, @local}, &(0x7f0000000980)=0x10) r8 = accept$inet(r1, &(0x7f00000009c0)={0x2, 0x0, @multicast1}, &(0x7f0000000a00)=0x10) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000a40)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000b80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r9, 0x4, 0x8, 0x80, 0x7ff, 0x4, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x700, 0x7fff, 0x8}}) r11 = syz_mount_image$iso9660(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', 0x4df2, 0x1, &(0x7f0000000e00)=[{&(0x7f0000000d00)="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", 0xff, 0x6}], 0x40400, &(0x7f0000000e40)={[{@uid={'uid', 0x3d, r3}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_type}, {@obj_user}, {@euid_lt={'euid<', r10}}, {@euid_gt={'euid>', r3}}, {@appraise_type}, {@fowner_lt={'fowner<', r10}}]}) getdents64(r11, &(0x7f0000000f00)=""/233, 0xe9) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001000)={{{@in=@local, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001100)=0xe8) [ 73.346564] audit: type=1400 audit(1664844378.753:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:46:18 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}], 0xe7, 0x0, &(0x7f0000000040)="d057eb08cd1179a8b50f9986eb452e53eadcf3060c0a14eff87909368ac8ae3524edb3835f95b4b99c18b678a6c2be46ebf04554cf747003c05ff2a161294e7c36e1aa2cec5155fc71cb5789dcc7ab4596a467b992d9a3adc7db155de9734a06c7e950137b23d6877c9eac8e9fc35de6f8bd876c740bc8c7b51befffdc085d19de962e2ec3a4a29b674e50df137f7de2d1a15f8a65e5288e7c6c84583f589dc2d81342f5c24b20a5179345f7e4c1c56213d6ef4d3cb2c9ab0ada9a87393a06d3b22f9b9add9c1a2ce00cc6f069d49331470bc16f00da7cccda4b22dce9b0ff19562dcb62a7af5c"}) r0 = socket(0x11, 0xa, 0xd6f) r1 = signalfd4(r0, &(0x7f0000000180)={[0xffffffff00000000]}, 0x8, 0x800) r2 = syz_open_pts(r1, 0x400) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000001c0)) r3 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x0, @loopback, 0x8}}, 0x0, 0x0, 0x46, 0x0, "40c995f515b5f3df1fcc49922323dc8f36f90f0f64c40ceea758615a5036265b3d1b8f75603712d7a8fb33aa1c655b7130ea5f42ae5ad3f39aef26ffe66ae66874c87ba2d6632d1d3c0409fe8ea7bd18"}, 0xd8) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000440)=[r1], 0x1) io_setup(0x3, &(0x7f0000000480)=0x0) r8 = openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x10000, 0x172) io_cancel(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x800, r4, &(0x7f00000004c0)="7e422d4e7e040cc77f5e18bafa5e0ba07659940d9d85aeea2cd5cfe5bdedbc90de8bec5adb3eb3619ba39f73d9b308dff81e12775e28ef7d7381c5b2d9f2f5311936ee9dd33447b7338d659a1cbfb302d4e9ef855c3460ad46390bae1b8c0c8a1c070147af2c2e4363eb16b4b77ea20a3bfefe4d7fdbab8912f4", 0x7a, 0x7fffffff, 0x0, 0x1, r8}, &(0x7f00000005c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)=0x0) kcmp(r9, 0x0, 0x6, r1, r6) syz_open_dev$ttys(0xc, 0x2, 0x0) r10 = epoll_create1(0x0) close_range(r0, r10, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000640)={{0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x1, 0x5, 0x32}, {@rand_addr=0x64010102, 0x4e20, 0x8, 0x1, 0x200, 0x2b}}, 0x44) 00:46:18 executing program 6: r0 = syz_io_uring_setup(0x31a6, &(0x7f0000000000)={0x0, 0x4050, 0x1, 0x3, 0xbe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd, 0x4, 0x0, 0x7ff, 0x0, 0x1}, 0x3) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x0, {0x0, r4}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) sendfile(r5, r6, &(0x7f00000002c0)=0x7f, 0xaab) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000300)={0x0, 0x8001, 0x1, [0x0, 0x3, 0x2, 0x1, 0x101], [0x3b0a2baf, 0xfffffffffffffffc, 0x278d5a65, 0x200, 0x1, 0x3, 0x4913772, 0x6, 0x9, 0x8, 0x3, 0x0, 0x5, 0x3, 0xffffffffffffffc0, 0x100, 0x8, 0x5, 0xffffffffffffff34, 0x0, 0x80, 0xf6f, 0x8983, 0x101, 0x0, 0x20, 0x8, 0x100, 0x2, 0x40, 0x1, 0x400000000, 0x40, 0x10001, 0x1, 0xfffffffffffffff8, 0x0, 0x4, 0x94, 0x8000, 0x5, 0x80000001, 0x2, 0x7fffffff, 0x101, 0x4, 0x4000000000000000, 0x3, 0x3, 0x7fffffff, 0x3, 0xfffffffffffffffd, 0x8000, 0x2, 0x1ff, 0x2f1, 0x8, 0x0, 0x69400000000000, 0x3, 0x4, 0x0, 0x4, 0x81, 0x1, 0x2, 0x2, 0x5, 0x2, 0x1, 0xef, 0x1, 0x8, 0x1, 0x7, 0x7, 0xc9, 0xfffffffffffffffa, 0x2799, 0x8, 0x12, 0x8, 0x10000, 0x8a, 0x7fff, 0xfffffffffffffffb, 0x8, 0xffffffffffff9ea0, 0x1, 0x6, 0x4c31, 0x3f, 0xff, 0xb2e4, 0x4, 0x1000000020000, 0x6, 0x6172, 0x3ff, 0x0, 0x3, 0x7fffffff, 0xbe, 0xa43, 0x0, 0x39c9, 0x6, 0x8001, 0x3, 0x2, 0x4000000000000, 0x9, 0x100, 0xffff, 0x6a, 0x3, 0x9b0, 0xffff, 0x1ff, 0x80, 0xe1]}) r7 = dup2(r5, r0) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000740)={0x1, 0x3, 0xc00000, 0x5c2e, 0x80, 0x200}) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000b80)={0x0, 0x1, 0x13, 0x14, 0x8c, &(0x7f0000000780)="5e37149eeb95c089462b0250e0a451ebd4b117f5c9ab734f9f8112c9df618b6c8877016379167ae7fa6e797dc073e2dc9f618680478fd88df1fa687239d7ec9ca4fcb4c3afdddfad595a9bb9af7be606e1b2b42cecfc7ca2ebd10a383fa81f8a4d180140a067348e7ead9202532e7f9e90554c981e550a213290f4e3d842a86ca0cf8465f8ce4eb9da40c53345c756a92c6ffebbd97386bc112902388cf3ed672e1bbbe80fcc30bf47d630cf3a1aaf496afea722103199451fe7ae590298b7bbd5747eaae79c7d8b90917b8c25c374286dba43680abea215045615c7a6d23b7ed788aad779f4a393cf73c2923116af3e430764b776f5648a5747dd1f9194c5b47b787e9d1f3a00871b9c6cae3b781c696a16a291ac679dd216c7cd73724b6f749a0ef3800040ac2e41fd2307e4382e8235f99c0bee25d82888328853a0634e7823f60716b201cb8729c45b50a67afd5f67c607dd323d1a4403b7dbceb2b072b1e42d7e085b8bba729afd024eb85c01a05ef2f152b2cad6082382884f70d867ac51a9669753c42cc6360925183af4a83306e25c5409cf861f52c4284182e206acbbe83f9d28adbc5097a0c01a71c102d3b5d0fe8aef0b8ae0805bbf531db07805bdb689be6726635e4d2d4a0a3a4cd9d85abec8db99af78128abed203b8fa887cfafcd4661b0436df041b3b980d2b9485e2fee6604d9732434ff482544c0664327050ead47985ff965f5c22a9e78840143c7961337d0e0deb3843f6a0e9bb90ac734feb4569a3e7751c11990b85e247ec750c12cc5711be7748e726a6f7e3214eb8012cd50ce39ee415decc552229af8fab3cfc2bb96e77b9fea97116d750db5b967c64f272f2c660700507bb73039c4762fc2247b3cfda59f3acc6e2b044c98a1860566b682db1d1779dff48c353b4060ed72aae262b511dc19f7b5ef026914d30bba60c31e97cdf7aee7ed8bc69e9e85f6f142c9aa44fa721a2d8ffc2904c4fecb6119ef22399088d125e13829d4e095b094ea713714896ee4211224de2b87aa7de23c1a9e86953534ff117cb0fa4b5ebf8b8aed9a1c147080753c88bfa93c2a09ee7f62d7d57791980c3bd6ffb50cf301872fa0613cb1f7d0eb625419e441588ba2348d0fa9a9e7db4cf1b635ee4fd66b7b7f6030cb8eccc32d840dec1611e741fe48cc0faa48dea0a7a57bda62164561db8a2cb706ef62cf2fe5deae7de2b0729da1b66b9f592566b57ad8ff3b94572380d115a10c4dd273d787a06e2783755557d238860fe1c5617b3ab1bdec6fe84b46c459041563a0300f0a0ac11cbd8fd16eeddaff2b37ae11cf022d9ed86f9143798d8494c2e7f9755bc30882e1ace15dd7770b75417eaa524f1915cc431aa42dd08c369c82cbc8a1662ceebea4a9fb3c2a1a16b3f377e9f145a4b17f616bf5d04322d902f07bc187c9174fad2bb5f"}) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000bc0)=0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000c40)=0x7, 0x1) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x1010, r9, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r10, &(0x7f0000000cc0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r7, 0x0, &(0x7f0000000c80)='./file0\x00', 0xbc, 0x212900, 0x23456, {0x0, r11}}, 0x6) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) 00:46:18 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) getsockname$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) recvmsg$unix(r0, &(0x7f0000001800)={&(0x7f0000000180), 0x6e, &(0x7f0000001700)=[{&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/121, 0x79}, {&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/176, 0xb0}, {&(0x7f00000016c0)=""/17, 0x11}], 0x9, &(0x7f00000017c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40002040) preadv2(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f0000001840)=""/227, 0xe3}, {&(0x7f0000001940)=""/31, 0x1f}, {&(0x7f0000001980)=""/38, 0x26}, {&(0x7f00000019c0)=""/181, 0xb5}, {&(0x7f0000001a80)=""/232, 0xe8}, {&(0x7f0000001b80)=""/62, 0x3e}, {&(0x7f0000001bc0)=""/130, 0x82}], 0x7, 0x7, 0x101, 0xe) r1 = open(&(0x7f0000001d00)='./file0\x00', 0x151002, 0x100) r2 = syz_open_dev$vcsu(&(0x7f0000001d40), 0x1, 0x88000) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000001d80)='macvlan0\x00') openat(r2, &(0x7f0000001dc0)='./file0\x00', 0x40c02, 0x81) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000002040)={{'\x00', 0x1}, {0xbfc8}, 0x40, 0x0, 0x0, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)="735b23670062e0220f09e127361d6f5f6dfdad9f7f6b65a2a922df29e1b0df645df27cdd0b436143f0509af9c549348a4daad77a0baf39bc61443b85e04c8ca78270afaa12459d9ed100ee278c910ddeaed59ee2a304615928ccbf2248d70adc37aa35e02384a7ea1d481af6", 0x6c, 0x0, &(0x7f0000001f00)={0x2, 0xe4, {0x1, 0xc, 0x24, "96938672efc17fa7fae364d18b22f2e5f862cbcc3e8fc538cc8db32a1170e076dea2ec25", 0xb3, "e9ad3871a3ddf0455605ab0a389c340797890bbbe9da479634c4331fda9371c656849927a242712330d4e5ffa2cd7ea43d7258dc98f9419cd9eaa87e11ad10aae5b24cdb1698449a31a3b8c35c30e72eff21e365f3da535b96c33f85646fca5936c2ca136772d8a3cd5bc5ff8c35fa51bad8d9c973e1b4359bbd9cdaf37fa4a95c27ee9e02035f82509db596ce0ed819ef60040af41c78206bfe181c2ed434567dc778abb11f8900a0229e0292ba2ec6bbc051"}, 0x1c, "595955cf3b5c273c10700f0437b432ed718da307c4b1be4f0bdbe5ce"}, 0x10c}) recvmmsg(r0, &(0x7f00000050c0)=[{{&(0x7f00000020c0)=@phonet, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/101, 0x65}, {&(0x7f00000021c0)=""/62, 0x3e}], 0x2, &(0x7f0000002240)=""/51, 0x33}, 0x8}, {{&(0x7f0000002280)=@caif=@rfm, 0x80, &(0x7f0000002600)=[{&(0x7f0000002300)=""/3, 0x3}, {&(0x7f0000002340)=""/198, 0xc6}, {&(0x7f0000002440)=""/237, 0xed}, {&(0x7f0000002540)=""/186, 0xba}], 0x4, &(0x7f0000002640)=""/184, 0xb8}, 0xc7}, {{&(0x7f0000002700)=@caif=@dgm, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002780)=""/57, 0x39}, {&(0x7f00000027c0)=""/41, 0x29}, {&(0x7f0000002800)=""/91, 0x5b}, {&(0x7f0000002880)=""/62, 0x3e}, {&(0x7f00000028c0)=""/209, 0xd1}], 0x5, &(0x7f0000002a40)=""/97, 0x61}, 0x4}, {{&(0x7f0000002ac0)=@phonet, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002b40)=""/173, 0xad}, {&(0x7f0000002c00)=""/193, 0xc1}, {&(0x7f0000002d00)=""/10, 0xa}, {&(0x7f0000002d40)=""/91, 0x5b}, {&(0x7f0000002dc0)=""/182, 0xb6}], 0x5, &(0x7f0000002f00)=""/61, 0x3d}, 0x2}, {{&(0x7f0000002f40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/134, 0x86}, {&(0x7f0000004080)=""/230, 0xe6}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/142, 0x8e}], 0x5, &(0x7f0000004300)}, 0x10000}, {{&(0x7f0000004340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004500)=[{&(0x7f00000043c0)=""/68, 0x44}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/104, 0x68}], 0x3, &(0x7f0000004540)=""/66, 0x42}, 0x6}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f00000045c0)=""/220, 0xdc}, {&(0x7f00000046c0)=""/185, 0xb9}, {&(0x7f0000004780)=""/89, 0x59}, {&(0x7f0000004800)=""/60, 0x3c}, {&(0x7f0000004840)=""/88, 0x58}, {&(0x7f00000048c0)=""/138, 0x8a}, {&(0x7f0000004980)=""/190, 0xbe}, {&(0x7f0000004a40)=""/227, 0xe3}, {&(0x7f0000004b40)=""/161, 0xa1}, {&(0x7f0000004c00)=""/61, 0x3d}], 0xa, &(0x7f0000004d00)=""/20, 0x14}, 0x2}, {{&(0x7f0000004d40)=@generic, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004dc0)=""/56, 0x38}, {&(0x7f0000004e00)=""/178, 0xb2}, {&(0x7f0000004ec0)=""/181, 0xb5}], 0x3, &(0x7f0000004fc0)=""/193, 0xc1}, 0x1}], 0x8, 0x40000002, &(0x7f00000052c0)={0x0, 0x989680}) ioctl$FIONCLEX(r3, 0x5450) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005340), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000005400)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x24000900}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x52}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000005440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = open(&(0x7f00000054c0)='./file0\x00', 0x1110c0, 0xa0) syz_genetlink_get_family_id$batadv(&(0x7f0000005480), r5) lremovexattr(&(0x7f0000005500)='./file0\x00', &(0x7f0000005540)=@random={'osx.', '/dev/vcsu#\x00'}) pwritev(r5, &(0x7f00000057c0)=[{&(0x7f0000005580)="11a61a85e85a17b2e15dd88ced262cfe2d6153d50b36bff39f058d01b1c20db063363a9ab200f23df8697216112f3fac097ca2dfcb70d501cf2f28063c122afc0aa55ec902fadc01ba5ac445e07f290cde85910eae62fdb272c032f935dd64102d50b438d37c0b8e275a689641c3927bc3d9de0921b8608774bb53eab8c5c825011974ae1c6e7472be1f8ba9b5a14c1e1001b00a22b74db278938f4f129eb8d8dab7813dd6010370ea3913499f395b58b0903ef240cb6f4811c7f1cd835f0dcccb4f36", 0xc3}, {&(0x7f0000005680)="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", 0xff}, {&(0x7f0000005780)="d84ac06789cc7a571b6ac16f7b6f0cfab0589af867d319bfc3ac189b25b6ff86677ad5d9", 0x24}], 0x3, 0xd458, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 74.590913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.593157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.595429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.598949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.601192] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.602727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.608920] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.672919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.674959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.676786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.678345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.680012] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.681766] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.683754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.685241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.686370] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.687460] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.688583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.700246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.701579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.702615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.704458] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.708307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.710975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.712988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.713646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.715829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.717191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.717448] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.719060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.720126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.721387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.722507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.722808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.725115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.727151] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.728497] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.729244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.730631] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.730983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.733492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.735053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.736848] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.739226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.743183] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.747861] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.752393] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.753198] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.755105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.764807] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.795486] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.802367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.807783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.809749] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.811229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.821415] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.674008] Bluetooth: hci0: command 0x0409 tx timeout [ 76.801891] Bluetooth: hci5: command 0x0409 tx timeout [ 76.801956] Bluetooth: hci4: command 0x0409 tx timeout [ 76.802958] Bluetooth: hci2: command 0x0409 tx timeout [ 76.803890] Bluetooth: hci1: command 0x0409 tx timeout [ 76.804865] Bluetooth: hci6: command 0x0409 tx timeout [ 76.805744] Bluetooth: hci3: command 0x0409 tx timeout [ 76.865740] Bluetooth: hci7: command 0x0409 tx timeout [ 78.721618] Bluetooth: hci0: command 0x041b tx timeout [ 78.849865] Bluetooth: hci6: command 0x041b tx timeout [ 78.850353] Bluetooth: hci1: command 0x041b tx timeout [ 78.850896] Bluetooth: hci2: command 0x041b tx timeout [ 78.851308] Bluetooth: hci4: command 0x041b tx timeout [ 78.851731] Bluetooth: hci5: command 0x041b tx timeout [ 78.852174] Bluetooth: hci3: command 0x041b tx timeout [ 78.913573] Bluetooth: hci7: command 0x041b tx timeout [ 80.770569] Bluetooth: hci0: command 0x040f tx timeout [ 80.898676] Bluetooth: hci3: command 0x040f tx timeout [ 80.899115] Bluetooth: hci5: command 0x040f tx timeout [ 80.899507] Bluetooth: hci4: command 0x040f tx timeout [ 80.899932] Bluetooth: hci2: command 0x040f tx timeout [ 80.900325] Bluetooth: hci1: command 0x040f tx timeout [ 80.900757] Bluetooth: hci6: command 0x040f tx timeout [ 80.962571] Bluetooth: hci7: command 0x040f tx timeout [ 82.817609] Bluetooth: hci0: command 0x0419 tx timeout [ 82.945714] Bluetooth: hci6: command 0x0419 tx timeout [ 82.946499] Bluetooth: hci1: command 0x0419 tx timeout [ 82.947712] Bluetooth: hci2: command 0x0419 tx timeout [ 82.948420] Bluetooth: hci4: command 0x0419 tx timeout [ 82.949190] Bluetooth: hci5: command 0x0419 tx timeout [ 82.949924] Bluetooth: hci3: command 0x0419 tx timeout [ 83.009711] Bluetooth: hci7: command 0x0419 tx timeout [ 130.129262] audit: type=1400 audit(1664844435.536:7): avc: denied { open } for pid=3613 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:47:15 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba', 0x0) r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) futex(&(0x7f00000001c0), 0xd, 0x1, &(0x7f00000000c0)={r1, r2+60000000}, &(0x7f0000000140)=0x2, 0x2) 00:47:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f0000000000000100000800000000000af3010004000000000000000000000002000000300000000000", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0, 0x0, 0x2}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)) [ 130.636113] loop1: detected capacity change from 0 to 4096 [ 130.708485] EXT4-fs error (device loop1): __ext4_iget:4995: inode #3: block 33554432: comm syz-executor.1: invalid block [ 130.736139] EXT4-fs error (device loop1): ext4_quota_enable:6911: comm syz-executor.1: Bad quota inode # 3 [ 130.748100] EXT4-fs warning (device loop1): ext4_enable_quotas:6948: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 130.762062] EXT4-fs (loop1): mount failed [ 130.792990] loop1: detected capacity change from 0 to 4096 [ 130.808155] EXT4-fs error (device loop1): __ext4_iget:4995: inode #3: block 33554432: comm syz-executor.1: invalid block [ 130.814905] EXT4-fs error (device loop1): ext4_quota_enable:6911: comm syz-executor.1: Bad quota inode # 3 [ 130.817815] EXT4-fs warning (device loop1): ext4_enable_quotas:6948: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 130.830640] EXT4-fs (loop1): mount failed 00:47:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f0000000000000100000800000000000af3010004000000000000000000000002000000300000000000", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0, 0x0, 0x2}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)) [ 130.983292] loop1: detected capacity change from 0 to 4096 [ 131.029955] EXT4-fs error (device loop1): __ext4_iget:4995: inode #3: block 33554432: comm syz-executor.1: invalid block [ 131.059599] EXT4-fs error (device loop1): ext4_quota_enable:6911: comm syz-executor.1: Bad quota inode # 3 [ 131.076607] EXT4-fs warning (device loop1): ext4_enable_quotas:6948: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 131.092456] EXT4-fs (loop1): mount failed 00:47:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f0000000000000100000800000000000af3010004000000000000000000000002000000300000000000", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0, 0x0, 0x2}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)) [ 131.300481] loop1: detected capacity change from 0 to 4096 [ 131.331946] EXT4-fs error (device loop1): __ext4_iget:4995: inode #3: block 33554432: comm syz-executor.1: invalid block [ 131.341602] EXT4-fs error (device loop1): ext4_quota_enable:6911: comm syz-executor.1: Bad quota inode # 3 [ 131.346590] EXT4-fs warning (device loop1): ext4_enable_quotas:6948: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 131.353160] EXT4-fs (loop1): mount failed 00:47:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f0000000000000100000800000000000af3010004000000000000000000000002000000300000000000", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0, 0x0, 0x2}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)) [ 131.511971] loop1: detected capacity change from 0 to 4096 [ 131.539884] EXT4-fs error (device loop1): __ext4_iget:4995: inode #3: block 33554432: comm syz-executor.1: invalid block [ 131.552922] EXT4-fs error (device loop1): ext4_quota_enable:6911: comm syz-executor.1: Bad quota inode # 3 [ 131.556563] EXT4-fs warning (device loop1): ext4_enable_quotas:6948: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 131.562814] EXT4-fs (loop1): mount failed 00:47:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f0000000000000100000800000000000af3010004000000000000000000000002000000300000000000", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0, 0x0, 0x2}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)) [ 131.656024] loop1: detected capacity change from 0 to 4096 00:47:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f0000000000000100000800000000000af3010004000000000000000000000002000000300000000000", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0, 0x0, 0x2}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)) [ 131.796957] loop1: detected capacity change from 0 to 4096 00:47:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f0000000000000100000800000000000af3010004000000000000000000000002000000300000000000", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0, 0x0, 0x2}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {0x0}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)) [ 131.969920] loop1: detected capacity change from 0 to 4096 [ 136.415405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.417518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.421417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.425667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.427382] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.430026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.436414] Bluetooth: hci1: HCI_REQ-0x0c1a [ 136.652181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.654286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.655633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.661844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.665090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 136.666392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.672614] Bluetooth: hci5: HCI_REQ-0x0c1a [ 136.731055] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.731458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 136.736424] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.736877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 136.739061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 136.739343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.752601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.758007] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 136.763513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.764425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.766454] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 136.776252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.777057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.780356] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.783010] Bluetooth: hci6: HCI_REQ-0x0c1a [ 136.784663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.785404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.806150] Bluetooth: hci3: HCI_REQ-0x0c1a [ 136.814795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.819377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.834275] Bluetooth: hci4: HCI_REQ-0x0c1a [ 138.497611] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 138.497630] Bluetooth: hci1: command 0x0409 tx timeout [ 138.689701] Bluetooth: hci5: command 0x0409 tx timeout [ 138.753608] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 138.817750] Bluetooth: hci3: command 0x0409 tx timeout [ 138.818861] Bluetooth: hci6: command 0x0409 tx timeout [ 138.881635] Bluetooth: hci4: command 0x0409 tx timeout [ 140.545592] Bluetooth: hci1: command 0x041b tx timeout [ 140.737840] Bluetooth: hci5: command 0x041b tx timeout [ 140.865616] Bluetooth: hci6: command 0x041b tx timeout [ 140.866216] Bluetooth: hci3: command 0x041b tx timeout [ 140.929679] Bluetooth: hci4: command 0x041b tx timeout [ 140.988436] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.990614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.992047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.994613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.996257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.997163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.009128] Bluetooth: hci2: HCI_REQ-0x0c1a [ 142.593706] Bluetooth: hci1: command 0x040f tx timeout [ 142.785641] Bluetooth: hci5: command 0x040f tx timeout [ 142.914639] Bluetooth: hci3: command 0x040f tx timeout [ 142.914713] Bluetooth: hci6: command 0x040f tx timeout [ 142.977798] Bluetooth: hci4: command 0x040f tx timeout [ 143.041695] Bluetooth: hci2: command 0x0409 tx timeout [ 143.425622] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 144.641761] Bluetooth: hci1: command 0x0419 tx timeout [ 144.833630] Bluetooth: hci5: command 0x0419 tx timeout [ 144.961643] Bluetooth: hci3: command 0x0419 tx timeout [ 144.961765] Bluetooth: hci6: command 0x0419 tx timeout [ 145.025658] Bluetooth: hci4: command 0x0419 tx timeout [ 145.089654] Bluetooth: hci2: command 0x041b tx timeout [ 145.956823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.959666] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.961258] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.964358] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.966129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.967253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.982912] Bluetooth: hci7: HCI_REQ-0x0c1a [ 147.137573] Bluetooth: hci2: command 0x040f tx timeout [ 148.033617] Bluetooth: hci7: command 0x0409 tx timeout [ 149.185588] Bluetooth: hci2: command 0x0419 tx timeout [ 150.082621] Bluetooth: hci7: command 0x041b tx timeout [ 152.129698] Bluetooth: hci7: command 0x040f tx timeout [ 154.177588] Bluetooth: hci7: command 0x0419 tx timeout [ 182.229060] loop7: detected capacity change from 0 to 38 [ 187.329666] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.330723] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.331622] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.332804] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.334617] Call Trace: [ 187.334951] [ 187.335712] __schedule+0x893/0x2470 [ 187.336220] ? io_schedule_timeout+0x150/0x150 [ 187.336853] ? do_raw_spin_lock+0x121/0x260 [ 187.337419] ? rwlock_bug.part.0+0x90/0x90 [ 187.338008] schedule+0xda/0x1b0 [ 187.338480] rescuer_thread+0x851/0xdb0 [ 187.339041] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.339712] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.340356] ? lockdep_hardirqs_on+0x79/0x100 [ 187.340967] ? worker_thread+0x1260/0x1260 [ 187.341520] kthread+0x2ed/0x3a0 [ 187.341999] ? kthread_complete_and_exit+0x40/0x40 [ 187.342672] ret_from_fork+0x22/0x30 [ 187.343188] [ 187.343495] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.344335] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.345027] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.346005] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.347089] Call Trace: [ 187.347423] [ 187.347760] __schedule+0x893/0x2470 [ 187.348276] ? io_schedule_timeout+0x150/0x150 [ 187.348914] ? do_raw_spin_lock+0x121/0x260 [ 187.349498] ? rwlock_bug.part.0+0x90/0x90 [ 187.350138] schedule+0xda/0x1b0 [ 187.350636] rescuer_thread+0x851/0xdb0 [ 187.351180] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.351871] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.352572] ? lockdep_hardirqs_on+0x79/0x100 [ 187.353179] ? worker_thread+0x1260/0x1260 [ 187.353777] kthread+0x2ed/0x3a0 [ 187.354245] ? kthread_complete_and_exit+0x40/0x40 [ 187.354918] ret_from_fork+0x22/0x30 [ 187.355443] [ 187.355792] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.356670] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.357350] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.358378] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.359472] Call Trace: [ 187.359865] [ 187.360180] __schedule+0x893/0x2470 [ 187.360736] ? io_schedule_timeout+0x150/0x150 [ 187.361345] ? do_raw_spin_lock+0x121/0x260 [ 187.361963] ? rwlock_bug.part.0+0x90/0x90 [ 187.362584] schedule+0xda/0x1b0 [ 187.363050] rescuer_thread+0x851/0xdb0 [ 187.363634] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.364310] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.365016] ? lockdep_hardirqs_on+0x79/0x100 [ 187.365651] ? worker_thread+0x1260/0x1260 [ 187.366227] kthread+0x2ed/0x3a0 [ 187.366719] ? kthread_complete_and_exit+0x40/0x40 [ 187.367378] ret_from_fork+0x22/0x30 [ 187.367941] [ 187.368264] INFO: task netns:6 blocked for more than 143 seconds. [ 187.369076] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.369790] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.370810] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.371920] Call Trace: [ 187.372266] [ 187.372607] __schedule+0x893/0x2470 [ 187.373123] ? io_schedule_timeout+0x150/0x150 [ 187.373767] ? do_raw_spin_lock+0x121/0x260 [ 187.374366] ? rwlock_bug.part.0+0x90/0x90 [ 187.374980] schedule+0xda/0x1b0 [ 187.375448] rescuer_thread+0x851/0xdb0 [ 187.376023] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.376716] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.377368] ? lockdep_hardirqs_on+0x79/0x100 [ 187.378000] ? worker_thread+0x1260/0x1260 [ 187.378608] kthread+0x2ed/0x3a0 [ 187.379073] ? kthread_complete_and_exit+0x40/0x40 [ 187.379756] ret_from_fork+0x22/0x30 [ 187.380278] [ 187.380630] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.381474] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.382198] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.383214] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.384327] Workqueue: 0x0 (kblockd) [ 187.384871] Call Trace: [ 187.385216] [ 187.385554] __schedule+0x893/0x2470 [ 187.386063] ? io_schedule_timeout+0x150/0x150 [ 187.386727] schedule+0xda/0x1b0 [ 187.387189] worker_thread+0x15f/0x1260 [ 187.387778] ? process_one_work+0x16a0/0x16a0 [ 187.388372] kthread+0x2ed/0x3a0 [ 187.388854] ? kthread_complete_and_exit+0x40/0x40 [ 187.389502] ret_from_fork+0x22/0x30 [ 187.390059] [ 187.390378] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.391252] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.391951] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.392956] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.394040] Call Trace: [ 187.394391] [ 187.394728] __schedule+0x893/0x2470 [ 187.395235] ? io_schedule_timeout+0x150/0x150 [ 187.395863] ? do_raw_spin_lock+0x121/0x260 [ 187.396427] ? rwlock_bug.part.0+0x90/0x90 [ 187.397035] schedule+0xda/0x1b0 [ 187.397488] rescuer_thread+0x851/0xdb0 [ 187.398056] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.398764] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.399419] ? lockdep_hardirqs_on+0x79/0x100 [ 187.400057] ? worker_thread+0x1260/0x1260 [ 187.400646] kthread+0x2ed/0x3a0 [ 187.401096] ? kthread_complete_and_exit+0x40/0x40 [ 187.401772] ret_from_fork+0x22/0x30 [ 187.402291] [ 187.402637] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.403507] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.404211] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.405205] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.406295] Call Trace: [ 187.406663] [ 187.406967] __schedule+0x893/0x2470 [ 187.407472] ? io_schedule_timeout+0x150/0x150 [ 187.408105] ? mark_held_locks+0x9e/0xe0 [ 187.408670] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.409324] schedule+0xda/0x1b0 [ 187.409813] rcu_tasks_one_gp+0x3db/0xc10 [ 187.410395] rcu_tasks_kthread+0x80/0xa0 [ 187.410959] ? rcu_tasks_postscan+0x10/0x10 [ 187.411554] kthread+0x2ed/0x3a0 [ 187.412005] ? kthread_complete_and_exit+0x40/0x40 [ 187.412679] ret_from_fork+0x22/0x30 [ 187.413193] [ 187.413511] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.414400] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.415113] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.416097] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.417171] Workqueue: 0x0 (events_highpri) [ 187.417800] Call Trace: [ 187.418141] [ 187.418445] __schedule+0x893/0x2470 [ 187.418984] ? io_schedule_timeout+0x150/0x150 [ 187.419644] schedule+0xda/0x1b0 [ 187.420097] worker_thread+0x15f/0x1260 [ 187.420674] ? process_one_work+0x16a0/0x16a0 [ 187.421262] kthread+0x2ed/0x3a0 [ 187.421756] ? kthread_complete_and_exit+0x40/0x40 [ 187.422403] ret_from_fork+0x22/0x30 [ 187.422957] [ 187.423266] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.424150] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.424848] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.425835] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.426941] Call Trace: [ 187.427274] [ 187.427614] __schedule+0x893/0x2470 [ 187.428114] ? io_schedule_timeout+0x150/0x150 [ 187.428744] ? do_raw_spin_lock+0x121/0x260 [ 187.429316] ? rwlock_bug.part.0+0x90/0x90 [ 187.429909] schedule+0xda/0x1b0 [ 187.430373] rescuer_thread+0x851/0xdb0 [ 187.430932] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.431611] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.432254] ? lockdep_hardirqs_on+0x79/0x100 [ 187.432884] ? worker_thread+0x1260/0x1260 [ 187.433439] kthread+0x2ed/0x3a0 [ 187.433920] ? kthread_complete_and_exit+0x40/0x40 [ 187.434602] ret_from_fork+0x22/0x30 [ 187.435112] [ 187.435481] INFO: task kblockd:31 blocked for more than 143 seconds. [ 187.436335] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.437033] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.438025] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 187.439124] Call Trace: [ 187.439462] [ 187.439806] __schedule+0x893/0x2470 [ 187.440308] ? io_schedule_timeout+0x150/0x150 [ 187.440937] ? do_raw_spin_lock+0x121/0x260 [ 187.441505] ? rwlock_bug.part.0+0x90/0x90 [ 187.442109] schedule+0xda/0x1b0 [ 187.442605] rescuer_thread+0x851/0xdb0 [ 187.443135] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.443810] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.444462] ? lockdep_hardirqs_on+0x79/0x100 [ 187.445080] ? worker_thread+0x1260/0x1260 [ 187.445675] kthread+0x2ed/0x3a0 [ 187.446129] ? kthread_complete_and_exit+0x40/0x40 [ 187.446802] ret_from_fork+0x22/0x30 [ 187.447316] [ 187.447714] [ 187.447714] Showing all locks held in the system: [ 187.448487] 1 lock held by rcu_tasks_kthre/11: [ 187.449099] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.450389] 1 lock held by khungtaskd/25: [ 187.450943] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.452139] 1 lock held by in:imklog/188: [ 187.452701] #0: ffff88800f1de368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 187.453812] 3 locks held by rs:main Q:Reg/189: [ 187.454408] 2 locks held by syz-executor/7050: [ 187.455030] [ 187.455261] ============================================= [ 187.455261] VM DIAGNOSIS: 00:48:13 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00000000000003d6 RCX=ffffffff8129b8df RDX=fffffbfff0d9a708 RSI=0000000000000008 RDI=ffffffff86cd3838 RBP=0000000000000004 RSP=ffff88801b4275c8 R8 =0000000000000000 R9 =ffffffff86cd383f R10=fffffbfff0d9a707 R11=0000000000000001 R12=ffff88801a635040 R13=0000000000000000 R14=ffff88801a6359b8 R15=dffffc0000000000 RIP=ffffffff8129b8e7 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbc0078e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001f251e0 CR3=000000000f1d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM02=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM03=0000000000000000 0000000000000000 747320493a657461 7473202020202020 YMM04=0000000000000000 0000000000000000 757220657361656c 50202e293731312d YMM05=0000000000000000 0000000000000000 696b636172742061 746f757120656c62 YMM06=0000000000000000 0000000000000000 3439363a7361746f 75715f656c62616e YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 6f63203a33696368 203a68746f6f7400 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000003e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000003e R11=0000000000000001 R12=000000000000003e R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc1d36e080 CR3=00000000186e6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000