Warning: Permanently added '[localhost]:1038' (ECDSA) to the list of known hosts. 2024/10/17 00:02:38 fuzzer started 2024/10/17 00:02:38 dialing manager at localhost:46303 syzkaller login: [ 62.647935] cgroup: Unknown subsys name 'net' [ 62.742842] cgroup: Unknown subsys name 'cpuset' [ 62.772838] cgroup: Unknown subsys name 'rlimit' 2024/10/17 00:02:56 syscalls: 2217 2024/10/17 00:02:56 code coverage: enabled 2024/10/17 00:02:56 comparison tracing: enabled 2024/10/17 00:02:56 extra coverage: enabled 2024/10/17 00:02:56 setuid sandbox: enabled 2024/10/17 00:02:56 namespace sandbox: enabled 2024/10/17 00:02:56 Android sandbox: enabled 2024/10/17 00:02:56 fault injection: enabled 2024/10/17 00:02:56 leak checking: enabled 2024/10/17 00:02:56 net packet injection: enabled 2024/10/17 00:02:56 net device setup: enabled 2024/10/17 00:02:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 00:02:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 00:02:56 USB emulation: enabled 2024/10/17 00:02:56 hci packet injection: enabled 2024/10/17 00:02:56 wifi device emulation: enabled 2024/10/17 00:02:56 802.15.4 emulation: enabled 2024/10/17 00:02:56 fetching corpus: 0, signal 0/2000 (executing program) 2024/10/17 00:02:56 fetching corpus: 41, signal 16121/19701 (executing program) 2024/10/17 00:02:56 fetching corpus: 85, signal 25744/30707 (executing program) 2024/10/17 00:02:56 fetching corpus: 135, signal 34873/41008 (executing program) 2024/10/17 00:02:57 fetching corpus: 185, signal 45433/52367 (executing program) 2024/10/17 00:02:57 fetching corpus: 235, signal 51750/59583 (executing program) 2024/10/17 00:02:57 fetching corpus: 285, signal 56539/65276 (executing program) 2024/10/17 00:02:57 fetching corpus: 335, signal 60981/70451 (executing program) 2024/10/17 00:02:57 fetching corpus: 385, signal 64132/74381 (executing program) 2024/10/17 00:02:57 fetching corpus: 435, signal 66653/77707 (executing program) 2024/10/17 00:02:57 fetching corpus: 485, signal 71038/82545 (executing program) 2024/10/17 00:02:58 fetching corpus: 535, signal 73093/85314 (executing program) 2024/10/17 00:02:58 fetching corpus: 585, signal 75604/88415 (executing program) 2024/10/17 00:02:58 fetching corpus: 635, signal 77536/90895 (executing program) 2024/10/17 00:02:58 fetching corpus: 684, signal 79581/93443 (executing program) 2024/10/17 00:02:58 fetching corpus: 734, signal 81576/95955 (executing program) 2024/10/17 00:02:58 fetching corpus: 784, signal 83799/98593 (executing program) 2024/10/17 00:02:58 fetching corpus: 834, signal 86199/101278 (executing program) 2024/10/17 00:02:58 fetching corpus: 884, signal 87268/102856 (executing program) 2024/10/17 00:02:58 fetching corpus: 934, signal 89360/105241 (executing program) 2024/10/17 00:02:59 fetching corpus: 984, signal 91131/107257 (executing program) 2024/10/17 00:02:59 fetching corpus: 1034, signal 93045/109331 (executing program) 2024/10/17 00:02:59 fetching corpus: 1084, signal 94165/110904 (executing program) 2024/10/17 00:02:59 fetching corpus: 1134, signal 95706/112687 (executing program) 2024/10/17 00:02:59 fetching corpus: 1184, signal 97321/114466 (executing program) 2024/10/17 00:02:59 fetching corpus: 1234, signal 98637/116035 (executing program) 2024/10/17 00:02:59 fetching corpus: 1284, signal 99677/117392 (executing program) 2024/10/17 00:02:59 fetching corpus: 1334, signal 100559/118632 (executing program) 2024/10/17 00:02:59 fetching corpus: 1384, signal 102948/120731 (executing program) 2024/10/17 00:03:00 fetching corpus: 1434, signal 103965/121967 (executing program) 2024/10/17 00:03:00 fetching corpus: 1484, signal 105213/123293 (executing program) 2024/10/17 00:03:00 fetching corpus: 1533, signal 106045/124350 (executing program) 2024/10/17 00:03:00 fetching corpus: 1582, signal 107370/125665 (executing program) 2024/10/17 00:03:00 fetching corpus: 1632, signal 108414/126790 (executing program) 2024/10/17 00:03:00 fetching corpus: 1682, signal 109478/127916 (executing program) 2024/10/17 00:03:00 fetching corpus: 1732, signal 111369/129424 (executing program) 2024/10/17 00:03:01 fetching corpus: 1782, signal 112323/130411 (executing program) 2024/10/17 00:03:01 fetching corpus: 1832, signal 113319/131415 (executing program) 2024/10/17 00:03:01 fetching corpus: 1882, signal 115576/132954 (executing program) 2024/10/17 00:03:01 fetching corpus: 1932, signal 116833/133965 (executing program) 2024/10/17 00:03:01 fetching corpus: 1982, signal 117499/134719 (executing program) 2024/10/17 00:03:01 fetching corpus: 2032, signal 118756/135671 (executing program) 2024/10/17 00:03:01 fetching corpus: 2082, signal 119625/136478 (executing program) 2024/10/17 00:03:01 fetching corpus: 2132, signal 121304/137576 (executing program) 2024/10/17 00:03:01 fetching corpus: 2182, signal 121905/138184 (executing program) 2024/10/17 00:03:02 fetching corpus: 2232, signal 122535/138833 (executing program) 2024/10/17 00:03:02 fetching corpus: 2282, signal 123119/139400 (executing program) 2024/10/17 00:03:02 fetching corpus: 2332, signal 123780/139961 (executing program) 2024/10/17 00:03:02 fetching corpus: 2382, signal 124298/140483 (executing program) 2024/10/17 00:03:02 fetching corpus: 2432, signal 125368/141175 (executing program) 2024/10/17 00:03:02 fetching corpus: 2482, signal 126508/141853 (executing program) 2024/10/17 00:03:02 fetching corpus: 2532, signal 127332/142382 (executing program) 2024/10/17 00:03:02 fetching corpus: 2582, signal 128022/142867 (executing program) 2024/10/17 00:03:02 fetching corpus: 2632, signal 128559/143307 (executing program) 2024/10/17 00:03:02 fetching corpus: 2682, signal 129247/143745 (executing program) 2024/10/17 00:03:03 fetching corpus: 2732, signal 129832/144139 (executing program) 2024/10/17 00:03:03 fetching corpus: 2782, signal 130408/144549 (executing program) 2024/10/17 00:03:03 fetching corpus: 2832, signal 131282/144949 (executing program) 2024/10/17 00:03:03 fetching corpus: 2882, signal 132096/145374 (executing program) 2024/10/17 00:03:03 fetching corpus: 2931, signal 132690/145741 (executing program) 2024/10/17 00:03:03 fetching corpus: 2981, signal 133200/146075 (executing program) 2024/10/17 00:03:03 fetching corpus: 3031, signal 133956/146442 (executing program) 2024/10/17 00:03:03 fetching corpus: 3081, signal 134614/146773 (executing program) 2024/10/17 00:03:04 fetching corpus: 3131, signal 135228/147079 (executing program) 2024/10/17 00:03:04 fetching corpus: 3181, signal 135757/147309 (executing program) 2024/10/17 00:03:04 fetching corpus: 3231, signal 136458/147552 (executing program) 2024/10/17 00:03:04 fetching corpus: 3281, signal 137138/147784 (executing program) 2024/10/17 00:03:04 fetching corpus: 3331, signal 137591/147998 (executing program) 2024/10/17 00:03:04 fetching corpus: 3381, signal 137954/148162 (executing program) 2024/10/17 00:03:05 fetching corpus: 3431, signal 138267/148333 (executing program) 2024/10/17 00:03:05 fetching corpus: 3481, signal 138770/148497 (executing program) 2024/10/17 00:03:05 fetching corpus: 3531, signal 139100/148659 (executing program) 2024/10/17 00:03:05 fetching corpus: 3581, signal 139900/148829 (executing program) 2024/10/17 00:03:05 fetching corpus: 3631, signal 140574/148960 (executing program) 2024/10/17 00:03:05 fetching corpus: 3681, signal 140920/149012 (executing program) 2024/10/17 00:03:05 fetching corpus: 3731, signal 141641/149012 (executing program) 2024/10/17 00:03:05 fetching corpus: 3781, signal 142118/149012 (executing program) 2024/10/17 00:03:05 fetching corpus: 3831, signal 142807/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 3881, signal 143222/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 3931, signal 144829/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 3981, signal 145457/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 4031, signal 145903/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 4081, signal 146450/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 4131, signal 146806/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 4181, signal 147226/149012 (executing program) 2024/10/17 00:03:06 fetching corpus: 4231, signal 147595/149012 (executing program) 2024/10/17 00:03:07 fetching corpus: 4256, signal 147830/149012 (executing program) 2024/10/17 00:03:07 fetching corpus: 4256, signal 147830/149012 (executing program) 2024/10/17 00:03:09 starting 8 fuzzer processes 00:03:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000180003001a4e5f240000000002000000"], 0x14}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000140)=0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40032110, &(0x7f0000000900)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000a00)=ANY=[@ANYBLOB="000000b8c300000000000000009e", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c653000"]) preadv(r2, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)=""/162, 0xa2}, {0x0}, {0x0}], 0x4, 0x0, 0x80000001) io_destroy(r1) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x80, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0x3f, 0x0, 0x9, 0x9, 0x5, 0x0, 0x3f, 0x0, 0x6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000380)=[{r3}], 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="86713182ed55986300"], 0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) 00:03:09 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 00:03:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/205) 00:03:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 93.193938] audit: type=1400 audit(1729123389.544:7): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:03:09 executing program 4: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) kexec_load(0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)=ANY=[@ANYRES32]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:03:09 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 00:03:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 00:03:09 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) [ 94.529625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.531146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.533881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.538911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.543383] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.544771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.594516] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.597282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.598239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.606736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.611092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.614270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.616129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.617892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.621842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.622501] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.625303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.626173] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.627478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.630903] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.634301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.648826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.652827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.654331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.674578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.675995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.676775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.678742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.682192] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.683091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.691793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.703156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.709375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.710402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.711177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.712910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.714205] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.715081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.725562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.732569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.733714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.734624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.736455] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.737500] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.738423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.746660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.751325] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.754828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.625387] Bluetooth: hci0: command tx timeout [ 96.687164] Bluetooth: hci2: command tx timeout [ 96.687310] Bluetooth: hci1: command tx timeout [ 96.751097] Bluetooth: hci6: command tx timeout [ 96.751161] Bluetooth: hci4: command tx timeout [ 96.751803] Bluetooth: hci3: command tx timeout [ 96.815457] Bluetooth: hci7: command tx timeout [ 96.816106] Bluetooth: hci5: command tx timeout [ 98.671132] Bluetooth: hci0: command tx timeout [ 98.736145] Bluetooth: hci1: command tx timeout [ 98.736554] Bluetooth: hci2: command tx timeout [ 98.799124] Bluetooth: hci3: command tx timeout [ 98.799521] Bluetooth: hci4: command tx timeout [ 98.799846] Bluetooth: hci6: command tx timeout [ 98.863040] Bluetooth: hci7: command tx timeout [ 98.863434] Bluetooth: hci5: command tx timeout [ 100.720010] Bluetooth: hci0: command tx timeout [ 100.784051] Bluetooth: hci2: command tx timeout [ 100.784076] Bluetooth: hci1: command tx timeout [ 100.847116] Bluetooth: hci6: command tx timeout [ 100.847506] Bluetooth: hci4: command tx timeout [ 100.847735] Bluetooth: hci3: command tx timeout [ 100.913055] Bluetooth: hci5: command tx timeout [ 100.913408] Bluetooth: hci7: command tx timeout [ 102.775088] Bluetooth: hci0: command tx timeout [ 102.831119] Bluetooth: hci2: command tx timeout [ 102.831550] Bluetooth: hci1: command tx timeout [ 102.895262] Bluetooth: hci3: command tx timeout [ 102.895716] Bluetooth: hci4: command tx timeout [ 102.896404] Bluetooth: hci6: command tx timeout [ 102.960477] Bluetooth: hci7: command tx timeout [ 102.960925] Bluetooth: hci5: command tx timeout [ 157.140358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.158720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.174490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.224769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.257269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.274667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.386676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.390344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.391643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.392623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.394862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.396227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.397167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.403263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.420544] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.450304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.453607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.454981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.456515] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.457802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.467339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.480675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.482594] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.486816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.603633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.616632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.645607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.710389] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.748314] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.750289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.914104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.920314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.923102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.929270] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.935751] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.937364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.147951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.164345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.180531] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.211489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.218272] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.222222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.318852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.330249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.343303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.345155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.347241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.353130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.407251] Bluetooth: hci2: command tx timeout [ 159.471085] Bluetooth: hci0: command tx timeout [ 159.535400] Bluetooth: hci1: command tx timeout [ 159.727112] Bluetooth: hci3: command tx timeout [ 160.111230] Bluetooth: hci6: command tx timeout [ 160.495372] Bluetooth: hci5: command tx timeout [ 160.560054] Bluetooth: hci7: command tx timeout [ 160.815090] Bluetooth: hci4: command tx timeout [ 161.455055] Bluetooth: hci2: command tx timeout [ 161.519097] Bluetooth: hci0: command tx timeout [ 161.583123] Bluetooth: hci1: command tx timeout [ 161.776018] Bluetooth: hci3: command tx timeout [ 162.158993] Bluetooth: hci6: command tx timeout [ 162.543143] Bluetooth: hci5: command tx timeout [ 162.607015] Bluetooth: hci7: command tx timeout [ 162.864104] Bluetooth: hci4: command tx timeout [ 163.503030] Bluetooth: hci2: command tx timeout [ 163.567971] Bluetooth: hci0: command tx timeout [ 163.631011] Bluetooth: hci1: command tx timeout [ 163.822996] Bluetooth: hci3: command tx timeout [ 164.207021] Bluetooth: hci6: command tx timeout [ 164.592338] Bluetooth: hci5: command tx timeout [ 164.655087] Bluetooth: hci7: command tx timeout [ 164.911031] Bluetooth: hci4: command tx timeout [ 165.551272] Bluetooth: hci2: command tx timeout [ 165.615099] Bluetooth: hci0: command tx timeout [ 165.679018] Bluetooth: hci1: command tx timeout [ 165.870995] Bluetooth: hci3: command tx timeout [ 166.255131] Bluetooth: hci6: command tx timeout [ 166.639014] Bluetooth: hci5: command tx timeout [ 166.704041] Bluetooth: hci7: command tx timeout [ 166.958996] Bluetooth: hci4: command tx timeout [ 219.842433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.845612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.848576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.852423] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.854638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.860148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.862457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.866334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.868737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.877665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.882804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.884125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.908836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.918984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.926027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.933331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.940259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.942708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.972279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.984618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.990228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.025210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.033063] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.047350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.262023] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.269791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.278429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.294363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.306831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.310518] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.312279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.313201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.315379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.339292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.343471] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.346377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.373493] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.391280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.405775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.413181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.440309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.470047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.501275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.534344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.548005] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.559244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.611509] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.621816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.935063] Bluetooth: hci0: command tx timeout [ 221.935081] Bluetooth: hci1: command tx timeout [ 221.999168] Bluetooth: hci2: command tx timeout [ 222.127997] Bluetooth: hci3: command tx timeout [ 222.383848] Bluetooth: hci4: command tx timeout [ 222.384173] Bluetooth: hci5: command tx timeout [ 222.639174] Bluetooth: hci7: command tx timeout [ 222.704061] Bluetooth: hci6: command tx timeout [ 223.983136] Bluetooth: hci0: command tx timeout [ 223.983469] Bluetooth: hci1: command tx timeout [ 224.049130] Bluetooth: hci2: command tx timeout [ 224.176959] Bluetooth: hci3: command tx timeout [ 224.431370] Bluetooth: hci4: command tx timeout [ 224.431606] Bluetooth: hci5: command tx timeout [ 224.687047] Bluetooth: hci7: command tx timeout [ 224.751154] Bluetooth: hci6: command tx timeout [ 226.030977] Bluetooth: hci1: command tx timeout [ 226.031118] Bluetooth: hci0: command tx timeout [ 226.095131] Bluetooth: hci2: command tx timeout [ 226.223082] Bluetooth: hci3: command tx timeout [ 226.479055] Bluetooth: hci4: command tx timeout [ 226.479485] Bluetooth: hci5: command tx timeout [ 226.735124] Bluetooth: hci7: command tx timeout [ 226.798985] Bluetooth: hci6: command tx timeout [ 228.079015] Bluetooth: hci0: command tx timeout [ 228.080091] Bluetooth: hci1: command tx timeout [ 228.143059] Bluetooth: hci2: command tx timeout [ 228.272113] Bluetooth: hci3: command tx timeout [ 228.527125] Bluetooth: hci5: command tx timeout [ 228.527525] Bluetooth: hci4: command tx timeout [ 228.785006] Bluetooth: hci7: command tx timeout [ 228.848017] Bluetooth: hci6: command tx timeout [ 240.434577] modprobe (7934) used greatest stack depth: 23328 bytes left [ 282.107449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.110074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.112391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.127702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.134324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.136649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.243762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.245830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.248246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.253205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.257225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.260846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.568097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.569674] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.571469] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.572696] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.574024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.575302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.582448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.585430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.589399] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.590453] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.594216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.595666] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.601443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.620774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.627503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.637140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.639297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.641257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.666767] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.669555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.673695] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.675798] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.676812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.678414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.685399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.687099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.693351] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.698328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.711623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.714260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.717634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.725346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.757559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.771109] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.776314] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.788325] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.207019] Bluetooth: hci0: command tx timeout [ 284.334997] Bluetooth: hci1: command tx timeout [ 284.655571] Bluetooth: hci3: command tx timeout [ 284.720017] Bluetooth: hci5: command tx timeout [ 284.720040] Bluetooth: hci2: command tx timeout [ 284.847063] Bluetooth: hci6: command tx timeout [ 284.848133] Bluetooth: hci7: command tx timeout [ 284.975970] Bluetooth: hci4: command tx timeout [ 286.254947] Bluetooth: hci0: command tx timeout [ 286.382984] Bluetooth: hci1: command tx timeout [ 286.702956] Bluetooth: hci3: command tx timeout [ 286.767069] Bluetooth: hci2: command tx timeout [ 286.767412] Bluetooth: hci5: command tx timeout [ 286.894964] Bluetooth: hci7: command tx timeout [ 286.894973] Bluetooth: hci6: command tx timeout [ 287.023936] Bluetooth: hci4: command tx timeout [ 288.304951] Bluetooth: hci0: command tx timeout [ 288.431105] Bluetooth: hci1: command tx timeout [ 288.752187] Bluetooth: hci3: command tx timeout [ 288.816061] Bluetooth: hci5: command tx timeout [ 288.816161] Bluetooth: hci2: command tx timeout [ 288.942992] Bluetooth: hci7: command tx timeout [ 288.945958] Bluetooth: hci6: command tx timeout [ 289.071948] Bluetooth: hci4: command tx timeout [ 290.351944] Bluetooth: hci0: command tx timeout [ 290.479026] Bluetooth: hci1: command tx timeout [ 290.800928] Bluetooth: hci3: command tx timeout [ 290.863937] Bluetooth: hci5: command tx timeout [ 290.864273] Bluetooth: hci2: command tx timeout [ 290.990993] Bluetooth: hci6: command tx timeout [ 290.991152] Bluetooth: hci7: command tx timeout [ 291.118974] Bluetooth: hci4: command tx timeout [ 338.745784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.746625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.972400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.972963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.293038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.293491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.559359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.560095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.719553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.720204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.849240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.849729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.031043] audit: type=1400 audit(1729123636.379:8): avc: denied { open } for pid=13875 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 340.032313] audit: type=1400 audit(1729123636.380:9): avc: denied { kernel } for pid=13875 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 340.065645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.066200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:07:16 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) [ 340.190556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.191334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:07:16 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) [ 340.264886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.265391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:07:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/205) 00:07:16 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) [ 340.423505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.424297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:07:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/205) [ 340.538605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.539243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:07:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/205) 00:07:16 executing program 5: r0 = inotify_init() syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000104) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x11000000) [ 340.685298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.685794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:07:17 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)) [ 340.865455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.866227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.978886] hrtimer: interrupt took 36398 ns [ 340.995724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.996241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.018612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.019128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.083947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.084482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.685016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.691625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.696410] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.707390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.721073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 364.726247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.778451] Bluetooth: hci0: command tx timeout [ 368.816979] Bluetooth: hci0: command tx timeout [ 370.510279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.512411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.513215] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.515108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.516448] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 370.517225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.640094] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.644615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.645633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.649018] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.650565] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 370.652122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.725662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.738978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.740241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.783441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 370.802267] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 370.816403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.862971] Bluetooth: hci0: command tx timeout [ 372.527174] Bluetooth: hci5: command tx timeout [ 372.719941] Bluetooth: hci6: command tx timeout [ 372.937803] Bluetooth: hci0: command tx timeout [ 372.938489] Bluetooth: hci7: command tx timeout [ 374.575123] Bluetooth: hci5: command tx timeout [ 374.766917] Bluetooth: hci6: command tx timeout [ 374.958912] Bluetooth: hci7: command tx timeout [ 376.623209] Bluetooth: hci5: command tx timeout [ 376.815082] Bluetooth: hci6: command tx timeout [ 377.007076] Bluetooth: hci7: command tx timeout [ 378.670930] Bluetooth: hci5: command tx timeout [ 378.862963] Bluetooth: hci6: command tx timeout [ 379.055404] Bluetooth: hci7: command tx timeout [ 393.733968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.734462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.908588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.910055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.342620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.343174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.390387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.390975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.615735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.616457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.663083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.663540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.082511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.083043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.149122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.149684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:08:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) 00:08:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 00:08:17 executing program 3: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) kexec_load(0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)=ANY=[@ANYRES32]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:08:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 00:08:17 executing program 5: r0 = inotify_init() syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000104) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x11000000) 00:08:17 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) 00:08:17 executing program 4: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) kexec_load(0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)=ANY=[@ANYRES32]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:08:17 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)) 00:08:17 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) 00:08:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 00:08:17 executing program 3: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) kexec_load(0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)=ANY=[@ANYRES32]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:08:17 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)) 00:08:17 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)) 00:08:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) 00:08:17 executing program 5: r0 = inotify_init() syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000104) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x11000000) 00:08:17 executing program 4: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) kexec_load(0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)=ANY=[@ANYRES32]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:08:17 executing program 3: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) kexec_load(0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)=ANY=[@ANYRES32]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:08:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 00:08:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 00:08:17 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) 00:08:17 executing program 4: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x40) kexec_load(0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)=ANY=[@ANYRES32]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 00:08:17 executing program 4: r0 = getpid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000000c0)) r2 = pidfd_open(r0, 0x0) dup2(r1, r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@private=0xa010100, @empty}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x120000) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000001480)=""/4111, 0x7ffff000}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x1, 0x0, 0x4, 0x7, 0x0, 0x7ff, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x8000, 0x4, 0x100, 0x3, 0xac, 0x100, 0x7, 0x0, 0x0, 0x0, 0x3}, r0, 0xf, 0xffffffffffffffff, 0x2) 00:08:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) 00:08:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x10000) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pread64(r0, &(0x7f0000000180)=""/13, 0xd, 0xffffffffffffb677) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d8bcdb48b20dc94c03d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) 00:08:17 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='z', 0x1}], 0x1) 00:08:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 00:08:17 executing program 5: r0 = inotify_init() syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000104) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x11000000) [ 401.704088] 9pnet: Could not find request transport: ‹Í´‹ Ü”À=0x0000000000000008 [ 401.833002] 9pnet: Could not find request transport: ‹Í´‹ Ü”À=0x0000000000000007 00:08:18 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000002d40)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:08:18 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000002d40)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:08:18 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000002d40)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:08:18 executing program 3: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x2, r0, 0x0, 0x80000009, 0x0) 00:08:18 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000002d40)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:08:18 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f00009b8000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e34000/0x4000)=nil) 00:08:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x1c, 0x43, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) 00:08:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2287, &(0x7f0000000000)) 00:08:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x1c, 0x43, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) 00:08:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2287, &(0x7f0000000000)) 00:08:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x25}}) 00:08:19 executing program 7: personality(0x5000004) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 00:08:19 executing program 2: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='z', 0x1}], 0x1) 00:08:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2287, &(0x7f0000000000)) 00:08:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x1c, 0x43, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) 00:08:19 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 00:08:19 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:19 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='z', 0x1}], 0x1) 00:08:19 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 00:08:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x1c, 0x43, 0x0, 0x101, 0x0, 0x0, {0x0, 0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) 00:08:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x2287, &(0x7f0000000000)) 00:08:19 executing program 7: personality(0x5000004) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 00:08:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x25}}) 00:08:19 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='z', 0x1}], 0x1) 00:08:19 executing program 2: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='z', 0x1}], 0x1) 00:08:19 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:19 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 00:08:19 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:19 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:19 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 00:08:20 executing program 7: personality(0x5000004) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 00:08:20 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x25}}) 00:08:20 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:20 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:20 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:20 executing program 2: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='z', 0x1}], 0x1) 00:08:20 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='z', 0x1}], 0x1) 00:08:20 executing program 7: personality(0x5000004) r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 00:08:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x25}}) 00:08:21 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) [ 404.943755] Bluetooth: hci2: command 0x0406 tx timeout [ 404.944261] Bluetooth: hci1: command 0x0406 tx timeout 00:08:21 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) [ 405.051506] Bluetooth: hci3: command 0x0406 tx timeout 00:08:21 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 00:08:21 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5601, 0x0) 00:08:21 executing program 4: r0 = syz_io_uring_setup(0x2bf1, &(0x7f0000000000)={0x0, 0x4ab8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xcde, 0x0, 0x0, 0x0, 0x0) 00:08:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xf0, &(0x7f0000000180)=""/240}, &(0x7f0000000080)="219d60001d65", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:08:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5601, 0x0) 00:08:21 executing program 4: r0 = syz_io_uring_setup(0x2bf1, &(0x7f0000000000)={0x0, 0x4ab8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xcde, 0x0, 0x0, 0x0, 0x0) 00:08:22 executing program 3: r0 = syz_io_uring_setup(0x2bf1, &(0x7f0000000000)={0x0, 0x4ab8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xcde, 0x0, 0x0, 0x0, 0x0) 00:08:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xf0, &(0x7f0000000180)=""/240}, &(0x7f0000000080)="219d60001d65", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:08:22 executing program 3: r0 = syz_io_uring_setup(0x2bf1, &(0x7f0000000000)={0x0, 0x4ab8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xcde, 0x0, 0x0, 0x0, 0x0) 00:08:22 executing program 4: r0 = syz_io_uring_setup(0x2bf1, &(0x7f0000000000)={0x0, 0x4ab8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xcde, 0x0, 0x0, 0x0, 0x0) 00:08:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 00:08:22 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 00:08:22 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 00:08:22 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5601, 0x0) 00:08:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000050}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x1f, 0x10, 0x2, 0x0, 0xfffffffffffff001, 0x8, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0x2}, 0x310, 0x7, 0x1, 0x1, 0x8001, 0x20000000, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x5, r0, 0x8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) 00:08:22 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5601, 0x0) [ 410.598873] Bluetooth: hci4: command 0x0406 tx timeout [ 432.689704] watchdog: BUG: soft lockup - CPU#1 stuck for 25s! [syz-executor.1:15972] [ 432.690289] Modules linked in: [ 432.690512] irq event stamp: 3265963 [ 432.690751] hardirqs last enabled at (3265962): [] irqentry_exit+0x3b/0x90 [ 432.691313] hardirqs last disabled at (3265963): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 432.691903] softirqs last enabled at (3261790): [] handle_softirqs+0x50c/0x770 [ 432.695004] softirqs last disabled at (3261793): [] irq_exit_rcu+0x94/0xc0 [ 432.695571] CPU: 1 UID: 0 PID: 15972 Comm: syz-executor.1 Not tainted 6.12.0-rc3-next-20241016 #1 [ 432.696146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 432.696665] RIP: 0010:arch_stack_walk+0x87/0xf0 [ 432.697028] Code: ff e8 cd 99 07 00 8b 95 68 ff ff ff 85 d2 75 24 eb 36 4c 89 e7 e8 49 51 77 03 84 c0 74 2a 48 8d bd 68 ff ff ff e8 09 75 07 00 <8b> 85 68 ff ff ff 85 c0 74 14 48 8d bd 68 ff ff ff e8 63 72 07 00 [ 432.698146] RSP: 0018:ffff88806cf08fe8 EFLAGS: 00000292 [ 432.698511] RAX: 0000000000000001 RBX: ffffffff813e8f70 RCX: 0000000000000001 [ 432.698977] RDX: ffff88806cf09ff0 RSI: ffff88806cf09fb8 RDI: ffff88806cf08ff8 [ 432.699449] RBP: ffff88806cf09080 R08: 0000000000000001 R09: ffff88806cf09028 [ 432.699911] R10: 000000000003c001 R11: 0000000000007fa2 R12: ffff88806cf090b0 [ 432.700374] R13: 0000000000000000 R14: ffff88803b755280 R15: ffffffff845e995c [ 432.700835] FS: 00007efd7dcb8700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 432.701356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.701746] CR2: 00007efd7dc97718 CR3: 000000001a4f4000 CR4: 0000000000350ef0 [ 432.702211] Call Trace: [ 432.702395] [ 432.702561] ? watchdog_timer_fn+0x3ee/0x510 [ 432.702891] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 432.703238] ? __hrtimer_run_queues+0x57c/0xa70 [ 432.703603] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.703958] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 432.704366] ? hrtimer_interrupt+0x2f2/0x750 [ 432.704713] ? __sysvec_apic_timer_interrupt+0xc2/0x390 [ 432.705095] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 432.705475] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.705875] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 432.706253] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.706662] ? arch_stack_walk+0x87/0xf0 [ 432.706985] ? arch_stack_walk+0x87/0xf0 [ 432.707328] ? irq_exit_rcu+0x94/0xc0 [ 432.707616] stack_trace_save+0x8f/0xc0 [ 432.707925] ? __pfx_stack_trace_save+0x10/0x10 [ 432.708289] ? __kasan_slab_alloc+0x5c/0x70 [ 432.708599] set_track_prepare+0x36/0x70 [ 432.708917] ? __kmalloc_noprof+0x37e/0x4b0 [ 432.709244] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 432.709608] ? ieee80211_inform_bss+0xf7/0x10b0 [ 432.709933] ? cfg80211_inform_single_bss_data+0x7fe/0x1c50 [ 432.710346] ? cfg80211_inform_bss_data+0x20f/0x3510 [ 432.710716] ? cfg80211_inform_bss_frame_data+0x250/0x690 [ 432.711122] ? ieee80211_bss_info_update+0x2f6/0xa90 [ 432.711486] ? ieee80211_scan_rx+0x474/0xac0 [ 432.711802] ? ieee80211_rx_list+0x21ec/0x2cf0 [ 432.712128] ? ieee80211_rx_napi+0xdc/0x3b0 [ 432.712433] ? ieee80211_handle_queued_frames+0xd9/0x130 [ 432.712827] ? tasklet_action_common+0x235/0x3b0 [ 432.713160] ? handle_softirqs+0x1b1/0x770 [ 432.713469] __alloc_object+0xf4/0x270 [ 432.713755] __create_object+0x1d/0x80 [ 432.714044] ? ieee802_11_parse_elems_full+0xec/0x15a0 [ 432.714403] __kmalloc_noprof+0x37e/0x4b0 [ 432.714712] ? __pfx___lock_acquire+0x10/0x10 [ 432.715066] ? irq_exit_rcu+0x94/0xc0 [ 432.715363] ieee802_11_parse_elems_full+0xec/0x15a0 [ 432.715721] ? srso_return_thunk+0x5/0x5f [ 432.716049] ? hlock_class+0x4e/0x130 [ 432.716342] ? srso_return_thunk+0x5/0x5f [ 432.716668] ? mark_lock+0xac/0x1370 [ 432.716966] ? find_held_lock+0x2c/0x110 [ 432.717274] ? paint_ptr+0x36/0x80 [ 432.717538] ? __pfx_mark_lock+0x10/0x10 [ 432.717857] ? __pfx_lock_release+0x10/0x10 [ 432.718191] ? srso_return_thunk+0x5/0x5f [ 432.718519] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 432.718906] ? cfg80211_update_known_bss+0x3c9/0x11e0 [ 432.719292] ? srso_return_thunk+0x5/0x5f [ 432.719624] ? lock_release+0x20f/0x6f0 [ 432.719939] ? __pfx_lock_release+0x10/0x10 [ 432.720274] ? srso_return_thunk+0x5/0x5f [ 432.720597] ? mark_held_locks+0x9e/0xe0 [ 432.720928] ieee80211_inform_bss+0xf7/0x10b0 [ 432.721257] ? srso_return_thunk+0x5/0x5f [ 432.721590] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 432.721957] ? lock_acquire+0x32/0xc0 [ 432.722258] ? cfg80211_inform_single_bss_data+0x6c8/0x1c50 [ 432.722685] cfg80211_inform_single_bss_data+0x7fe/0x1c50 [ 432.723094] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 432.723454] ? __pfx_mark_lock+0x10/0x10 [ 432.723772] ? srso_return_thunk+0x5/0x5f [ 432.724100] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 432.724578] cfg80211_inform_bss_data+0x20f/0x3510 [ 432.724958] ? srso_return_thunk+0x5/0x5f [ 432.725287] ? find_held_lock+0x2c/0x110 [ 432.725575] ? clockevents_program_event+0x14f/0x360 [ 432.725927] ? srso_return_thunk+0x5/0x5f [ 432.726230] ? lock_release+0x20f/0x6f0 [ 432.726531] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 432.726892] ? trace_lock_acquire+0x137/0x1b0 [ 432.727208] ? srso_return_thunk+0x5/0x5f [ 432.727523] ? srso_return_thunk+0x5/0x5f [ 432.727828] ? hlock_class+0x4e/0x130 [ 432.728100] ? srso_return_thunk+0x5/0x5f [ 432.728402] ? mark_lock+0xac/0x1370 [ 432.728679] ? srso_return_thunk+0x5/0x5f [ 432.728980] ? srso_return_thunk+0x5/0x5f [ 432.729281] ? ktime_get+0x171/0x270 [ 432.729564] ? __pfx_mark_lock+0x10/0x10 [ 432.729859] ? srso_return_thunk+0x5/0x5f [ 432.730162] ? srso_return_thunk+0x5/0x5f [ 432.730482] ? clockevents_program_event+0x135/0x360 [ 432.730864] ? srso_return_thunk+0x5/0x5f [ 432.731211] ? srso_return_thunk+0x5/0x5f [ 432.731538] ? mark_held_locks+0x9e/0xe0 [ 432.731858] ? srso_return_thunk+0x5/0x5f [ 432.732182] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 432.732569] ? srso_return_thunk+0x5/0x5f [ 432.732906] cfg80211_inform_bss_frame_data+0x250/0x690 [ 432.733312] ieee80211_bss_info_update+0x2f6/0xa90 [ 432.733667] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 432.734045] ? kcov_remote_start+0x241/0x5b0 [ 432.734389] ? srso_return_thunk+0x5/0x5f [ 432.734728] ? srso_return_thunk+0x5/0x5f [ 432.735051] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 432.735436] ieee80211_scan_rx+0x474/0xac0 [ 432.735744] ? ieee80211_clean_skb+0x18f/0x6f0 [ 432.736108] ieee80211_rx_list+0x21ec/0x2cf0 [ 432.736438] ? hlock_class+0x4e/0x130 [ 432.736729] ? srso_return_thunk+0x5/0x5f [ 432.737060] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 432.737397] ? srso_return_thunk+0x5/0x5f [ 432.737717] ? lock_acquire.part.0+0xeb/0x320 [ 432.738062] ? ieee80211_rx_napi+0x97/0x3b0 [ 432.738393] ? srso_return_thunk+0x5/0x5f [ 432.738715] ? lock_acquire+0x32/0xc0 [ 432.739018] ? ieee80211_rx_napi+0x97/0x3b0 [ 432.739341] ieee80211_rx_napi+0xdc/0x3b0 [ 432.739645] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 432.739987] ? srso_return_thunk+0x5/0x5f [ 432.740313] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 432.740689] ieee80211_handle_queued_frames+0xd9/0x130 [ 432.741086] tasklet_action_common+0x235/0x3b0 [ 432.741418] ? workqueue_softirq_action+0x1a/0x170 [ 432.741792] handle_softirqs+0x1b1/0x770 [ 432.742097] irq_exit_rcu+0x94/0xc0 [ 432.742367] sysvec_apic_timer_interrupt+0x70/0x80 [ 432.742733] [ 432.742905] [ 432.743078] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.743473] RIP: 0010:find_bug+0xb8/0x480 [ 432.743800] Code: e8 fd 93 d8 fc 4c 89 e0 48 c1 e8 03 42 0f b6 14 28 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 89 03 00 00 49 63 1c 24 <48> 89 ef 4c 01 e3 48 89 de e8 6a 96 d8 fc 48 39 dd 0f 84 26 02 00 [ 432.744908] RSP: 0018:ffff88803d8c7aa0 EFLAGS: 00000246 [ 432.745274] RAX: 0000000000000007 RBX: fffffffffd6a7d3f RCX: ffffc9000b455000 [ 432.745736] RDX: 0000000000000000 RSI: ffffffff8478e823 RDI: 0000000000000006 [ 432.746203] RBP: ffffffff81000050 R08: 0000000000000000 R09: fffffbfff0c7e4e9 [ 432.746669] R10: ffffffff83acac5e R11: 1ffffffff0f72b17 R12: ffffffff86423504 [ 432.747128] R13: dffffc0000000000 R14: ffff88800e2b9028 R15: ffffffff84ccdb40 [ 432.747597] ? startup_64+0x50/0x60 [ 432.747857] ? tcf_chain_held_by_acts_only+0x11e/0x160 [ 432.748206] ? find_bug+0x93/0x480 [ 432.748484] register_kprobe+0xba1/0x15f0 [ 432.748774] ? srso_return_thunk+0x5/0x5f [ 432.749076] ? __set_print_fmt+0x630/0x980 [ 432.749361] ? __pfx_register_kprobe+0x10/0x10 [ 432.749667] ? __kmalloc_noprof+0x130/0x4b0 [ 432.749983] __register_trace_kprobe+0x26a/0x2d0 [ 432.750319] create_local_trace_kprobe+0x217/0x410 [ 432.750665] perf_kprobe_init+0x119/0x210 [ 432.750957] ? srso_return_thunk+0x5/0x5f [ 432.751266] perf_kprobe_event_init+0xfc/0x1d0 [ 432.751605] perf_try_init_event+0x13a/0xc40 [ 432.751931] perf_event_alloc.part.0+0x10a3/0x3c30 [ 432.752260] ? perf_event_alloc.part.0+0xf8b/0x3c30 [ 432.752592] ? srso_return_thunk+0x5/0x5f [ 432.752896] ? alloc_fd+0x2c0/0x560 [ 432.753159] ? srso_return_thunk+0x5/0x5f [ 432.753458] ? lock_acquire+0x32/0xc0 [ 432.753743] ? __do_sys_perf_event_open+0xdd5/0x2b60 [ 432.754095] __do_sys_perf_event_open+0x4cb/0x2b60 [ 432.754449] ? srso_return_thunk+0x5/0x5f [ 432.754752] ? srso_return_thunk+0x5/0x5f [ 432.755059] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 432.755435] ? startup_64+0x50/0x60 [ 432.755725] do_syscall_64+0xbf/0x1d0 [ 432.755993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.756342] RIP: 0033:0x7efd80763b19 [ 432.756592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 432.757606] RSP: 002b:00007efd7dcb8188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 432.758068] RAX: ffffffffffffffda RBX: 00007efd80877020 RCX: 00007efd80763b19 [ 432.758495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 432.758926] RBP: 00007efd807bdf6d R08: 0000000000000000 R09: 0000000000000000 [ 432.759362] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 432.759790] R13: 00007ffea206dc8f R14: 00007efd7dcb8300 R15: 0000000000022000 [ 432.760272] [ 432.760458] Sending NMI from CPU 1 to CPUs 0: [ 432.760790] NMI backtrace for cpu 0 [ 432.760817] CPU: 0 UID: 0 PID: 15952 Comm: syz-executor.0 Not tainted 6.12.0-rc3-next-20241016 #1 [ 432.760864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 432.760885] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 432.760952] Code: 7e 60 e8 a3 ff ff ff 31 c0 e9 dc f4 32 03 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 90 2a b2 7e 65 8b 05 91 2a b2 [ 432.760990] RSP: 0018:ffff88806ce093a0 EFLAGS: 00000002 [ 432.761020] RAX: 0000000000010103 RBX: 0000000000000002 RCX: ffffffff813fcf53 [ 432.761045] RDX: ffff88800a493700 RSI: 0000000000000000 RDI: 0000000000000005 [ 432.761070] RBP: 00000064be640ea3 R08: 0000000000000000 R09: fffffbfff0c7e4e9 [ 432.761095] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 432.761119] R13: ffff888009635e38 R14: ffff88806ce2ce80 R15: dffffc0000000000 [ 432.761149] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 432.761184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.761212] CR2: 000000c002227000 CR3: 000000000a5d6000 CR4: 0000000000350ef0 [ 432.761237] Call Trace: [ 432.761247] [ 432.761259] ? nmi_cpu_backtrace+0x179/0x260 [ 432.761318] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 432.761382] ? nmi_handle+0x1a1/0x550 [ 432.761444] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 432.761500] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 432.761555] ? default_do_nmi+0x64/0x1c0 [ 432.761606] ? exc_nmi+0x188/0x1c0 [ 432.761653] ? end_repeat_nmi+0xf/0x53 [ 432.761719] ? __hrtimer_run_queues+0x883/0xa70 [ 432.761768] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 432.761825] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 432.761884] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 432.761940] [ 432.761951] [ 432.761962] __hrtimer_run_queues+0x88c/0xa70 [ 432.762014] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.762059] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 432.762130] hrtimer_interrupt+0x2f2/0x750 [ 432.762187] __sysvec_apic_timer_interrupt+0xc2/0x390 [ 432.762234] sysvec_apic_timer_interrupt+0x34/0x80 [ 432.762291] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.762350] RIP: 0010:stack_depot_save_flags+0xdc/0x900 [ 432.762407] Code: c1 c3 08 44 31 cb 41 89 d9 41 29 d8 01 c3 41 c1 c1 10 45 31 c8 45 89 c1 44 29 c0 41 01 d8 41 c1 c9 0d 44 31 c8 41 89 c1 29 c3 <44> 01 c0 41 c1 c1 04 44 31 cb 83 ff 03 77 89 83 ff 02 0f 84 c2 00 [ 432.762442] RSP: 0018:ffff88806ce09630 EFLAGS: 00000207 [ 432.762470] RAX: 00000000e788dd5c RBX: 0000000070008341 RCX: 0000000000000001 [ 432.762494] RDX: 0000000000000016 RSI: ffff88806ce096d8 RDI: 000000000000001a [ 432.762519] RBP: 0000000000000001 R08: 0000000029ff4b97 R09: 00000000e788dd5c [ 432.762543] R10: ffffffff863f274f R11: 00000000000c2f81 R12: 0000000000000000 [ 432.762568] R13: ffff88806ce09690 R14: 0000000000000016 R15: 0000000000092820 [ 432.762612] kasan_save_stack+0x34/0x50 [ 432.762672] ? kasan_save_stack+0x24/0x50 [ 432.762730] ? kasan_save_track+0x14/0x30 [ 432.762789] ? __kasan_slab_alloc+0x59/0x70 [ 432.762823] ? kmem_cache_alloc_noprof+0x13d/0x3d0 [ 432.762876] ? __alloc_object+0x2f/0x270 [ 432.762912] ? __create_object+0x1d/0x80 [ 432.762946] ? kmem_cache_alloc_node_noprof+0x311/0x3e0 [ 432.763000] ? kmalloc_reserve+0x189/0x2b0 [ 432.763054] ? __alloc_skb+0x162/0x370 [ 432.763090] ? skb_copy+0x1d5/0x3b0 [ 432.763128] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xafb/0x1320 [ 432.763176] ? mac80211_hwsim_tx_frame+0x1ee/0x2a0 [ 432.763218] ? mac80211_hwsim_beacon_tx+0x546/0x950 [ 432.763261] ? __iterate_interfaces+0x2cb/0x5d0 [ 432.763321] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 432.763376] ? mac80211_hwsim_beacon+0x105/0x200 [ 432.763433] ? __hrtimer_run_queues+0x1ab/0xa70 [ 432.763476] ? hrtimer_run_softirq+0x14c/0x310 [ 432.763519] ? handle_softirqs+0x1b1/0x770 [ 432.763556] ? irq_exit_rcu+0x94/0xc0 [ 432.763590] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 432.763647] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.763705] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 432.763758] ? percpu_counter_add_batch+0x1cf/0x240 [ 432.763817] ? unmap_page_range+0x11d9/0x3530 [ 432.763866] ? unmap_single_vma+0x19a/0x2b0 [ 432.763915] ? unmap_vmas+0x1f1/0x450 [ 432.763961] ? exit_mmap+0x187/0xa30 [ 432.764015] ? mmput+0xd5/0x350 [ 432.764049] ? do_exit+0x9ae/0x2a30 [ 432.764096] ? do_group_exit+0xd3/0x2a0 [ 432.764144] ? get_signal+0x219f/0x23d0 [ 432.764177] ? arch_do_signal_or_restart+0x81/0x780 [ 432.764227] ? syscall_exit_to_user_mode+0x123/0x1e0 [ 432.764288] ? do_syscall_64+0xcc/0x1d0 [ 432.764325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.764380] ? __iterate_interfaces+0x2cb/0x5d0 [ 432.764426] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 432.764480] ? mac80211_hwsim_beacon+0x105/0x200 [ 432.764537] ? __hrtimer_run_queues+0x1ab/0xa70 [ 432.764580] ? hrtimer_run_softirq+0x14c/0x310 [ 432.764623] ? handle_softirqs+0x1b1/0x770 [ 432.764658] ? irq_exit_rcu+0x94/0xc0 [ 432.764693] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 432.764749] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.764807] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 432.764859] ? percpu_counter_add_batch+0x1cf/0x240 [ 432.764917] ? unmap_page_range+0x11d9/0x3530 [ 432.764966] ? unmap_single_vma+0x19a/0x2b0 [ 432.765014] ? unmap_vmas+0x1f1/0x450 [ 432.765061] ? exit_mmap+0x187/0xa30 [ 432.765112] ? mmput+0xd5/0x350 [ 432.765146] ? do_exit+0x9ae/0x2a30 [ 432.765192] ? do_group_exit+0xd3/0x2a0 [ 432.765240] ? get_signal+0x219f/0x23d0 [ 432.765272] ? arch_do_signal_or_restart+0x81/0x780 [ 432.765321] ? syscall_exit_to_user_mode+0x123/0x1e0 [ 432.765382] ? do_syscall_64+0xcc/0x1d0 [ 432.765419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.765478] kasan_save_track+0x14/0x30 [ 432.765537] __kasan_slab_alloc+0x59/0x70 [ 432.765573] kmem_cache_alloc_noprof+0x13d/0x3d0 [ 432.765626] ? lock_downgrade+0x6d0/0x6e0 [ 432.765692] __alloc_object+0x2f/0x270 [ 432.765729] __create_object+0x1d/0x80 [ 432.765767] kmem_cache_alloc_node_noprof+0x311/0x3e0 [ 432.765820] ? __create_object+0x59/0x80 [ 432.765856] ? kmalloc_reserve+0x189/0x2b0 [ 432.765913] kmalloc_reserve+0x189/0x2b0 [ 432.765969] __alloc_skb+0x162/0x370 [ 432.766007] ? __pfx___alloc_skb+0x10/0x10 [ 432.766043] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 432.766106] ? srso_return_thunk+0x5/0x5f [ 432.766176] skb_copy+0x1d5/0x3b0 [ 432.766214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.766272] mac80211_hwsim_tx_frame_no_nl.isra.0+0xafb/0x1320 [ 432.766326] ? __pfx_lock_release+0x10/0x10 [ 432.766384] ? srso_return_thunk+0x5/0x5f [ 432.766447] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 432.766495] ? srso_return_thunk+0x5/0x5f [ 432.766556] ? __x86_indirect_jump_thunk_r12+0x20/0x20 [ 432.766625] ? srso_return_thunk+0x5/0x5f [ 432.766686] ? srso_return_thunk+0x5/0x5f [ 432.766747] ? srso_return_thunk+0x5/0x5f [ 432.766808] ? mac80211_hwsim_monitor_rx+0x1be/0x820 [ 432.766875] mac80211_hwsim_tx_frame+0x1ee/0x2a0 [ 432.766922] mac80211_hwsim_beacon_tx+0x546/0x950 [ 432.766967] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 432.767018] __iterate_interfaces+0x2cb/0x5d0 [ 432.767066] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 432.767113] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 432.767158] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 432.767216] mac80211_hwsim_beacon+0x105/0x200 [ 432.767273] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 432.767345] __hrtimer_run_queues+0x1ab/0xa70 [ 432.767397] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 432.767441] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 432.767512] hrtimer_run_softirq+0x14c/0x310 [ 432.767559] handle_softirqs+0x1b1/0x770 [ 432.767601] irq_exit_rcu+0x94/0xc0 [ 432.767636] sysvec_apic_timer_interrupt+0x70/0x80 [ 432.767693] [ 432.767704] [ 432.767715] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.767774] RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 [ 432.767830] Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 a6 ab fc 48 89 ef e8 0e 17 ac fc 80 e7 02 74 06 e8 24 26 d5 fc fb 65 ff 0d a4 54 7f 7b <74> 07 5b 5d e9 b3 1e 00 00 0f 1f 44 00 00 5b 5d e9 a7 1e 00 00 0f [ 432.767865] RSP: 0018:ffff88803dd7f5c8 EFLAGS: 00000202 [ 432.767893] RAX: 00000000003627dd RBX: 0000000000000293 RCX: 1ffffffff0fdae97 [ 432.767917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8484521c [ 432.767942] RBP: ffff88803af4e108 R08: 0000000000000001 R09: fffffbfff0fda9d4 [ 432.767967] R10: ffffffff87ed4ea7 R11: 00000000fa83b2da R12: ffff88803af4e108 [ 432.767992] R13: fffffffffffffff8 R14: 1ffff11007bafebf R15: ffffffffffffffe5 [ 432.768027] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 432.768083] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 432.768136] percpu_counter_add_batch+0x1cf/0x240 [ 432.768197] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 432.768257] ? __folio_rmap_sanity_checks.constprop.0+0x19c/0x440 [ 432.768312] ? srso_return_thunk+0x5/0x5f [ 432.768372] ? __tlb_remove_folio_pages_size.constprop.0+0x169/0x560 [ 432.768442] unmap_page_range+0x11d9/0x3530 [ 432.768508] ? mark_held_locks+0x9e/0xe0 [ 432.768567] ? __pfx_unmap_page_range+0x10/0x10 [ 432.768618] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 432.768683] ? srso_return_thunk+0x5/0x5f [ 432.768744] ? uprobe_munmap+0x20/0x5d0 [ 432.768802] unmap_single_vma+0x19a/0x2b0 [ 432.768856] unmap_vmas+0x1f1/0x450 [ 432.768909] ? __pfx_unmap_vmas+0x10/0x10 [ 432.768960] ? srso_return_thunk+0x5/0x5f [ 432.769020] ? lock_release+0x20f/0x6f0 [ 432.769086] ? srso_return_thunk+0x5/0x5f [ 432.769147] ? lock_acquire+0x32/0xc0 [ 432.769205] ? mlock_drain_local+0x25/0x3e0 [ 432.769248] exit_mmap+0x187/0xa30 [ 432.769304] ? __pfx_exit_mmap+0x10/0x10 [ 432.769357] ? trace_contention_end+0xd9/0x120 [ 432.769447] mmput+0xd5/0x350 [ 432.769483] do_exit+0x9ae/0x2a30 [ 432.769532] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 432.769595] ? srso_return_thunk+0x5/0x5f [ 432.769657] ? __pfx_do_exit+0x10/0x10 [ 432.769713] do_group_exit+0xd3/0x2a0 [ 432.769764] get_signal+0x219f/0x23d0 [ 432.769806] ? __pfx_get_signal+0x10/0x10 [ 432.769848] arch_do_signal_or_restart+0x81/0x780 [ 432.769899] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.769960] ? srso_return_thunk+0x5/0x5f [ 432.770026] syscall_exit_to_user_mode+0x123/0x1e0 [ 432.770088] do_syscall_64+0xcc/0x1d0 [ 432.770127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.770182] RIP: 0033:0x7fac4a3e4b19 [ 432.770206] Code: Unable to access opcode bytes at 0x7fac4a3e4aef. [ 432.770222] RSP: 002b:00007fac4795a188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 432.770256] RAX: 0000000000000004 RBX: 00007fac4a4f7f60 RCX: 00007fac4a3e4b19 [ 432.770281] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 432.770306] RBP: 00007fac4a43ef6d R08: 000000000000000b R09: 0000000000000000 [ 432.770330] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 432.770354] R13: 00007ffe28f5932f R14: 00007fac4795a300 R15: 0000000000022000 [ 432.770392] 00:08:49 executing program 4: r0 = syz_io_uring_setup(0x2bf1, &(0x7f0000000000)={0x0, 0x4ab8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xcde, 0x0, 0x0, 0x0, 0x0) 00:08:49 executing program 3: r0 = syz_io_uring_setup(0x2bf1, &(0x7f0000000000)={0x0, 0x4ab8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xcde, 0x0, 0x0, 0x0, 0x0) 00:08:49 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x28}}], 0x2, 0x0) [ 433.312744] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 00:08:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 00:08:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 00:08:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xf0, &(0x7f0000000180)=""/240}, &(0x7f0000000080)="219d60001d65", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:08:49 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @private}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'syz_tun\x00'}) 00:08:49 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 00:08:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 00:08:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 00:08:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 00:08:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 00:08:49 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 00:08:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 00:08:49 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 00:08:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xf0, &(0x7f0000000180)=""/240}, &(0x7f0000000080)="219d60001d65", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:08:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 00:08:49 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x28}}], 0x2, 0x0) 00:08:49 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @private}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'syz_tun\x00'}) 00:08:50 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 00:08:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 00:08:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 00:08:50 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @private}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'syz_tun\x00'}) [ 433.900175] audit: type=1400 audit(1729123730.249:10): avc: denied { write } for pid=16026 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 433.904976] audit: type=1400 audit(1729123730.254:11): avc: denied { read } for pid=16026 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:08:50 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 00:08:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:08:50 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x28}}], 0x2, 0x0) 00:08:50 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 00:08:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 00:08:50 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 00:08:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f40)=[{{&(0x7f0000001b40)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002340)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 00:08:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:08:50 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @private}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'syz_tun\x00'}) 00:08:50 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x7}}], 0x28}}], 0x2, 0x0) 00:08:50 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 00:08:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 00:08:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 00:08:50 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 00:08:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f40)=[{{&(0x7f0000001b40)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002340)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 00:08:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:08:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) 00:08:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f40)=[{{&(0x7f0000001b40)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002340)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 00:08:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:08:50 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 00:08:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x7, 0x0, 0x0) 00:08:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) 00:08:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 00:08:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 00:08:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 00:08:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x7, 0x0, 0x0) 00:08:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f40)=[{{&(0x7f0000001b40)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002340)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 00:08:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) 00:08:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 00:08:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) 00:08:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01a76d88d2006c4bf630210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 00:08:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x7, 0x0, 0x0) 00:08:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 00:08:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) 00:08:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000052005fd013b90ec9951ff1310a"], 0x28}}, 0x0) 00:08:51 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 00:08:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 00:08:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x7, 0x0, 0x0) 00:08:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) 00:08:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01a76d88d2006c4bf630210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 00:08:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101442, 0x0) fadvise64(r1, 0x0, 0x100000001, 0x2) 00:08:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 00:08:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000052005fd013b90ec9951ff1310a"], 0x28}}, 0x0) 00:08:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101442, 0x0) fadvise64(r1, 0x0, 0x100000001, 0x2) 00:08:51 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000108) 00:08:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01a76d88d2006c4bf630210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 00:08:51 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 00:08:51 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 00:08:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_delete(0x0) 00:08:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:08:51 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000108) 00:08:51 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 00:08:51 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 00:08:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x7e) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200), 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 00:08:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000052005fd013b90ec9951ff1310a"], 0x28}}, 0x0) 00:08:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01a76d88d2006c4bf630210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 00:08:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101442, 0x0) fadvise64(r1, 0x0, 0x100000001, 0x2) 00:08:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, &(0x7f00000001c0)="ab530d71a89dea43415a7d3ff070072c116c6f59f677f67c518b9766cf7c26afaa2f023a4b31db136f60a2d43551cd5ab888c103b79dd8817fd60b40d48e6616395d7bcd8d37030150bb7727b53d634195d9772ddbaf9b45316cd15ec05b1ae84ac60d6581eb3c3646830c0f2b781ab62857f2955729ec2c0edc50675b63401b3dac0437b27343de2f237195503b56f30f56820201a8b3c216f7f88ba89aa43eed75faf6dfb3f803aa4c873d17a59b6d78590c75777d368b0dd95e6a076792d7b669baaf6d8fa57fed6e04b3c8f5ae228fc6ca917b3a5c68ef89f695d56f7f3927d30376cb361b3f7587069ddfa0341b510bf1204266469da15e175f161377b97f3b5aa0049698d2fefb8318b2de765b0e7faff28c1af80f74b44308fef7bccdade03b7b41f493be9420b133df2abc2484f9c94e561ce60b4a7914e96bb64e9a2263dcb5e3b66dfe7b213f2ea3bb2b93120eb0d48dcdeeba0f65e58babf8c7a86a150ee5e282e22c3be8cf9539463d4a09236d840ef7b4c7fbece1f26b3fa8283ed1a569bd0fb00332dd43db85a0fd2380f0d558dc9f435891da46037b62a677cdcb2d263d24027480e9c4705f00a7d447ff4a400940984544221753ebcdfccea3adfd9f3640d5e590ed98541a58340e31a68f0c29fe7775a45d3d7cef6983eb8d8f382cc6dd9e5e5c3cb2a0a34abce44f0f4da011c21fe44053673325ebaba5cdaad30ba74f129eeef65ab431eff66c0f9775078869581bb0804173353ee7141e92fd1858a6802d23ae6e95322ab95f1d416e920d10b0cf840ac2245e577429cf6951e51a22fa3acc410c0e032c651eab0287088d6391d361bcaeec8e28bad7e62080587278102f158da5d6fcb224d915da6e055dd9fe34b7d24f9e125ff6e8790c5eb8b5ea0b23279ec01644389960b100d55d06959130d93e1e1769ebb63780fcbd6290e0a093130902fc40dea33b5045f808d6d96a33e1514785cb7ae9f29a5465cc2c4577dec9503142cb05832425954355c9226de3c1e054f4b85a7472bb35de427f6ddca69916f28eb8455c92420f913ad57aa0b45655c75a3a4889a9594a052d530ac5ca30c8907fd9c15923ffda1f4a89dedb20774c61621cc3c7add5ca47e2962ee8458ab5330969e36077dbe9247953b50e70b61a444304b163e03220b73ac8284f26568aa8a2c59273c535c18a944b60bf9c99e3a022227ae5e45a05a38b9f26368fcfe4d461ca0583c95695120d736a8784e35895a3cdb97fd1b95156b0f9f197935469052fc9cf847ae1435ab4d59cf6559c3b882ccc92d3bbc48db6b81473940c52196dc1d2947ec94630d04b2f7f9ab0f9f995adf408870e515f2bdb8bb805a51cb0e781cb08c4f21507d974c4e00d73caaa429d82732ec2f6cbfe006479259fc104bcd994b67df462908ebbe2c2c56e80df196df05ebd2a5e6f36cf5fd7ee219e1ac5275ae21dd1a9a48a0e6eeb5009ec481b7c4cd58ffcd1fc7a558b5fc36c0d10a17bba50d1f85464d670e00ea48da2c7312373eccfee061415ea57f2136bac69bae88ec196b3ef80c1c8fce80c9079bebece8e7038406f09cc31e35efeae92f497d21218e6f57ccf0d2cf4f841e7101158099fb119a25c54ae6bb3f398ab3352edc7ce86189d1228e363c0aac01b9e178e64863df954e3332874d6cfd7c296a94a8c5932b17ebe4b95431ca547f5c90105fbe98c6b65e9c78943c440aeaf3e9fcf915f18e19de8c06488b48aecbd776c4ffae0c1f13efe73c08f5ecf0335128bc186d61cd4dfc2cb280596f5aaffdddf1b25c54bedfdf120f31f9b8256d97783dc5a4c949a0e7057780ca8c90acf72e69f91a144d4b7250e70b754e5ca195a1e8ae682d0fab49114524377f842844c620559d62fc38d2e32a756ddbdb53da39556ea69d07f11fe984eea64f7a769c074c3f431176bf0fef5ad15d3c2b33d580a3d978fe794381b8e54560fbe7e76faf457b495d9c6bcbfc3b2a35add3dcb9c441bc1ed0029f58b80cd0220c2644fc57795f27932674abdca62ac8c10d017a646b954f7f9022e156ec873d4966b71a637cc6c063f160b8462d73569523517da9d62cf006d56c2fbfbd4fcae4bc49208d3439c4adfea9bee3e705d794b1d40277d9b18c9653cd2815828962c55249f709ab88e19a9d7986c79833c782a02fd184ba0eeba4314332ec16c239e363350d20c30d062d4a2eb6d9b3203c5ad6f27805a676b9a6636e9bfff833497615895c49dbc0d5ab093f07f9015b6bd9d980488083c99105424261dbded8918a32c361dbc03474827fadd813467aec253184584869b1ed74ee9149489041b0123cca08573868a6d1ee3653595e4dfb5d32a8c879b70120567d11a21953493b2fe6ae093ce678eadbcee2f09a06b24f4342e10b87f6024b40fe557cb7f935f9599a04ad5651547c52f3a7238e29facd2d344fe653e09de85ed3493db918ecb2dab39462832a701811a0fb216aa6787f046f6f8e4f69b1123627dfdc3d2a230083a67bc57b5e12255c2b92006aacdff650317bb49bb2611c0ca2896e302bca0e2c01fcbff1d478a7a25a8fdfab70530634de671efa19d90e944718aacd223e78db16be793cf55482d8ba5355d7f8ee1039a966b20852492292e8f56bba895acac689c75e3a42e01e4fd52154610dc880c6f7ca3b9fa1650dbe2356b34f9410f77cc238b2b23173d62ab050e2305405801cb3c26be105a085b67d2747a87d85cd7f85777ef8cf54641c8f4004cc8eb1251673c0e76eab8d15e2dceecc7588bd01c9c9def857c74913c1fffe34c7994662248d6f85513fca42e596756018c38af6b504a3ff2bcf29fb84baaf3578d35e8a96b77d68a43f39401aa109a32e4ac874a5496bb6f7ae814438aad3bc7267f2e41d8510e031109d91c58f1ce8ecf1da196d175bdf315282d50d7d6acf8bb3826f218d7f96961ec47f7d1e8a4f9cfb3b37b28dfee44323ee870d3df60c91c309d33abf292642fe81ead695e278d8516bb37283a0705d8143d3c01c7fccf3fe40dd6af65b4c18492e845f83180d7b3337bbf3fc04eb0e9ca79247ecea30667fd06bde7f4a3e6928fb1a49895c50ea639d7b95a6001c37b1db5b8ee5852048f3d96f96ffce0802b26059b65ee11bd3a5104b57d9d5acb793200f8590a4f212f064d2435e12275219a4be02533946d50949589eee85b6cdb9d69c211be9cebe56bee8395ddd1db62cff7068a65cb898c21e8e7144c0ba4f1d1a151f0da1a3b9e09a1bc78654f3bd09f9d2429e179ba5a8514c7e12326731858cf0857ca2ab12d7bef75dad0dbfbfcf3ad1b846ab13e878665d12c5eff2b10636e620683ff4e6056a4fa7220c4e4e044614aedd1a2336b4d38d79a684a4846513ee1678964d15a857bbf4ee483c22cead4086497abff8bdfc7cef67a64d1080e0d0eeef62c38dce396c8a5b0afef4d79b3be96097b752a4e8ab828ce88733bdabc3c4acef2459d883d7150c58187e70d46e4484414fa9a3beafe95e5e084af2d0a03ed7a352299c35d7431205654e2c90ee32ec43f48633e7e1a47c10c458d5ffdf7e6345699ada99661c614a76bc7e4f9d195863824c44143e7da0dcc5ed0a910bffa8ab293749e724f2322c2f55cc330ce1fdca172c66e253d5a67eacbb062dbbc230d2ef24fc1a75d9eda783970bc872870adcbb6e9dde640bf1ac298ee9babf9c578c23f746f30d14802e8421fa5651872a1b5e3fae8a0f8912e903ecdf587ecf82898c9b2998e1129a86b5b521f6d96d3361834effc1b4d340cd799eb5a3aacde11906637b1d2dfa5efe4c6be5006def692effbec905fbea893f5e22e36e9879df6d298a6c88136aabb33b75b5a88269a715b785b58bf66ac57cb5a9b254a48ab451453dfa81299634aa66416977203346e51e85515829d3480d03f1e5bee8cb2d1cba6456afc650eeba79ed43e03968cab43fdd38463f0c2c7d823897c9de829e88bc8625a3ab3e4bb8ef884d64475ae0c47ece57954efec7eed3b285dbb89d96efdd17914925b1e7cdd0b66fc4201f0b77a7e87e44a9546f94754d7d97f98e70d98b122d8607c1e91f52567e5a2355f91014e615c57441d53a6da14c1f655f28cdc54ec9ca4195de06960dd6a19b1cd71e3f34ec76170344f1c84b32128c461fde745afdf72f61d0f08d48c9875bf16905017ec9d83fe3ea41bf42a2cb20d61f5e04f51908ad2df6c77d5268f81d658402a3de5dea01c9ff4037a089a3cefb0ff42b6fdd7170e4a2f1af744702daee056449f33a6760814c81caf7323a560f960a62dccecdd274de4701eb9d21984952d47f5f4d0222534975fe378917b4d647ef0e08510f6b3b5434fc030d060e62c3de225044c59d098c43f3d258fd931efe32ee1b043ed861043d2cf053641e94e18b7610ff82fda1c2bc16a6a63f32935465027281d4611aaed650e39d1ab151f1f315df265c03b89ebf0c5ce77a59dc0112476ecd3ab7b67e049039d448f163294ffa3c312dafe8148ab1ac2b9273dbefb6432b4f624ff4aad898c403a4999722db4d12395203210e0a7f76f38913b37d9d0c4871d6ecb0026e73b998f4525ae17d9db38f2891b006fab45cbae7b79fff109dcd674efc9c40b50559a76310f25c83331b318244b1a22c805527f1c0cc070bc7b5105861bf8f88edaff7a019bf3e85c93bd2bab85bb43c69e54a25ab77b67c5edbd7607cde0674ebb3d00b715bfc0f64c394477a20b809eebe57b180c2b4091c2cd16e6bd1a3f2956d497920ea041cb84f632e02106e183f12bf3c3f4bb19befdcb0b5e3ec5c3c996a86ef980d5784424ac8b0d08", 0xd55) 00:08:52 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000108) 00:08:52 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 00:08:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x7e) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200), 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 00:08:52 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 00:08:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000052005fd013b90ec9951ff1310a"], 0x28}}, 0x0) 00:08:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, &(0x7f00000001c0)="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", 0xd55) 00:08:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101442, 0x0) fadvise64(r1, 0x0, 0x100000001, 0x2) 00:08:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000007c0), 0x8) 00:08:52 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000108) 00:08:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x7e) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200), 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 00:08:52 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/181, 0xb5, 0x0) 00:08:52 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="4676e2b7f1dd1563ef22e549585e7029136644f4a18425c93af6dc1b093af14067fa", 0x22) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/61, 0x3d}], 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) shutdown(0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'veth1_to_team\x00', {}, 0xfff}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x450800, 0x48) 00:08:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, &(0x7f00000001c0)="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", 0xd55) 00:08:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000007c0), 0x8) 00:08:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2}) 00:08:52 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) recvmsg$unix(r2, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0) 00:08:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000007c0), 0x8) 00:08:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, &(0x7f00000001c0)="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", 0xd55) 00:08:58 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/181, 0xb5, 0x0) 00:08:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x7e) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200), 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 00:08:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) recvmsg$unix(r2, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0) 00:08:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@random="6dacc5e7be28", @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:08:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2}) VM DIAGNOSIS: 00:08:49 Registers: info registers vcpu 0 RAX=0000000000010303 RBX=dffffc0000000000 RCX=ffffffff813ffbde RDX=ffff88800a493700 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88806ce08e38 R8 =0000000000000001 R9 =ffff88800a494138 R10=0000000000000000 R11=0000000000000000 R12=0000000000000006 R13=ffff88806ce2ce4c R14=0000000000000001 R15=ffff88806ce2ce00 RIP=ffffffff813ffbe0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c002227000 CR3=000000000a5d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004121e4b000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8262d465 RDI=ffffffff886610c0 RBP=ffffffff88661080 RSP=ffff88806cf08830 R8 =0000000000000000 R9 =ffffed1001da3046 R10=000000000000005d R11=7371726974666f73 R12=000000000000005d R13=ffffffff88661080 R14=0000000000000010 R15=ffffffff8262d450 RIP=ffffffff8262d4bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007efd7dcb8700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efd7dc97718 CR3=000000001a4f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000