Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:31818' (ECDSA) to the list of known hosts. 2024/11/28 16:30:04 fuzzer started 2024/11/28 16:30:05 dialing manager at localhost:37935 syzkaller login: [ 54.210891] cgroup: Unknown subsys name 'net' [ 54.307068] cgroup: Unknown subsys name 'cpuset' [ 54.340283] cgroup: Unknown subsys name 'rlimit' 2024/11/28 16:30:26 syscalls: 2217 2024/11/28 16:30:26 code coverage: enabled 2024/11/28 16:30:26 comparison tracing: enabled 2024/11/28 16:30:26 extra coverage: enabled 2024/11/28 16:30:26 setuid sandbox: enabled 2024/11/28 16:30:26 namespace sandbox: enabled 2024/11/28 16:30:26 Android sandbox: enabled 2024/11/28 16:30:26 fault injection: enabled 2024/11/28 16:30:26 leak checking: enabled 2024/11/28 16:30:26 net packet injection: enabled 2024/11/28 16:30:26 net device setup: enabled 2024/11/28 16:30:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/28 16:30:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/28 16:30:26 USB emulation: enabled 2024/11/28 16:30:26 hci packet injection: enabled 2024/11/28 16:30:26 wifi device emulation: enabled 2024/11/28 16:30:26 802.15.4 emulation: enabled 2024/11/28 16:30:26 fetching corpus: 0, signal 0/2000 (executing program) 2024/11/28 16:30:26 fetching corpus: 38, signal 20554/23850 (executing program) 2024/11/28 16:30:27 fetching corpus: 73, signal 28233/32785 (executing program) 2024/11/28 16:30:27 fetching corpus: 118, signal 37006/42455 (executing program) 2024/11/28 16:30:27 fetching corpus: 166, signal 47196/53162 (executing program) 2024/11/28 16:30:27 fetching corpus: 216, signal 52908/59429 (executing program) 2024/11/28 16:30:27 fetching corpus: 266, signal 60605/67288 (executing program) 2024/11/28 16:30:27 fetching corpus: 316, signal 64123/71261 (executing program) 2024/11/28 16:30:27 fetching corpus: 366, signal 68750/76066 (executing program) 2024/11/28 16:30:28 fetching corpus: 416, signal 73343/80701 (executing program) 2024/11/28 16:30:28 fetching corpus: 466, signal 77748/84980 (executing program) 2024/11/28 16:30:28 fetching corpus: 516, signal 79725/87206 (executing program) 2024/11/28 16:30:28 fetching corpus: 566, signal 82317/89842 (executing program) 2024/11/28 16:30:28 fetching corpus: 616, signal 83937/91642 (executing program) 2024/11/28 16:30:28 fetching corpus: 666, signal 85859/93624 (executing program) 2024/11/28 16:30:28 fetching corpus: 716, signal 87917/95655 (executing program) 2024/11/28 16:30:28 fetching corpus: 766, signal 92994/99705 (executing program) 2024/11/28 16:30:29 fetching corpus: 816, signal 95212/101629 (executing program) 2024/11/28 16:30:29 fetching corpus: 866, signal 96574/102873 (executing program) 2024/11/28 16:30:29 fetching corpus: 915, signal 97820/104028 (executing program) 2024/11/28 16:30:29 fetching corpus: 965, signal 99699/105553 (executing program) 2024/11/28 16:30:29 fetching corpus: 1015, signal 102317/107454 (executing program) 2024/11/28 16:30:30 fetching corpus: 1064, signal 105128/109386 (executing program) 2024/11/28 16:30:30 fetching corpus: 1113, signal 106185/110196 (executing program) 2024/11/28 16:30:30 fetching corpus: 1163, signal 107313/111002 (executing program) 2024/11/28 16:30:30 fetching corpus: 1212, signal 109192/112204 (executing program) 2024/11/28 16:30:30 fetching corpus: 1262, signal 110615/113050 (executing program) 2024/11/28 16:30:30 fetching corpus: 1312, signal 111628/113640 (executing program) 2024/11/28 16:30:31 fetching corpus: 1362, signal 113011/114424 (executing program) 2024/11/28 16:30:31 fetching corpus: 1412, signal 113858/114878 (executing program) 2024/11/28 16:30:31 fetching corpus: 1462, signal 114921/115400 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115478 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115493 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115507 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115518 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115530 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115547 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115561 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115573 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115586 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115597 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115607 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115618 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115634 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115650 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115663 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115673 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115683 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115699 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115710 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115728 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115745 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115758 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115770 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115787 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115802 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115811 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115821 (executing program) 2024/11/28 16:30:31 fetching corpus: 1477, signal 115037/115821 (executing program) 2024/11/28 16:30:35 starting 8 fuzzer processes 16:30:35 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="11", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 16:30:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) io_destroy(r0) 16:30:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @u32=0x2000000}, @generic="b2"]}, 0x1c}], 0x1}, 0x0) [ 83.664661] audit: type=1400 audit(1732811435.438:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:30:35 executing program 3: init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 16:30:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='timerslack_ns\x00') write(r0, 0x0, 0x3c) 16:30:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan1\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) 16:30:35 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, 0x0}]) 16:30:35 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000600)) [ 85.178966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.183926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.186278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.191151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.196575] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.199169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.242667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.245781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.248057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.260909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.265799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.272782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.300292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.309129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.316709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.325490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.328988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.331154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.337190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.341636] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.344757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.354553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.356955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.367571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.369801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.371215] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.373407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.380939] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.391707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.399627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.403732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.405573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.413239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.417937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.420854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.425823] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.437160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.441756] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.450596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.453240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.459893] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.463620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.465916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.467987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.471760] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.513322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.524569] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.530074] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.261982] Bluetooth: hci0: command tx timeout [ 87.325650] Bluetooth: hci1: command tx timeout [ 87.453530] Bluetooth: hci2: command tx timeout [ 87.517532] Bluetooth: hci3: command tx timeout [ 87.518137] Bluetooth: hci4: command tx timeout [ 87.582479] Bluetooth: hci6: command tx timeout [ 87.583035] Bluetooth: hci5: command tx timeout [ 87.646688] Bluetooth: hci7: command tx timeout [ 89.311435] Bluetooth: hci0: command tx timeout [ 89.374392] Bluetooth: hci1: command tx timeout [ 89.504397] Bluetooth: hci2: command tx timeout [ 89.566477] Bluetooth: hci3: command tx timeout [ 89.566932] Bluetooth: hci4: command tx timeout [ 89.630455] Bluetooth: hci6: command tx timeout [ 89.630919] Bluetooth: hci5: command tx timeout [ 89.694522] Bluetooth: hci7: command tx timeout [ 91.357494] Bluetooth: hci0: command tx timeout [ 91.422540] Bluetooth: hci1: command tx timeout [ 91.550406] Bluetooth: hci2: command tx timeout [ 91.613420] Bluetooth: hci3: command tx timeout [ 91.613866] Bluetooth: hci4: command tx timeout [ 91.677427] Bluetooth: hci6: command tx timeout [ 91.677872] Bluetooth: hci5: command tx timeout [ 91.742389] Bluetooth: hci7: command tx timeout [ 93.408395] Bluetooth: hci0: command tx timeout [ 93.469494] Bluetooth: hci1: command tx timeout [ 93.598386] Bluetooth: hci2: command tx timeout [ 93.662535] Bluetooth: hci4: command tx timeout [ 93.662981] Bluetooth: hci3: command tx timeout [ 93.725422] Bluetooth: hci5: command tx timeout [ 93.725867] Bluetooth: hci6: command tx timeout [ 93.789434] Bluetooth: hci7: command tx timeout [ 141.721715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.722506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.923668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.924380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.700417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.701106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.809762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.810587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.903074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.903784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.985508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.986169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.102822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.103526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.106559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.107224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.248496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.249139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.319002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.319794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.573392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.574011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.680078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.680776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.846710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.847358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.680129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.689793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.692651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.708801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.712831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.715475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.795186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.796852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.798154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.800760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.803585] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.804799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.866010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.869383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.870756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.873779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.877579] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.878866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.921780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.923962] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.928244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.931123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.933146] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.934282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.938799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.946611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.986897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.049990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.053845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.065859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.767420] Bluetooth: hci0: command tx timeout [ 148.832467] Bluetooth: hci3: command tx timeout [ 148.957461] Bluetooth: hci7: command tx timeout [ 148.958599] Bluetooth: hci4: command tx timeout [ 149.149704] Bluetooth: hci5: command tx timeout [ 150.814173] Bluetooth: hci0: command tx timeout [ 150.878607] Bluetooth: hci3: command tx timeout [ 151.005481] Bluetooth: hci7: command tx timeout [ 151.005984] Bluetooth: hci4: command tx timeout [ 151.197545] Bluetooth: hci5: command tx timeout [ 152.862535] Bluetooth: hci0: command tx timeout [ 152.926300] Bluetooth: hci3: command tx timeout [ 153.053483] Bluetooth: hci7: command tx timeout [ 153.053995] Bluetooth: hci4: command tx timeout [ 153.246432] Bluetooth: hci5: command tx timeout [ 154.909482] Bluetooth: hci0: command tx timeout [ 154.973386] Bluetooth: hci3: command tx timeout [ 155.102647] Bluetooth: hci4: command tx timeout [ 155.103152] Bluetooth: hci7: command tx timeout [ 155.293837] Bluetooth: hci5: command tx timeout [ 181.884370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.885023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.078086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.078981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.987555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.988197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.050366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.051020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.106021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.106799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.148219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.148893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.231767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.232716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.293201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.294209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.362617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.363229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.496957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.497667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.613145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.783248] Invalid ELF header magic: != ELF [ 183.786930] Invalid ELF header magic: != ELF 16:32:15 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, 0x0}]) 16:32:15 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="11", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 16:32:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='timerslack_ns\x00') write(r0, 0x0, 0x3c) 16:32:15 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000600)) 16:32:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan1\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) 16:32:15 executing program 3: init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 16:32:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) io_destroy(r0) 16:32:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @u32=0x2000000}, @generic="b2"]}, 0x1c}], 0x1}, 0x0) [ 184.283971] Invalid ELF header magic: != ELF 16:32:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan1\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) 16:32:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) io_destroy(r0) 16:32:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='timerslack_ns\x00') write(r0, 0x0, 0x3c) 16:32:16 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000600)) 16:32:16 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="11", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 16:32:16 executing program 3: init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 16:32:16 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, 0x0}]) 16:32:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @u32=0x2000000}, @generic="b2"]}, 0x1c}], 0x1}, 0x0) [ 184.527835] Invalid ELF header magic: != ELF 16:32:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @u32=0x2000000}, @generic="b2"]}, 0x1c}], 0x1}, 0x0) 16:32:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) io_destroy(r0) 16:32:16 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000600)) 16:32:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='timerslack_ns\x00') write(r0, 0x0, 0x3c) 16:32:16 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="11", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 16:32:16 executing program 6: io_setup(0x7, &(0x7f0000000a80)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, 0x0}]) 16:32:16 executing program 3: init_module(&(0x7f00000003c0)='\x1b\xd5\xebzF\xc78\x81\xd5\xfa\xc3F\xe1\xd2r\xe9\xb1y\xb3\xe4cc\x18{V\x17\xae\xddd\xe0\x16\x1e\x171\xa1\x7f\x99\n\x820U\xc8\xc3\xa9.\x9a\x1e\xc9\xf1R\xe9\xf7\xd54\x0fsTI\xdf\xec\xb2K\x99\xcaxp\xb7.\xcc\x98%n\xbd\xa5\x11\xa9\x86\x9d\xb2\x91k\x04\xd6/\xacz\xf4\xf3;\xed\x16\x06\xe5\xd2D\"\xc8\x15\xab\xe6\x18/L\b\xfc\xc8\x10I[\xd0\x95\"\\\xb6\xa4\x97~\x93\xe9\xad\x8c\xd7~\"\xdam\x83K\x0f\xdc\x04\x98=\xbdM[\xd9\xd7wM\xe8-\xf4\x89#J\xc4\x8dT/R\x84\x9d\x9c\xc6\xac\x00\x13\xc7\xe8\x87\xba\xa9\x8e\xcfZihHj\xed\x8b\xc4F\xf0\x14\x83;\xd5\x87nr\x83\xea@\xe7:\x14\xaa\x12c\xb8\x89\xecX\xaf\xbaf.\x04\x8e4A\xfb\n\\6\xaf\x93\x18\x17\xbb\xc8v\xd3/\x02.\xe5\xbe\x03R\xcap\x82\x19uq\xa5I\a@d6\x82\x96\x9b\x12\xf8=\xb3-\xc0\xae\xc7\xcb\x03T8\x93x\x10\xd1\x1bgA\x1e\xef\xcd \x87z^\x8a\x1ad\xd4/\xbf$\xd6]\xcdd\xb3\v\xd1\xb0\xd3\'\xf6\xc2f\xd5r', 0x39289, &(0x7f0000000380)='),(\xac\xf7\xee\xd4\x8b^&\xe2&[') 16:32:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan1\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) [ 184.770805] Invalid ELF header magic: != ELF 16:32:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='timerslack_ns\x00') write(r0, 0x0, 0x3c) 16:32:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="11", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 16:32:16 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x2}}) 16:32:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='timerslack_ns\x00') write(r0, 0x0, 0x3c) 16:32:16 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="96", 0x1) 16:32:16 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:16 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}}}, 0x6) 16:32:16 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x2}}) 16:32:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="11", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 16:32:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/192) 16:32:16 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}, 0x30}], 0x1}, 0x0) [ 185.143496] audit: type=1400 audit(1732811536.916:8): avc: denied { open } for pid=6240 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 185.152885] audit: type=1400 audit(1732811536.916:9): avc: denied { kernel } for pid=6240 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 185.166900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 16:32:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='timerslack_ns\x00') write(r0, 0x0, 0x3c) 16:32:17 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="96", 0x1) 16:32:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x2}}) 16:32:17 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}, 0x30}], 0x1}, 0x0) 16:32:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="11", 0x1, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 16:32:17 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}}}, 0x6) 16:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/192) [ 185.376610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 16:32:17 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:17 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="96", 0x1) 16:32:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x2}}) 16:32:17 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}, 0x30}], 0x1}, 0x0) [ 185.587683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 16:32:17 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}}}, 0x6) 16:32:17 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/192) 16:32:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/192) 16:32:17 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}, 0x30}], 0x1}, 0x0) 16:32:17 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="96", 0x1) 16:32:17 executing program 4: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:17 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 185.758466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 16:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/192) 16:32:17 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}}}, 0x6) 16:32:17 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:17 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280), 0x4) 16:32:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/192) 16:32:17 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:32:17 executing program 4: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:17 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:17 executing program 2: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 2: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280), 0x4) 16:32:18 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:32:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/192) 16:32:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 4: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 1: socket(0x27, 0x0, 0x0) 16:32:18 executing program 4: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@local}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:32:18 executing program 2: r0 = syz_io_uring_setup(0x4041, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1, &(0x7f00000003c0)=""/87, 0x57}, 0x1000}, {{&(0x7f0000000440)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/171, 0xab}, 0xb541}], 0x2, 0x0, &(0x7f0000001640)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 16:32:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280), 0x4) 16:32:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:32:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 16:32:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 16:32:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280), 0x4) 16:32:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000002740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 16:32:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000002740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 16:32:18 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 16:32:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') r1 = dup2(r0, r0) pread64(r1, &(0x7f0000000000)=""/42, 0x2a, 0x1) 16:32:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 16:32:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 16:32:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000004c0)) 16:32:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:32:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000002740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 16:32:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000000)="a3", 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x0, 0xbc87, 0x0, 0x0, 0x2, [{}, {}]}) 16:32:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 16:32:19 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 16:32:19 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 16:32:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 16:32:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000000)="a3", 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x0, 0xbc87, 0x0, 0x0, 0x2, [{}, {}]}) 16:32:19 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 16:32:19 executing program 0: r0 = io_uring_setup(0x680e, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1) 16:32:19 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000002740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 16:32:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') r1 = dup2(r0, r0) pread64(r1, &(0x7f0000000000)=""/42, 0x2a, 0x1) 16:32:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000004c0)) 16:32:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000000)="a3", 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x0, 0xbc87, 0x0, 0x0, 0x2, [{}, {}]}) 16:32:19 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 16:32:19 executing program 0: r0 = io_uring_setup(0x680e, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1) 16:32:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 16:32:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000004c0)) 16:32:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') r1 = dup2(r0, r0) pread64(r1, &(0x7f0000000000)=""/42, 0x2a, 0x1) 16:32:19 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 16:32:19 executing program 1: perf_event_open$cgroup(&(0x7f0000005880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:19 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 16:32:19 executing program 0: r0 = io_uring_setup(0x680e, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1) 16:32:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000000)="a3", 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x0, 0xbc87, 0x0, 0x0, 0x2, [{}, {}]}) 16:32:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000004c0)) 16:32:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') r1 = dup2(r0, r0) pread64(r1, &(0x7f0000000000)=""/42, 0x2a, 0x1) 16:32:19 executing program 1: perf_event_open$cgroup(&(0x7f0000005880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0xb544e7e85096ea5b, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "74463b4401a62f7ad7a5725928fb5f5118c8fd2ae12e42b86ede9e74d0ec9f27b1b8c3c21836a4d494093d12c2d9bb24c7c4f60475dd03b0e2885c26e089d7d2209562660b7356b03b7d69c83b1546c6"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x100}}, 0x0, 0x0, 0x38, 0x0, "935126b3c2cf399e6c05a998787606a0642a02c1996b010a4738bc52d457fc33b1f0a4d12b42d0486b4cfe186ef202da704669f8824d8060cbf2ba7da3ae26ac4fee343e855612c7eb3b8e983c54084e"}, 0xd8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private0, 0x28, r4}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x100, 0x20, 0x3a, r4, r5}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x100000001, 0x7}, {0x3f, 0x3, 0x8}, 0x5, 0x0, 0xbf34fa06ad07616f, 0x1, 0x7, 0x2}, {{@in6=@private2, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x2, 0x200, 0x7}}, 0xe8) r6 = socket$packet(0x11, 0x3, 0x300) dup3(r6, r2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r7, 0x4004662b, &(0x7f00000002c0)={0x0, 0x700000000}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000600)) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 16:32:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0a85320, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) 16:32:19 executing program 0: r0 = io_uring_setup(0x680e, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1) 16:32:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0a85320, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) 16:32:19 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) getxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=@known='security.selinux\x00', 0x0, 0x0) 16:32:19 executing program 1: perf_event_open$cgroup(&(0x7f0000005880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x28901, 0x0) close(r0) 16:32:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x8000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xf06) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x8000000000000}) 16:32:20 executing program 3: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0039724b0000e1f493ad6ada00c091502a9a7803e64ee8e0898a5fdd0fb89f0c4816a189214b4e574fc937afa302e6a39834512f8ea299dfbb75d7f8208c918eeeac8c957b53bfc4da9b5d9df12f3be696d3c117d6c2ae714a714885554ed7d257e286822d96965133bb0dbcd2d7942051b25f85642e18063e3ac73536879078c8358336d7bcde7891b0a29abd76d2d3ef2388c51332337c254202c44fdcef530783a0e7485a4480f15152c3ae1c53dca841"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfff, 0xed7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000300)=[{0x20, 0x0, 0x0, 0x80000}, {0x6}]}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x20202, 0xac) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) syncfs(r1) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20000) mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0) open_tree(r2, &(0x7f0000000140)='./file1\x00', 0x80001) [ 188.451737] hrtimer: interrupt took 40727 ns 16:32:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0xb544e7e85096ea5b, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "74463b4401a62f7ad7a5725928fb5f5118c8fd2ae12e42b86ede9e74d0ec9f27b1b8c3c21836a4d494093d12c2d9bb24c7c4f60475dd03b0e2885c26e089d7d2209562660b7356b03b7d69c83b1546c6"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x100}}, 0x0, 0x0, 0x38, 0x0, "935126b3c2cf399e6c05a998787606a0642a02c1996b010a4738bc52d457fc33b1f0a4d12b42d0486b4cfe186ef202da704669f8824d8060cbf2ba7da3ae26ac4fee343e855612c7eb3b8e983c54084e"}, 0xd8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private0, 0x28, r4}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x100, 0x20, 0x3a, r4, r5}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x100000001, 0x7}, {0x3f, 0x3, 0x8}, 0x5, 0x0, 0xbf34fa06ad07616f, 0x1, 0x7, 0x2}, {{@in6=@private2, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x2, 0x200, 0x7}}, 0xe8) r6 = socket$packet(0x11, 0x3, 0x300) dup3(r6, r2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r7, 0x4004662b, &(0x7f00000002c0)={0x0, 0x700000000}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000600)) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x11, &(0x7f0000000100), 0x4) 16:32:20 executing program 1: perf_event_open$cgroup(&(0x7f0000005880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:32:20 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) getxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=@known='security.selinux\x00', 0x0, 0x0) [ 208.285528] Bluetooth: hci1: command 0x0406 tx timeout [ 208.542097] Bluetooth: hci6: command 0x0406 tx timeout [ 208.543258] Bluetooth: hci2: command 0x0406 tx timeout [ 212.835761] watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz-executor.3:6449] [ 212.836474] Modules linked in: [ 212.836782] irq event stamp: 2372427 [ 212.837104] hardirqs last enabled at (2372426): [] irqentry_exit+0x3b/0x90 [ 212.838154] hardirqs last disabled at (2372427): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 212.840266] softirqs last enabled at (2372376): [] handle_softirqs+0x50c/0x770 [ 212.842033] softirqs last disabled at (2372381): [] __irq_exit_rcu+0xc4/0x100 [ 212.844007] CPU: 1 UID: 0 PID: 6449 Comm: syz-executor.3 Not tainted 6.12.0-next-20241128 #1 [ 212.846249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 212.846931] RIP: 0010:kcov_remote_start+0x2d3/0x5b0 [ 212.847384] Code: 02 00 00 49 c7 44 24 28 00 00 00 00 4c 89 e7 48 8d 35 00 00 00 00 e8 1c 21 de ff 48 85 ed 74 06 e8 02 f3 07 00 fb 48 83 c4 10 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 2e 23 35 03 e8 39 f1 07 00 e9 a2 [ 212.848872] RSP: 0018:ffff88806cf09c78 EFLAGS: 00000286 [ 212.849338] RAX: 000000000024332a RBX: 0000000000000000 RCX: 1ffffffff0fdfeb6 [ 212.849934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff815215de [ 212.850535] RBP: 0000000000000200 R08: 0000000000000001 R09: fffffbfff0fdddf1 [ 212.851134] R10: ffffffff87eeef8f R11: ffff88806cf09ff8 R12: ffff88806cf2da88 [ 212.851736] R13: ffff88806cf2da88 R14: 0000000000000000 R15: ffff88800b960e20 [ 212.852346] FS: 00007fb729bfb700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 212.853027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.853530] CR2: 00007f0bbad361c8 CR3: 000000003b056000 CR4: 0000000000350ef0 [ 212.854134] Call Trace: [ 212.854370] [ 212.854578] ? watchdog_timer_fn+0x3ee/0x510 [ 212.854998] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 212.855447] ? __hrtimer_run_queues+0x57c/0xa80 [ 212.855905] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 212.856367] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 212.856869] ? hrtimer_interrupt+0x369/0x830 [ 212.857311] ? __sysvec_apic_timer_interrupt+0xc2/0x330 [ 212.857790] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 212.858252] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.858766] ? kcov_remote_start+0x2ce/0x5b0 [ 212.859169] ? kcov_remote_start+0x2d3/0x5b0 [ 212.859576] ? srso_return_thunk+0x5/0x5f [ 212.859977] ieee80211_rx_list+0x5e6/0x2840 [ 212.860380] ? srso_return_thunk+0x5/0x5f [ 212.860783] ? tick_program_event+0xac/0x140 [ 212.861214] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 212.861661] ? ieee80211_rx_napi+0x97/0x3b0 [ 212.862077] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 212.862520] ? srso_return_thunk+0x5/0x5f [ 212.862913] ? trace_lock_acquire+0x13b/0x1b0 [ 212.863345] ? srso_return_thunk+0x5/0x5f [ 212.863740] ? lock_acquire+0x32/0xc0 [ 212.864090] ? ieee80211_rx_napi+0x97/0x3b0 [ 212.864511] ieee80211_rx_napi+0xdc/0x3b0 [ 212.864918] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 212.865367] ? skb_dequeue+0x12c/0x180 [ 212.865743] ieee80211_handle_queued_frames+0xd9/0x130 [ 212.866233] tasklet_action_common+0x235/0x3b0 [ 212.866659] ? workqueue_softirq_action+0x1a/0x170 [ 212.867108] handle_softirqs+0x1b1/0x770 [ 212.867498] __irq_exit_rcu+0xc4/0x100 [ 212.867866] irq_exit_rcu+0x9/0x20 [ 212.868206] sysvec_apic_timer_interrupt+0x70/0x80 [ 212.868666] [ 212.868880] [ 212.869095] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.869579] RIP: 0010:unwind_next_frame+0xc6e/0x2490 [ 212.870038] Code: 08 00 00 00 4c 89 ff 49 01 c6 4c 89 f6 e8 ca f1 ff ff 4d 8d 4f 40 84 c0 0f 84 a4 f6 ff ff 4c 89 f7 e8 b6 e9 ff ff 49 8d 7f 50 <48> 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c [ 212.871516] RSP: 0018:ffff88803c3c7598 EFLAGS: 00000202 [ 212.871982] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 212.872586] RDX: ffff88803c3c7e01 RSI: ffff88803c3c7ee0 RDI: ffff88803c3c7658 [ 212.873186] RBP: ffff88803c3c7660 R08: 0000000000000001 R09: ffff88803c3c7648 [ 212.873786] R10: 000000000003c001 R11: 0000000000026a91 R12: ffff88803c3c7668 [ 212.874390] R13: ffff88803c3c7650 R14: ffff88803c3c7ee0 R15: ffff88803c3c7608 [ 212.875024] ? unwind_next_frame+0xc6a/0x2490 [ 212.875438] ? do_mkdirat+0x1a4/0x350 [ 212.875802] ? kernel_text_address+0x11/0xc0 [ 212.876219] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 212.876718] arch_stack_walk+0x87/0xf0 [ 212.877122] ? __x64_sys_mkdirat+0x84/0xb0 [ 212.877523] stack_trace_save+0x8f/0xc0 [ 212.877895] ? __pfx_stack_trace_save+0x10/0x10 [ 212.878324] ? srso_return_thunk+0x5/0x5f [ 212.878725] ? kasan_save_stack+0x34/0x50 [ 212.879119] ? kasan_save_stack+0x24/0x50 [ 212.879513] ? __kasan_record_aux_stack+0x8c/0xa0 [ 212.879947] ? __call_rcu_common.constprop.0+0x6a/0xaa0 [ 212.880426] ? kfree+0x28e/0x480 [ 212.880778] ? __free_slab+0x10d/0x130 [ 212.881147] kasan_save_stack+0x24/0x50 [ 212.881525] ? kasan_save_stack+0x24/0x50 [ 212.881911] ? kasan_save_track+0x14/0x30 [ 212.882297] ? kasan_save_free_info+0x3a/0x60 [ 212.882711] ? __kasan_slab_free+0x38/0x50 [ 212.883110] ? kfree+0x132/0x480 [ 212.883454] ? __free_slab+0x10d/0x130 [ 212.883810] ? qlist_free_all+0x50/0x160 [ 212.884197] ? kasan_quarantine_reduce+0x19f/0x240 [ 212.884655] ? __kasan_slab_alloc+0x49/0x70 [ 212.885064] ? __kmalloc_node_noprof+0x191/0x4a0 [ 212.885497] ? alloc_slab_obj_exts+0x35/0x90 [ 212.885921] ? new_slab+0xbe/0x210 [ 212.886279] ? ___slab_alloc+0x8a8/0x1200 [ 212.886682] ? kmem_cache_alloc_lru_noprof+0x230/0x3c0 [ 212.887157] ? shmem_alloc_inode+0x27/0x50 [ 212.887543] ? alloc_inode+0x63/0x240 [ 212.887910] ? new_inode+0x1c/0x190 [ 212.888259] ? __shmem_get_inode+0x175/0xd90 [ 212.888676] ? shmem_mknod+0x64/0x250 [ 212.889031] ? shmem_mkdir+0x31/0x70 [ 212.889381] ? vfs_mkdir+0x291/0x4f0 [ 212.889746] ? do_mkdirat+0x1a4/0x350 [ 212.890110] ? __virt_addr_valid+0x2e8/0x5d0 [ 212.890523] ? srso_return_thunk+0x5/0x5f [ 212.890919] ? lock_release+0x20f/0x6f0 [ 212.891288] ? __pfx_lock_release+0x10/0x10 [ 212.891680] ? trace_lock_acquire+0x13b/0x1b0 [ 212.892106] ? srso_return_thunk+0x5/0x5f [ 212.892504] ? mark_held_locks+0x9e/0xe0 [ 212.892894] ? srso_return_thunk+0x5/0x5f [ 212.893289] ? lock_acquire+0x32/0xc0 [ 212.893637] ? __virt_addr_valid+0x1c6/0x5d0 [ 212.894058] ? srso_return_thunk+0x5/0x5f [ 212.894458] ? mark_held_locks+0x9e/0xe0 [ 212.894839] ? srso_return_thunk+0x5/0x5f [ 212.895238] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.895708] ? srso_return_thunk+0x5/0x5f [ 212.896112] ? __call_rcu_common.constprop.0+0x604/0xaa0 [ 212.896604] kasan_save_track+0x14/0x30 [ 212.896982] kasan_save_free_info+0x3a/0x60 [ 212.897378] __kasan_slab_free+0x38/0x50 [ 212.897767] kfree+0x132/0x480 [ 212.898098] ? __free_slab+0x10d/0x130 [ 212.898463] __free_slab+0x10d/0x130 [ 212.898807] qlist_free_all+0x50/0x160 [ 212.899187] kasan_quarantine_reduce+0x19f/0x240 [ 212.899627] __kasan_slab_alloc+0x49/0x70 [ 212.900020] __kmalloc_node_noprof+0x191/0x4a0 [ 212.900439] ? alloc_slab_obj_exts+0x35/0x90 [ 212.900881] alloc_slab_obj_exts+0x35/0x90 [ 212.901288] new_slab+0xbe/0x210 [ 212.901636] ___slab_alloc+0x8a8/0x1200 [ 212.902022] ? srso_return_thunk+0x5/0x5f [ 212.902420] ? shmem_alloc_inode+0x27/0x50 [ 212.902817] ? shmem_alloc_inode+0x27/0x50 [ 212.903214] ? kmem_cache_alloc_lru_noprof+0x230/0x3c0 [ 212.903680] ? srso_return_thunk+0x5/0x5f [ 212.904080] kmem_cache_alloc_lru_noprof+0x230/0x3c0 [ 212.904542] ? shmem_alloc_inode+0x27/0x50 [ 212.904948] shmem_alloc_inode+0x27/0x50 [ 212.905325] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 212.905755] alloc_inode+0x63/0x240 [ 212.906118] new_inode+0x1c/0x190 [ 212.906464] __shmem_get_inode+0x175/0xd90 [ 212.906866] shmem_mknod+0x64/0x250 [ 212.907218] shmem_mkdir+0x31/0x70 [ 212.907560] vfs_mkdir+0x291/0x4f0 [ 212.907923] do_mkdirat+0x1a4/0x350 [ 212.908272] ? __pfx_do_mkdirat+0x10/0x10 [ 212.908667] ? getname_flags.part.0+0x1c6/0x550 [ 212.909122] __x64_sys_mkdirat+0x84/0xb0 [ 212.909520] do_syscall_64+0xbf/0x1d0 [ 212.909912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.910391] RIP: 0033:0x7fb72c685b19 [ 212.910725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.912239] RSP: 002b:00007fb729bfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 212.912891] RAX: ffffffffffffffda RBX: 00007fb72c798f60 RCX: 00007fb72c685b19 [ 212.913488] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000008 [ 212.914090] RBP: 00007fb72c6dff6d R08: 0000000000000000 R09: 0000000000000000 [ 212.914723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.915352] R13: 00007fff5293785f R14: 00007fb729bfb300 R15: 0000000000022000 [ 212.915976] [ 212.916194] Sending NMI from CPU 1 to CPUs 0: [ 212.916606] NMI backtrace for cpu 0 [ 212.916647] CPU: 0 UID: 0 PID: 344 Comm: kworker/u9:7 Not tainted 6.12.0-next-20241128 #1 [ 212.916728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 212.916769] Workqueue: writeback wb_workfn (flush-8:0) [ 212.916871] RIP: 0010:smp_call_function_many_cond+0x419/0xf80 [ 212.916977] Code: 31 ff 83 e5 01 89 ee e8 65 6e 0b 00 85 ed 74 43 4d 89 ec 4c 89 ed 49 c1 ec 03 83 e5 07 4d 01 fc 83 c5 03 e8 19 6b 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 8c 09 00 00 8b 43 08 31 [ 212.917042] RSP: 0018:ffff888015f069f0 EFLAGS: 00000293 [ 212.917093] RAX: 0000000000000000 RBX: ffff88806cf41300 RCX: ffffffff8146987d [ 212.917139] RDX: ffff888039705280 RSI: ffffffff81469857 RDI: 0000000000000005 [ 212.917185] RBP: 0000000000000003 R08: 0000000000000001 R09: fffffbfff0fdddec [ 212.917230] R10: 0000000000000001 R11: 0000000000000128 R12: ffffed100d9e8261 [ 212.917274] R13: ffff88806cf41308 R14: 0000000000000001 R15: dffffc0000000000 [ 212.917329] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 212.917392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.917441] CR2: 00007f0bbaddb4d0 CR3: 000000000c100000 CR4: 0000000000350ef0 [ 212.917486] Call Trace: [ 212.917503] [ 212.917525] ? nmi_cpu_backtrace+0x179/0x260 [ 212.917616] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 212.917730] ? nmi_handle+0x1a6/0x560 [ 212.917842] ? smp_call_function_many_cond+0x419/0xf80 [ 212.917937] ? smp_call_function_many_cond+0x419/0xf80 [ 212.918031] ? default_do_nmi+0x64/0x1c0 [ 212.918108] ? exc_nmi+0x188/0x1c0 [ 212.918179] ? end_repeat_nmi+0xf/0x53 [ 212.918285] ? smp_call_function_many_cond+0x43d/0xf80 [ 212.918378] ? smp_call_function_many_cond+0x417/0xf80 [ 212.918473] ? smp_call_function_many_cond+0x419/0xf80 [ 212.918569] ? smp_call_function_many_cond+0x419/0xf80 [ 212.918668] ? smp_call_function_many_cond+0x419/0xf80 [ 212.918764] [ 212.918784] [ 212.918810] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 212.918899] ? __pfx_flush_tlb_func+0x10/0x10 [ 212.918983] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 212.919060] on_each_cpu_cond_mask+0x57/0xa0 [ 212.919156] kvm_flush_tlb_multi+0x1e9/0x320 [ 212.919256] ? __pfx_kvm_flush_tlb_multi+0x10/0x10 [ 212.919357] ? lock_release+0x20f/0x6f0 [ 212.919429] flush_tlb_mm_range+0x2f4/0x490 [ 212.919524] ptep_clear_flush+0x133/0x160 [ 212.919632] page_vma_mkclean_one.constprop.0+0x371/0x5e0 [ 212.919712] ? __pfx_page_vma_mkclean_one.constprop.0+0x10/0x10 [ 212.919787] ? srso_return_thunk+0x5/0x5f [ 212.919887] ? lock_acquire.part.0+0xeb/0x320 [ 212.919961] ? ret_from_fork_asm+0x1a/0x30 [ 212.920054] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 212.920125] ? srso_return_thunk+0x5/0x5f [ 212.920232] page_mkclean_one+0x189/0x250 [ 212.920298] ? __pfx_page_mkclean_one+0x10/0x10 [ 212.920382] ? srso_return_thunk+0x5/0x5f [ 212.920490] rmap_walk_file+0x31d/0x6a0 [ 212.920561] ? __pfx___traceiter_remove_migration_pte+0x10/0x10 [ 212.920691] folio_mkclean+0x20f/0x380 [ 212.920755] ? __pfx_folio_mkclean+0x10/0x10 [ 212.920820] ? lock_acquire+0x32/0xc0 [ 212.920886] ? __pfx_page_mkclean_one+0x10/0x10 [ 212.920952] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 212.921060] ? lock_is_held_type+0x9e/0x120 [ 212.921157] ? srso_return_thunk+0x5/0x5f [ 212.921256] ? inode_to_bdi+0x9c/0x140 [ 212.921358] folio_clear_dirty_for_io+0x142/0x6a0 [ 212.921482] mpage_submit_folio+0x7c/0x270 [ 212.921563] mpage_process_page_bufs+0x5fb/0x820 [ 212.921653] mpage_prepare_extent_to_map+0xc75/0x1280 [ 212.921774] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 212.921870] ? __create_object+0x59/0x80 [ 212.921972] ? srso_return_thunk+0x5/0x5f [ 212.922071] ? lock_release+0x20f/0x6f0 [ 212.922171] ? srso_return_thunk+0x5/0x5f [ 212.922270] ? kmem_cache_alloc_noprof+0x1a7/0x3d0 [ 212.922345] ? srso_return_thunk+0x5/0x5f [ 212.922445] ? ext4_ext_index_trans_blocks+0xa1/0x170 [ 212.922527] ext4_do_writepages+0xad4/0x30d0 [ 212.922652] ? srso_return_thunk+0x5/0x5f [ 212.922751] ? lock_acquire.part.0+0xeb/0x320 [ 212.922828] ? __pfx_ext4_do_writepages+0x10/0x10 [ 212.922929] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 212.923001] ? srso_return_thunk+0x5/0x5f [ 212.923100] ? trace_lock_acquire+0x13b/0x1b0 [ 212.923198] ? srso_return_thunk+0x5/0x5f [ 212.923304] ? srso_return_thunk+0x5/0x5f [ 212.923403] ? lock_is_held_type+0x9e/0x120 [ 212.923504] ext4_writepages+0x2f2/0x700 [ 212.923601] ? srso_return_thunk+0x5/0x5f [ 212.923703] ? __pfx_ext4_writepages+0x10/0x10 [ 212.923803] ? do_writepages+0x69f/0x810 [ 212.923888] ? lock_acquire+0x32/0xc0 [ 212.923952] ? do_writepages+0x598/0x810 [ 212.924026] ? __pfx_ext4_writepages+0x10/0x10 [ 212.924127] do_writepages+0x1aa/0x810 [ 212.924195] ? find_held_lock+0x2c/0x110 [ 212.924292] ? __pfx_do_writepages+0x10/0x10 [ 212.924363] ? __pfx_lock_release+0x10/0x10 [ 212.924429] ? __pfx_lock_release+0x10/0x10 [ 212.924494] ? trace_lock_acquire+0x13b/0x1b0 [ 212.924607] ? srso_return_thunk+0x5/0x5f [ 212.924707] ? lock_acquire+0x32/0xc0 [ 212.924772] ? srso_return_thunk+0x5/0x5f [ 212.924872] ? do_raw_spin_unlock+0x53/0x220 [ 212.924961] __writeback_single_inode+0x110/0xe30 [ 212.925054] writeback_sb_inodes+0x5b8/0xe50 [ 212.925150] ? __pfx___lock_acquire+0x10/0x10 [ 212.925221] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 212.925379] __writeback_inodes_wb+0xbe/0x270 [ 212.925474] wb_writeback+0x68a/0xa70 [ 212.925565] ? __pfx_wb_writeback+0x10/0x10 [ 212.925661] ? srso_return_thunk+0x5/0x5f [ 212.925760] ? get_nr_dirty_inodes+0x12a/0x1b0 [ 212.925865] wb_workfn+0x6c2/0xb50 [ 212.925952] ? process_one_work+0x861/0x1a10 [ 212.926051] ? __pfx_wb_workfn+0x10/0x10 [ 212.926147] ? srso_return_thunk+0x5/0x5f [ 212.926246] ? lock_acquire+0x32/0xc0 [ 212.926310] ? process_one_work+0x861/0x1a10 [ 212.926409] process_one_work+0x8ee/0x1a10 [ 212.926521] ? __pfx_process_one_work+0x10/0x10 [ 212.926614] ? srso_return_thunk+0x5/0x5f [ 212.926713] ? move_linked_works+0x172/0x270 [ 212.926833] ? srso_return_thunk+0x5/0x5f [ 212.926933] ? assign_work+0x196/0x240 [ 212.927025] worker_thread+0x674/0xe70 [ 212.927119] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.927201] ? srso_return_thunk+0x5/0x5f [ 212.927300] ? __pfx_worker_thread+0x10/0x10 [ 212.927396] kthread+0x2c2/0x3a0 [ 212.927456] ? srso_return_thunk+0x5/0x5f [ 212.927556] ? __pfx_kthread+0x10/0x10 [ 212.927622] ret_from_fork+0x48/0x80 [ 212.927717] ? __pfx_kthread+0x10/0x10 [ 212.927782] ret_from_fork_asm+0x1a/0x30 [ 212.927893] VM DIAGNOSIS: 16:32:44 Registers: info registers vcpu 0 RAX=000000000009296f RBX=0000000000000000 RCX=ffffffff8484fb07 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812b110a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6cba R10=ffff88806ce365d3 R11=0000000000000000 R12=ffffffff863f9f10 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84850aae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0bbaddb4d0 CR3=000000000c100000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f0672cab5e552a7a68b3dbae04089cf XMM02=43caf5d5125b4d4a0ef51cd8d3d997a4 XMM03=95a270018948f3a06491ca2edf96ac64 XMM04=000000c0019992200000000000ea89c0 XMM05=000000c0019992300000000000ea89c0 XMM06=000000c0019992400000000000ea89c0 XMM07=000000c0019992500000000000ea89c0 XMM08=231ce9f72017e38d974e7ef764c88993 XMM09=00000001000000000000000000000000 XMM10=0c0d0e0f08090a0b0405060700010203 XMM11=000000c001998c600000000000ea89c0 XMM12=e29a1ab6354ddd35567ff6584021ce23 XMM13=20f16eb3685a12f5311a57a8ccaf2157 XMM14=6c751b22ab61d5b03026ff9c4a53c310 XMM15=03a6f83798ee128d519a8367cf6edd68 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff826492d5 RDI=ffffffff8867b720 RBP=ffffffff8867b6e0 RSP=ffff88806cf09458 R8 =0000000000000000 R9 =ffffed1001d76046 R10=0000000000000031 R11=552031203a555043 R12=0000000000000031 R13=ffffffff8867b6e0 R14=0000000000000010 R15=ffffffff826492c0 RIP=ffffffff8264932d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb729bfb700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0bbad361c8 CR3=000000003b056000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000ff000000000000000000 XMM01=ff000000000001000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007fb72c76c7c800007fb72c76c7c0 XMM04=5091c000da6aad93f4e100004b723900 XMM05=41a8dc531caec35251f180445a48e7a0 XMM06=830753efdc4fc40242257c333213c588 XMM07=23efd3d276bd9aa2b09178debcd73683 XMM08=35c87890873635c73a3e06182e64855f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000